Skip to content

Bump version.jetty from 12.0.30 to 12.1.9#181

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/version.jetty-12.1.9
Open

Bump version.jetty from 12.0.30 to 12.1.9#181
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/version.jetty-12.1.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown
Contributor

Bumps version.jetty from 12.0.30 to 12.1.9.
Updates org.eclipse.jetty:jetty-bom from 12.0.30 to 12.1.9

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.1.9

Changelog

  • #14972 - Jetty 12.1.8 jetty-home has lib/*-config.jar files
  • #14913 - Upgrade to Quiche version 0.28.0
  • #14870 - Refactor compliance checks
  • #14853 - CombinedResource.getRealURI() returns null when multiple members exist, causing 404 for all static resources
  • #14846 - NPE in MimeTypes$Mutable.getMimeByExtension on startup with web-fragment with mime mapping
  • #14824 - FileSystemPool doesn't always own its filesystems
  • #14821 - Websocket IllegalStateException ('Demand already fulfilled') since Jetty 12.1
  • #14805 - HTTP/3 server crashes on quiche_header_info
  • #14646 - Regression in Jetty 12.1: Invalid UTF-8 exception for application/x-www-form-urlencoded; charset=iso-8859-1
  • #14564 - Jetty 12.1.x TLS connections hang after several requests with internal HTTPS self-requests
  • #14541 - Jetty HTTP Client - setMaxRequestHeadersSize resulting in java.lang.OutOfMemoryError
  • #14196 - Using passivation with eviction: HttpServletRequest.getSession() may return null due to race-condition
  • #12110 - Request Authority checks needed
  • #8876 - Jetty 12 - JMX-ify HttpContent.Factory implementations

12.1.8

Special Thanks to the following Eclipse Jetty community members

Changelog

  • 14757 Fixes for JASPI isMandatory, authType and isAuthenticationRequest params - Addresses CVE-2026-5795
  • #14752 - Jetty 12.1 Violation of RFC9113 with Host and :authority headers
  • #14747 - Revert usage of SLF4J2 fluent APIs
  • #14732 - possible race condition in jetty 12.x code
  • #14694 - Sync jetty-ee11 with jetty-ee10
  • #14689 - ThreadIdPool.take() bottlenecks QueuedThreadPool.tryExecute()
  • #14687 - Destinations don't keep track of redirections.
  • #14685 - CachingHttpContentFactory#getContent may return null if httpContent size is not set
  • #14651 - Retain negative Max-Age cookie attribute
  • #14494 - Review use of CharsetStringBuilder subclasses
  • #14431 - ServletContainerInitializers are always excluded when used with absolute-ordering
  • #14332 - Complete mess with idleTimeout
  • #13685 - Infinite loop on Content.copy() with Content.Source.from(... , Path, ) when Path has size 0.
  • #13513 - Make MemoryEndPoint use RBB.DynamicCapacity (@​afarber)
  • #10906 - Add Slf4j ConsoleRequestLog (JettySlf4jRequestLog) module

12.1.7

Special Thanks to the following Eclipse Jetty community members

Changelog

... (truncated)

Commits
  • b1fb145 Updating to version 12.1.9
  • 6ca6c9a Fixes #14564 - Jetty 12.1.x TLS connections hang after several requests with ...
  • 98524be Fixes #14541 - Jetty HTTP Client - setMaxRequestHeadersSize resulting in java...
  • d0c3b5f Fixes #14972 - Jetty 12.1.8 jetty-home has lib/*-config.jar files
  • 3e5a4da Fixes #12110 - Request Authority checks needed. (#14970)
  • 650e6f6 Merge pull request #14969 from jetty/fix/jetty-12.1.x/UriUtilCleanup
  • ade27ce Various cleanups for URIUtil
  • b4fafbc Issue #14196 fix race in session eviction
  • 87bc532 Fix imports in DispatcherTest
  • cb8fceb Fixed newlines in the expected response.
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.ee9:jetty-ee9-bom from 12.0.30 to 12.1.9

Release notes

Sourced from org.eclipse.jetty.ee9:jetty-ee9-bom's releases.

12.1.9

Changelog

  • #14972 - Jetty 12.1.8 jetty-home has lib/*-config.jar files
  • #14913 - Upgrade to Quiche version 0.28.0
  • #14870 - Refactor compliance checks
  • #14853 - CombinedResource.getRealURI() returns null when multiple members exist, causing 404 for all static resources
  • #14846 - NPE in MimeTypes$Mutable.getMimeByExtension on startup with web-fragment with mime mapping
  • #14824 - FileSystemPool doesn't always own its filesystems
  • #14821 - Websocket IllegalStateException ('Demand already fulfilled') since Jetty 12.1
  • #14805 - HTTP/3 server crashes on quiche_header_info
  • #14646 - Regression in Jetty 12.1: Invalid UTF-8 exception for application/x-www-form-urlencoded; charset=iso-8859-1
  • #14564 - Jetty 12.1.x TLS connections hang after several requests with internal HTTPS self-requests
  • #14541 - Jetty HTTP Client - setMaxRequestHeadersSize resulting in java.lang.OutOfMemoryError
  • #14196 - Using passivation with eviction: HttpServletRequest.getSession() may return null due to race-condition
  • #12110 - Request Authority checks needed
  • #8876 - Jetty 12 - JMX-ify HttpContent.Factory implementations

12.1.8

Special Thanks to the following Eclipse Jetty community members

Changelog

  • 14757 Fixes for JASPI isMandatory, authType and isAuthenticationRequest params - Addresses CVE-2026-5795
  • #14752 - Jetty 12.1 Violation of RFC9113 with Host and :authority headers
  • #14747 - Revert usage of SLF4J2 fluent APIs
  • #14732 - possible race condition in jetty 12.x code
  • #14694 - Sync jetty-ee11 with jetty-ee10
  • #14689 - ThreadIdPool.take() bottlenecks QueuedThreadPool.tryExecute()
  • #14687 - Destinations don't keep track of redirections.
  • #14685 - CachingHttpContentFactory#getContent may return null if httpContent size is not set
  • #14651 - Retain negative Max-Age cookie attribute
  • #14494 - Review use of CharsetStringBuilder subclasses
  • #14431 - ServletContainerInitializers are always excluded when used with absolute-ordering
  • #14332 - Complete mess with idleTimeout
  • #13685 - Infinite loop on Content.copy() with Content.Source.from(... , Path, ) when Path has size 0.
  • #13513 - Make MemoryEndPoint use RBB.DynamicCapacity (@​afarber)
  • #10906 - Add Slf4j ConsoleRequestLog (JettySlf4jRequestLog) module

12.1.7

Special Thanks to the following Eclipse Jetty community members

Changelog

... (truncated)

Commits
  • b1fb145 Updating to version 12.1.9
  • 6ca6c9a Fixes #14564 - Jetty 12.1.x TLS connections hang after several requests with ...
  • 98524be Fixes #14541 - Jetty HTTP Client - setMaxRequestHeadersSize resulting in java...
  • d0c3b5f Fixes #14972 - Jetty 12.1.8 jetty-home has lib/*-config.jar files
  • 3e5a4da Fixes #12110 - Request Authority checks needed. (#14970)
  • 650e6f6 Merge pull request #14969 from jetty/fix/jetty-12.1.x/UriUtilCleanup
  • ade27ce Various cleanups for URIUtil
  • b4fafbc Issue #14196 fix race in session eviction
  • 87bc532 Fix imports in DispatcherTest
  • cb8fceb Fixed newlines in the expected response.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `version.jetty` from 12.0.30 to 12.1.9.

Updates `org.eclipse.jetty:jetty-bom` from 12.0.30 to 12.1.9
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.0.30...jetty-12.1.9)

Updates `org.eclipse.jetty.ee9:jetty-ee9-bom` from 12.0.30 to 12.1.9
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.0.30...jetty-12.1.9)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.eclipse.jetty.ee9:jetty-ee9-bom
  dependency-version: 12.1.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants