Skip to content

Conversation

@dependabot-preview
Copy link
Contributor

Bumps jetty.version from 9.4.34.v20201102 to 11.0.2.
Updates jetty-server from 9.4.34.v20201102 to 11.0.2

Release notes

Sourced from jetty-server's releases.

11.0.2

Changelog

⚠️ Important Security related Changes

Other Changes

  • #4275 - Path Normalization/Traversal - Context Matching
  • #5828 - Allow to create a WebSocketContainer passing HttpClient
  • #5832 - Ctrl-C after jetty:run produces NoClassDefFoundError
  • #5835 - Review Durable Filters, Servlets and Listeners
  • #5977 - Cache-Control header set by a filter is override by the value from DefaultServlet configuration
  • #5994 - QueuedThreadPool "free" threads
  • #5996 - ERROR : No module found to provide logback-impl for logback-access{enabled}
  • #5999 - HttpURI ArrayIndexOutOfBounds
  • #6001 - Ambiguous URI legacy compliance mode
  • #6008 - Allow absolute paths to be provided in start.ini for request log directory.
  • #6011 - OSGi Cannot start Jetty with osgi.boot - Configurations add wrong method taken
  • #6020 - Review Jetty Maven Plugin scanning defaults
  • #6021 - Standardize Path resolution in XmlConfiguration
  • #6024 - Error starting jetty-10: Provider org.eclipse.jetty.websocket.javax.client.JavaxWebSocketShutdownContainer not found
  • #6026 - the jvm DEBUG flag is not working org.eclipse.jetty.LEVEL=DEBUG
  • #6034 - SslContextFactory may select a wildcard certificate during SNI selection when a more specific SSL certificate is present
  • #6037 - Review logging modules for j.u.l.
  • #6063 - Allow override of hazelcast version when using module
  • #6076 - Embedded Jetty throws null pointer exception
  • #6082 - SslConnection compacting
  • #6085 - Jetty keeps Sessions in use after "Duplicate valid session cookies" Message

11.0.1

Changelog

  • This release addresses and resolves CVE-2020-27223
  • #5993 - Change more modules to glassfish-jstl
  • #5941 - Use jakarta.servlet.jsp.jstl version 2 implementation from Eclipse Glassfish
  • #5901 - Starting Jetty with JPMS produces warnings about Servlet resources not found
  • #5761 - Remove unneeded dependencies from apache-jsp module
  • #5759 - Update jakarta transaction, mail and injection apis
  • #5752 - Fix Servlet 5 Schema redirects

11.0.0

Eclipse Jetty 11.x Highlights

  • Jetty 11.x has a minimum Java requirement of Java 11.
  • Jetty 11.x modules are proper JPMS modules with module-info.class.
  • Jetty 11.x supports the following technology specs (from the Jakarta EE 9 effort):

... (truncated)

Commits
  • 14ed9a5 Updating to version 11.0.2
  • 61b5e1a revert back to 11.0.2-SNAPSHOT
  • 03f6a31 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
  • b68a5fe Merge pull request #6107 from eclipse/jetty-10.0.x-JavaxWebSocketContainerPro...
  • 47ec9b1 Modify SecureClientContainerExample to use the new getContainer(HttpClient) m...
  • a86a0c2 Add static utility methods on container to add and remove beans.
  • 57779c6 Make the HttpClient getContainer method static on JavaxWebSocketClientContain...
  • e1f2f8c Updating to version 11.0.3-SNAPSHOT
  • 0a126e2 Updating to version 11.0.2
  • e04e226 Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
  • Additional commits viewable in compare view

Updates jetty-servlet from 9.4.34.v20201102 to 11.0.2

Release notes

Sourced from jetty-servlet's releases.

11.0.2

Changelog

⚠️ Important Security related Changes

Other Changes

  • #4275 - Path Normalization/Traversal - Context Matching
  • #5828 - Allow to create a WebSocketContainer passing HttpClient
  • #5832 - Ctrl-C after jetty:run produces NoClassDefFoundError
  • #5835 - Review Durable Filters, Servlets and Listeners
  • #5977 - Cache-Control header set by a filter is override by the value from DefaultServlet configuration
  • #5994 - QueuedThreadPool "free" threads
  • #5996 - ERROR : No module found to provide logback-impl for logback-access{enabled}
  • #5999 - HttpURI ArrayIndexOutOfBounds
  • #6001 - Ambiguous URI legacy compliance mode
  • #6008 - Allow absolute paths to be provided in start.ini for request log directory.
  • #6011 - OSGi Cannot start Jetty with osgi.boot - Configurations add wrong method taken
  • #6020 - Review Jetty Maven Plugin scanning defaults
  • #6021 - Standardize Path resolution in XmlConfiguration
  • #6024 - Error starting jetty-10: Provider org.eclipse.jetty.websocket.javax.client.JavaxWebSocketShutdownContainer not found
  • #6026 - the jvm DEBUG flag is not working org.eclipse.jetty.LEVEL=DEBUG
  • #6034 - SslContextFactory may select a wildcard certificate during SNI selection when a more specific SSL certificate is present
  • #6037 - Review logging modules for j.u.l.
  • #6063 - Allow override of hazelcast version when using module
  • #6076 - Embedded Jetty throws null pointer exception
  • #6082 - SslConnection compacting
  • #6085 - Jetty keeps Sessions in use after "Duplicate valid session cookies" Message

11.0.1

Changelog

  • This release addresses and resolves CVE-2020-27223
  • #5993 - Change more modules to glassfish-jstl
  • #5941 - Use jakarta.servlet.jsp.jstl version 2 implementation from Eclipse Glassfish
  • #5901 - Starting Jetty with JPMS produces warnings about Servlet resources not found
  • #5761 - Remove unneeded dependencies from apache-jsp module
  • #5759 - Update jakarta transaction, mail and injection apis
  • #5752 - Fix Servlet 5 Schema redirects

11.0.0

Eclipse Jetty 11.x Highlights

  • Jetty 11.x has a minimum Java requirement of Java 11.
  • Jetty 11.x modules are proper JPMS modules with module-info.class.
  • Jetty 11.x supports the following technology specs (from the Jakarta EE 9 effort):

... (truncated)

Commits
  • 14ed9a5 Updating to version 11.0.2
  • 61b5e1a revert back to 11.0.2-SNAPSHOT
  • 03f6a31 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
  • b68a5fe Merge pull request #6107 from eclipse/jetty-10.0.x-JavaxWebSocketContainerPro...
  • 47ec9b1 Modify SecureClientContainerExample to use the new getContainer(HttpClient) m...
  • a86a0c2 Add static utility methods on container to add and remove beans.
  • 57779c6 Make the HttpClient getContainer method static on JavaxWebSocketClientContain...
  • e1f2f8c Updating to version 11.0.3-SNAPSHOT
  • 0a126e2 Updating to version 11.0.2
  • e04e226 Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Bumps `jetty.version` from 9.4.34.v20201102 to 11.0.2.

Updates `jetty-server` from 9.4.34.v20201102 to 11.0.2
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.34.v20201102...jetty-11.0.2)

Updates `jetty-servlet` from 9.4.34.v20201102 to 11.0.2
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.34.v20201102...jetty-11.0.2)

Signed-off-by: dependabot-preview[bot] <[email protected]>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Apr 22, 2021
@dependabot-preview
Copy link
Contributor Author

Superseded by #208.

@dependabot-preview dependabot-preview bot deleted the dependabot/maven/jetty.version-11.0.2 branch May 24, 2021 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant