blob: 4b0707def854bacba052b75b4e154d81cdc80fd2 [file] [log] [blame]
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Apache TomEE</title>
<meta name="description"
content="Apache TomEE is a lightweight, yet powerful, JavaEE Application server with feature rich tooling." />
<meta name="keywords" content="tomee,asf,apache,javaee,jee,shade,embedded,test,junit,applicationcomposer,maven,arquillian" />
<meta name="author" content="Luka Cvetinovic for Codrops" />
<link rel="icon" href="../favicon.ico">
<link rel="icon" type="image/png" href="../favicon.png">
<meta name="msapplication-TileColor" content="#80287a">
<meta name="theme-color" content="#80287a">
<link rel="stylesheet" type="text/css" href="../css/normalize.css">
<link rel="stylesheet" type="text/css" href="../css/bootstrap.css">
<link rel="stylesheet" type="text/css" href="../css/owl.css">
<link rel="stylesheet" type="text/css" href="../css/animate.css">
<link rel="stylesheet" type="text/css" href="../fonts/font-awesome-4.1.0/css/font-awesome.min.css">
<link rel="stylesheet" type="text/css" href="../fonts/eleganticons/et-icons.css">
<link rel="stylesheet" type="text/css" href="../css/jqtree.css">
<link rel="stylesheet" type="text/css" href="../css/idea.css">
<link rel="stylesheet" type="text/css" href="../css/cardio.css">
<script type="text/javascript">
<!-- Matomo -->
var _paq = window._paq = window._paq || [];
/* tracker methods like "setCustomDimension" should be called before "trackPageView" */
/* We explicitly disable cookie tracking to avoid privacy issues */
_paq.push(['disableCookies']);
_paq.push(['trackPageView']);
_paq.push(['enableLinkTracking']);
(function () {
var u = "//matomo.privacy.apache.org/";
_paq.push(['setTrackerUrl', u + 'matomo.php']);
_paq.push(['setSiteId', '5']);
var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0];
g.async = true;
g.src = u + 'matomo.js';
s.parentNode.insertBefore(g, s);
})();
<!-- End Matomo Code -->
</script>
</head>
<body>
<div class="preloader">
<img src="../img/loader.gif" alt="Preloader image">
</div>
<nav class="navbar">
<div class="container">
<div class="row"> <div class="col-md-12">
<!-- Brand and toggle get grouped for better mobile display -->
<div class="navbar-header">
<button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1">
<span class="sr-only">Toggle navigation</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand" href="/" title="Apache TomEE">
<span>
<img
src="../img/apache_tomee-logo.svg"
onerror="this.src='../img/apache_tomee-logo.jpg'"
height="50"
>
</span>
</a>
</div>
<!-- Collect the nav links, forms, and other content for toggling -->
<div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1">
<ul class="nav navbar-nav navbar-right main-nav">
<li><a href="../docs.html">Documentation</a></li>
<li><a href="../community/index.html">Community</a></li>
<li><a href="../security/security.html">Security</a></li>
<li><a class="btn btn-accent accent-orange no-shadow" href="../download.html">Downloads</a></li>
</ul>
</div>
<!-- /.navbar-collapse -->
</div></div>
</div>
<!-- /.container-fluid -->
</nav>
<div id="main-block" class="container main-block">
<div class="row title">
<div class="col-md-12">
<div class='page-header'>
<h1>Apache TomEE 9.0.0 Release Notes</h1>
</div>
</div>
</div>
<div class="row">
<div class="col-md-12">
<div id="preamble">
<div class="sectionbody">
<div class="paragraph">
<p>Apache TomEE 9.0.0 has been released.</p>
</div>
<div class="paragraph">
<p>We are very proud to release Apache TomEE 9.0.0 It&#8217;s been
almost a year since we certified TomEE using a bytecode enhancement
approach. Even though it worked, it introduced a lot of restrictions
especially with tooling such as IDE, Arquillian, Embedded container, etc.</p>
</div>
<div class="paragraph">
<p>Thus, we started migrating the entire TomEE codebase to the new jakarta namespace
and 9.0.0 is the result of this work.</p>
</div>
<div class="paragraph">
<p>We fully pass the entire TCK for the Jakarta EE 9.1 Web Profile and - as a cherry on the cake - we decided to address a long time
request to support a newer version of MicroProfil. Thus, we are pleased to announce that TomEE 9.0.0 is fully MicroProfile 5.0 compliant.</p>
</div>
<div class="paragraph">
<p>In addition, we fixed a couple of bugs and did some dependency upgrades.</p>
</div>
<div class="paragraph">
<p>Thank you to everyone who contributed to this release, including all of our users and the people who submitted bug reports,
contributed code or documentation enhancements.</p>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_dependency_upgrade">Dependency upgrade</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4132">TOMEE-4132</a> commons-compress 1.22</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4127">TOMEE-4127</a> CXF 3.5.5</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4125">TOMEE-4125</a> CXF versions mitigate CVE-2022-46364 and CVE-2022-46363</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4081">TOMEE-4081</a> Jackson 2.13.4</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4107">TOMEE-4107</a> Jackson 2.14.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4131">TOMEE-4131</a> Jackson 2.14.1</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4109">TOMEE-4109</a> Velocity 2.3</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4082">TOMEE-4082</a> Woodstox 6.2.6</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4110">TOMEE-4110</a> Woodstox 6.4.0 (CVE-2022-40152)</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4111">TOMEE-4111</a> bcel component</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4103">TOMEE-4103</a> woodstox-core mitigate CVE-2022-40153</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_new_feature">New Feature</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4123">TOMEE-4123</a> Implement @AroundConstruct from Interceptor 1.2</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4068">TOMEE-4068</a> MicroProfile 5.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4069">TOMEE-4069</a> MicroProfile Config 3.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-3946">TOMEE-3946</a> MicroProfile JWT 2.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4070">TOMEE-4070</a> MicroProfile Fault Tolerance 4.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4071">TOMEE-4071</a> MicroProfile Health 4.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4072">TOMEE-4072</a> MicroProfile Metrics 4.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4050">TOMEE-4050</a> Retry and Refresh for MP JWT keys supplied via HTTP</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4073">TOMEE-4073</a> MicroProfile Rest Client 3.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4074">TOMEE-4074</a> MicroProfile OpenAPI 3.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4075">TOMEE-4075</a> MicroProfile OpenTracing 3.0</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4076">TOMEE-4076</a> Public Keys in OpenSSH format</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4077">TOMEE-4077</a> Public Keys in SSH2 format</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4078">TOMEE-4078</a> RSA keys PKCS 1 format</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4079">TOMEE-4079</a> Elliptic Curve JWS and JWE</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_bug">Bug</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4065">TOMEE-4065</a> LoginToContinue interceptor fails on custom auth mechanism</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4119">TOMEE-4119</a> TomEEJsonbProvider triggered for <strong>/</strong> mime types</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4135">TOMEE-4135</a> Unable to see TomEE version in Tomcat home page with Java 17</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4117">TOMEE-4117</a> MicroProfile OpenAPI not generating model</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_improvement">Improvement</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4124">TOMEE-4124</a> Remove timing of timing just for logging</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4080">TOMEE-4080</a> Improved Logging for Public and Private Key resolution</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_documentation">Documentation</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4104">TOMEE-4104</a> Documentation Website: XA DataSource Configuration: Bug in MySQL Sample Code</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-3733">TOMEE-3733</a> TCK Results page for website</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_sub_task">Sub-task</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-3950">TOMEE-3950</a> Support for JWT token cookies</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-3951">TOMEE-3951</a> JWT token groups claim is now optional</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-3952">TOMEE-3952</a> Deprecate RSA keys of 1024 bit length</p>
</li>
</ul>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_fixed_common_vulnerabilities_and_exposures_cves">Fixed Common Vulnerabilities and Exposures (CVEs)</h2>
<div class="sectionbody">
<div class="ulist compact">
<ul>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4125">TOMEE-4125</a> Update Apache CXF versions to mitigate CVE-2022-46364 and CVE-2022-46363</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4103">TOMEE-4103</a> Update woodstox-core to mitigate CVE-2022-40153</p>
</li>
<li>
<p><a href="https://issues.apache.org/jira/browse/TOMEE-4111">TOMEE-4111</a> Upgrade bcel component in TomEE</p>
</li>
</ul>
</div>
</div>
</div>
</div>
</div>
</div>
<div style="margin-bottom: 30px;"></div>
<footer>
<div class="container">
<div class="row">
<div class="col-sm-6 text-center-mobile">
<h3 class="white">Be simple. Be certified. Be Tomcat.</h3>
<h5 class="light regular light-white">"A good application in a good server"</h5>
<ul class="social-footer">
<li><a href="https://www.facebook.com/ApacheTomEE/"><i class="fa fa-facebook"></i></a></li>
<li><a href="https://twitter.com/apachetomee"><i class="fa fa-twitter"></i></a></li>
</ul>
<h5 class="light regular light-white">
<a href="../privacy-policy.html" class="white">Privacy Policy</a>
</h5>
</div>
<div class="col-sm-6 text-center-mobile">
<div class="row opening-hours">
<div class="col-sm-3 text-center-mobile">
<h5><a href="../latest/docs/" class="white">Documentation</a></h5>
<ul class="list-unstyled">
<li><a href="../latest/docs/admin/configuration/index.html" class="regular light-white">How to configure</a></li>
<li><a href="../latest/docs/admin/file-layout.html" class="regular light-white">Dir. Structure</a></li>
<li><a href="../latest/docs/developer/testing/index.html" class="regular light-white">Testing</a></li>
<li><a href="../latest/docs/admin/cluster/index.html" class="regular light-white">Clustering</a></li>
</ul>
</div>
<div class="col-sm-3 text-center-mobile">
<h5><a href="../latest/examples/" class="white">Examples</a></h5>
<ul class="list-unstyled">
<li><a href="../latest/examples/simple-cdi-interceptor.html" class="regular light-white">CDI Interceptor</a></li>
<li><a href="../latest/examples/rest-cdi.html" class="regular light-white">REST with CDI</a></li>
<li><a href="../latest/examples/ejb-examples.html" class="regular light-white">EJB</a></li>
<li><a href="../latest/examples/jsf-managedBean-and-ejb.html" class="regular light-white">JSF</a></li>
</ul>
</div>
<div class="col-sm-3 text-center-mobile">
<h5><a href="../community/index.html" class="white">Community</a></h5>
<ul class="list-unstyled">
<li><a href="../community/contributors.html" class="regular light-white">Contributors</a></li>
<li><a href="../community/social.html" class="regular light-white">Social</a></li>
<li><a href="../community/sources.html" class="regular light-white">Sources</a></li>
</ul>
</div>
<div class="col-sm-3 text-center-mobile">
<h5><a href="../security/index.html" class="white">Security</a></h5>
<ul class="list-unstyled">
<li><a href="https://apache.org/security" target="_blank" class="regular light-white">Apache Security</a></li>
<li><a href="https://apache.org/security/projects.html" target="_blank" class="regular light-white">Security Projects</a></li>
<li><a href="https://cve.mitre.org" target="_blank" class="regular light-white">CVE</a></li>
</ul>
</div>
</div>
</div>
</div>
<div class="row bottom-footer text-center-mobile">
<div class="col-sm-12 light-white">
<p>Copyright &copy; 1999-2022 The Apache Software Foundation, Licensed under the Apache License, Version 2.0. Apache TomEE, TomEE, Apache, the Apache feather logo, and the Apache TomEE project logo are trademarks of The Apache Software Foundation. All other marks mentioned may be trademarks or registered trademarks of their respective owners.</p>
</div>
</div>
</div>
</footer>
<!-- Holder for mobile navigation -->
<div class="mobile-nav">
<ul>
<li><a hef="../latest/docs/admin/index.html">Administrators</a>
<li><a hef="../latest/docs/developer/index.html">Developers</a>
<li><a hef="../latest/docs/advanced/index.html">Advanced</a>
<li><a hef="../community/index.html">Community</a>
</ul>
<a href="#" class="close-link"><i class="arrow_up"></i></a>
</div>
<!-- Scripts -->
<script src="../js/jquery-1.11.1.min.js"></script>
<script src="../js/owl.carousel.min.js"></script>
<script src="../js/bootstrap.min.js"></script>
<script src="../js/wow.min.js"></script>
<script src="../js/typewriter.js"></script>
<script src="../js/jquery.onepagenav.js"></script>
<script src="../js/tree.jquery.js"></script>
<script src="../js/highlight.pack.js"></script>
<script src="../js/main.js"></script>
</body>
</html>