• Prefer jcl variations throughout in favor of modern commons-logging.
• Drop tomcat 11 support back to java 17 requirements
• waffle-bom has been split into two boms: waffle-bom (javax based) and waffle-bom-jakarta (jakarta based). This was done to align how the libraries are set between namespaces within project.
• waffle-distro has been split into two distros, waffle-distro and waffle-distro-jakarta, same as done with bom
• demos split by namespace: javax vs jakarta
• Add waffle-shiro-jakarta support module
• Add waffle-spring-security7 support module
• Add waffle-spring-boot4 support module
• License header changed to use spdx MIT variation (still entirely MIT).

Previously old branches were held but they serve no real purpose. In order to keep the history without excess branches, the history has been rolled up into master with net zero merge changes. If necessary to need line 1.8.x, checkout the tag at this point and work from there.

Previously old branches were held but they serve no real purpose. In order to keep the history without excess branches, the history has been rolled up into master with net zero merge changes. If necessary to need line 1.7.x, checkout the tag at this point and work from there.

• Library refresh only

• Drop support for tomcat 8.5 which ended support as previously noted with release 3.4.0
• Correct spring boot filter 2 logback usage
• Fix module name in spring boot 3
• Move demo servlet spec to 4
• Add fallback for caffeine cache in case where service loader fails to work
• Bump site to 2.0 (ie doxia 2)
• Update dependencies and plugins

• Requires java 11
• Add tomcat 11 support
• Jetty 12 for both javax (ee8) and jakarta (ee10)
• Shiro 2.0 support

See https://github.com/Waffle/waffle/blob/master/CHANGELOG.md for details.

Support for spring security 6 and spring boot 3.

See https://github.com/Waffle/waffle/blob/master/CHANGELOG.md for details.

See https://github.com/Waffle/waffle/blob/master/CHANGELOG.md for details.

See https://github.com/Waffle/waffle/blob/master/CHANGELOG.md for details.

This release is just library patches over 3.1.0 to ensure log4j2 / logback vulnerabilities do not show in the tree at all.

• Introduction of waffle-tomcat10 module
• Introduction of waffle-jna-jakarta module for usage with jakarta package rename direct usage
• #956: Fix DelegatingNegotiateSecurityFilter @cmolodo - Fixes #453