Re: [VOTE] Release Apache Tomcat 11.0.25

On Wed, Aug 12, 2026 at 10:03 AM Mark Thomas <[email protected]> wrote:

> The proposed Apache Tomcat 11.0.25 release is now available for voting.
>
> The notable changes compared to 11.0.24 include:
>
> - Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
>    This attribute controls whether URLs and URL patterns provided in the
>    deployment descriptor (web.xml), annotations and/or their programmatic
>    equivalents are treated as being provided in URL-encoded form (i.e.
>    using %nn encoding) or in decoded form. The Servlet specification
>    requires that they are provided in decoded form. However, Tomcat has
>    historically treated them as if they are provided in encoded form. In
>    Tomcat 12, they will always be treated as if they are provided in
>    decoded form. This setting enables migration from encoded form to
>    decoded form on an application by application basis. This attribute
>    will be removed in Tomcat 12 where it will effectively be hard-coded
>    to true.
> - Require every HTTP/2 request to provide an authority (either an
>    :authority pseudo header or a Host header)
> - Change the default encryptionAlgorithm for the EncryptInterceptor to
>    AES/GCM/NoPadding. This is a breaking change for the
>    EncryptInterceptor.
>
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
>
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
> without changes. Java EE applications designed for Tomcat 9 and earlier
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
> will automatically convert them to Jakarta EE and copy them to the
> webapps directory. Applications using deprecated APIs may require
> further changes.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.25/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1600
> The tag is:
> https://github.com/apache/tomcat/tree/11.0.25
> cbe6e15ee81e2fc6232954292a80cca5d1e84009
>
> The proposed 11.0.25 release is:
> [ ] -1 Broken - do not release
> [x] +1 Stable - go ahead and release as 11.0.25
>

LGTM!


>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>