The tags on the source repo seem to run ahead of the actual released versions.

https://github.com/apache/tomcat/commit/d4351c504fb204c0687a047a948658af82669bf6

(Note from Tomcat committer: this is correct; we do this during development of version N+1 so that all builds include the N+1-dev build identifier. Actual releases include a build.properties.release file which do not appear in development as in https://github.com/apache/tomcat/commit/27c50670878728255730533129c4a53344191605. Note that tags are created in order to hold a vote, and so even then the release is not official until the vote has been closed and the result announced. The best place to look for release information is here: https://reporter.apache.org/wizard/statistics?tomcat#projectreleaseactivity)