[ANN] Apache Tomcat 11.0.25 Available

The Apache Tomcat team announces the immediate availability of Apache 
Tomcat 11.0.25.

Apache Tomcat 11 is an open source software implementation of the 
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta 
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

The notable changes compared to 11.0.24 include:

- Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
   This attribute controls whether URLs and URL patterns provided in the
   deployment descriptor (web.xml), annotations and/or their programmatic
   equivalents are treated as being provided in URL-encoded form (i.e.
   using %nn encoding) or in decoded form. The Servlet specification
   requires that they are provided in decoded form. However, Tomcat has
   historically treated them as if they are provided in encoded form. In
   Tomcat 12, they will always be treated as if they are provided in
   decoded form. This setting enables migration from encoded form to
   decoded form on an application by application basis. This attribute
   will be removed in Tomcat 12 where it will effectively be hard-coded
   to true.
- Require every HTTP/2 request to provide an authority (either an
   :authority pseudo header or a Host header)
- Change the default encryptionAlgorithm for the EncryptInterceptor to
   AES/GCM/NoPadding. This is a breaking change for the
   EncryptInterceptor.

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-11.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-11.cgi

Migration guides from Apache Tomcat 9.0.x and 10.1.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team