Proposal: Upgrade Jetty from 9.4.58.v20250814 to Jetty 12.x

[guptas6est]

Hello,

While reviewing dependencies for CVE remediation, I noticed that Pulsar currently uses Jetty 9.4.58.v20250814, which is approaching end-of-support. The Jetty project has moved to the 12.x series, built on Jakarta EE 10, and it provides improved security, performance, and long-term maintenance.

I’d like to open a discussion on whether the community is considering or willing to upgrade Jetty to 12.x in upcoming Pulsar versions.
Would the community be open to exploring or planning this upgrade in future?

Thanks!

[lhotari]

Yes, it's been planned, issue is #22939. I have a large WIP branch at lhotari#190 with the port to Jetty 12, but it's not complete.

[guptas6est]

Thank you @lhotari for your reply

[lhotari]

Jetty 12.1.x upgrade PR in review #25100 .
Mailing list: https://lists.apache.org/thread/3nlhk95yqb40dgw4n5z6rgd8gyo46jzy