The Apache Wicket PMC is proud to announce Apache Wicket 8.20.0!

Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at https://wicket.apache.org

Final release of Wicket 8

This is the final release of Wicket 8. With this release the 8.x branch has reached end of life: there will be no further 8.x releases, not even for security fixes. Wicket now releases a new major version every three months, with a long-term support release once a year. Read about our new release cadence and support policy and see the upgrade options.

We use semantic versioning for the development of Wicket, and as such no API breaks are present in this release compared to 8.0.0.

New and noteworthy

  • Vulnerable dependencies have been updated (WICKET-7199)

Using this release

With Apache Maven update your dependency to (and don’t forget to update any other dependencies on Wicket projects to the same version):

<dependency>
    <groupId>org.apache.wicket</groupId>
    <artifactId>wicket-core</artifactId>
    <version>8.20.0</version>
</dependency>

Or download and build the distribution yourself, or use our convenience binary package you can find here:

Upgrading from earlier versions

If you upgrade from 8.y.z this release is a drop in replacement. If you come from a version prior to 8.0.0, please read our Wicket 8 migration guide found at

Now that Wicket 8 has reached end of life, plan your move to Wicket 10, our long-term support release, supported until July 2027. For upgrade options see:

Have fun!

— The Wicket team

========================================================================

The signatures for the source release artefacts:

Signature for apache-wicket-8.20.0.zip:

-----BEGIN PGP SIGNATURE-----
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=OG79
-----END PGP SIGNATURE-----

Signature for apache-wicket-8.20.0.tar.gz:

-----BEGIN PGP SIGNATURE-----
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=HXzu
-----END PGP SIGNATURE-----

========================================================================

This Release

CHANGELOG for 8.20.0:

Bug
  • [WICKET-7199] - Vulnerable dependencies need to be updated
Task
  • [GH-1699] - Include GitHub issues in the release notes built by build-changelog.sh
  • [GH-1708] - build-versions.py fails on Python 3 and misses the experimental modules