From d7b9cadc38825c78d2197f2ce63b8d91492b6b5e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 31 Mar 2026 17:47:23 +0000
Subject: [PATCH] chore(deps): bump tomcat.version from 9.0.113 to 11.0.20

Bumps `tomcat.version` from 9.0.113 to 11.0.20.

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.113 to 11.0.20

Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.113 to 11.0.20

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.113 to 11.0.20

Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.113 to 11.0.20

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 11.0.20

Updates `org.apache.tomcat:tomcat-jasper` from 10.1.50 to 11.0.20

Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.50 to 11.0.20

---
updated-dependencies:
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 11.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
  dependency-version: 11.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
  dependency-version: 11.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 11.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat:tomcat-jasper
  dependency-version: 11.0.20
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: org.apache.tomcat:tomcat-jasper-el
  dependency-version: 11.0.20
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml                     | 2 +-
 samples/web-jakarta/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 39afff6fe0..33e12dcb53 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
         <jcache.api.version>1.1.1</jcache.api.version>
         <jdk.version>11</jdk.version>
         <jetty.version>9.4.58.v20250814</jetty.version>
-        <tomcat.version>9.0.113</tomcat.version>
+        <tomcat.version>11.0.20</tomcat.version>
         <tomcat10.version>10.1.50</tomcat10.version>
         <owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
         <!-- Don't change this version without also changing the shiro-quartz and shiro-features
diff --git a/samples/web-jakarta/pom.xml b/samples/web-jakarta/pom.xml
index 043d6c3eec..5f7ab645b1 100644
--- a/samples/web-jakarta/pom.xml
+++ b/samples/web-jakarta/pom.xml
@@ -33,7 +33,7 @@
 
     <properties>
         <meecrowave.version>1.2.15</meecrowave.version>
-        <tomcat.version>${tomcat10.version}</tomcat.version>
+        <tomcat.version>11.0.20</tomcat.version>
         <jacoco.skip>true</jacoco.skip>
     </properties>