I've upgraded to trac-0.12 and all the plugins to the latest available. Everything still seems to work 😃
I've also ditched OpenID for the time being as some spammers were still getting through. I still have trouble getting the AccountManager trac plugin to work well, so I've gone back to the trac spam filter plugin, with captcha support enabled. We'll see how this works.