Re: [VOTE] Release Apache Tomcat 11.0.25

Mark,

Thanks for RM'ing.

On 8/12/26 10:02 AM, Mark Thomas wrote:
> The proposed Apache Tomcat 11.0.25 release is now available for voting.
> 
> The notable changes compared to 11.0.24 include:
> 
> - Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
>    This attribute controls whether URLs and URL patterns provided in the
>    deployment descriptor (web.xml), annotations and/or their programmatic
>    equivalents are treated as being provided in URL-encoded form (i.e.
>    using %nn encoding) or in decoded form. The Servlet specification
>    requires that they are provided in decoded form. However, Tomcat has
>    historically treated them as if they are provided in encoded form. In
>    Tomcat 12, they will always be treated as if they are provided in
>    decoded form. This setting enables migration from encoded form to
>    decoded form on an application by application basis. This attribute
>    will be removed in Tomcat 12 where it will effectively be hard-coded
>    to true.
> - Require every HTTP/2 request to provide an authority (either an
>    :authority pseudo header or a Host header)
> - Change the default encryptionAlgorithm for the EncryptInterceptor to
>    AES/GCM/NoPadding. This is a breaking change for the
>    EncryptInterceptor.
> 
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
> 
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 11 
> without changes. Java EE applications designed for Tomcat 9 and earlier 
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat 
> will automatically convert them to Jakarta EE and copy them to the 
> webapps directory. Applications using deprecated APIs may require 
> further changes.
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.25/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1600
> The tag is:
> https://github.com/apache/tomcat/tree/11.0.25
> cbe6e15ee81e2fc6232954292a80cca5d1e84009
> 
> The proposed 11.0.25 release is:
> [ ] -1 Broken - do not release
> [ ] +1 Stable - go ahead and release as 11.0.25
+1 for stable release

The build is 100% reproducible on MacOS aarch64, and the unit tests pass 
(with a note about org.apache.tomcat.util.net.ocsp.TestOcspSoftFail 
failing with an unexpected Exception on the first test-run).

Details:

* Environment
*  Java (build):    openjdk version "25.0.4" 2026-07-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.4+7 (build 25.0.4+7-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.4+7 (build 25.0.4+7-LTS, mixed mode, sharing)
*  Java (test):     openjdk version "25.0.4" 2026-07-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.4+7 (build 25.0.4+7-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.4+7 (build 25.0.4+7-LTS, mixed mode, sharing)
*  Ant:             Apache Ant(TM) version 1.10.17 compiled on April 6 2026
*  OS:              Darwin 25.3.0 arm64
*  cc:              Apple clang version 21.0.0 (clang-2100.1.1.101)
*  make:            GNU Make 3.81
*  OpenSSL:         OpenSSL 3.6.3 9 Jun 2026 (Library: OpenSSL 3.6.3 9 
Jun 2026)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-11.0.25.zip
* Valid GPG signature for apache-tomcat-11.0.25.zip
* Valid SHA-512 signature for apache-tomcat-11.0.25.tar.gz
* Valid GPG signature for apache-tomcat-11.0.25.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.25.exe
* Valid GPG signature for apache-tomcat-11.0.25.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.25.exe
* Valid SHA512 signature for apache-tomcat-11.0.25-src.zip
* Valid GPG signature for apache-tomcat-11.0.25-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.25-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.25-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.ocsp.TestOcspSoftFail.NIO2.txt
* org.apache.tomcat.util.net.TestPQC.NIO.txt
* org.apache.tomcat.util.net.TestPQC.NIO2.txt

-chris