10.0.14

Special Thanks to the following Eclipse Jetty community members

• @pzygielo (Piotrek Żygieło)
• @jluehe (jluehe)
• @dzoech (Dominik Zöchbauer)

Changelog

• #9344 - Cleanup Multipart handling for CVE-2023-26048
• #9343 - URI Host Mismatch with optional Compliance modes
• #9339 - Cleanup Cookie Cutter handling for CVE-2023-26049
• #9337 - LowResourceMonitor.getReasons should include detailed reason instead of hard-coded message (@jluehe)
• #9334 - Better support for Cookie RFC 2965 compliance
• #9285 - ContextHandler sends redirect on BaseResponse instead of Wrapped Response object from Handler chain
• #9283 - Configurable Unsafe Host Header Behaviors
• #9188 - Log as info exceptions from server after sending stop with StopMojo.
• #9183 - ConnectHandler may close the connection instead of sending 200 OK
• #9128 - Do not execute any phase for maven plugin :start (@pzygielo)
• #9119 - Wrong value of javax.servlet.forward.context_path attribute
• #9092 - Use ASM Bom
• #9059 - IteratingCallback not serializing close() and failed()
• #9055 - PathMappings optimizations
• #7650 - QueuedThreadPool: Stopped without executing or closing null (@dzoech)

Dependencies

• #9242 - Bump infinispan-bom to 11.0.17.Final
• #9359 - Bump maven.version to 3.9.0
• #9102 - Bump org.apache.aries.spifly.dynamic.bundle to 1.3.6
• #9098 - Bump org.eclipse.osgi to 3.18.200
• #9106 - Bump org.eclipse.osgi.services to 3.11.100
• #9097 - Bump protostream to 4.6.0.Final
• #9367 - Bump tycho-p2-repository-plugin to 3.0.2

9.4.51.v20230217

Sponsored Release

This is a release of the End of Community Support Jetty 9.x series that was sponsored by a support contract from Webtide.com

Changelog

• #9352 - Update / Fix CookieCutter
• #9345 - Backport Multipart Fix for CVE-2023-26048
• #9352 - Backport Cookie Parsing Fix for CVE-2023-26049

Dependencies

• #9269 - Bump ant.version to 1.10.13
• #9370 - Bump asciidoctorj-diagram to 2.2.4
• #9364 - Bump eclipse-jarsigner-plugin to 1.4.2
• #9251 - Bump infinispan.version to 11.0.17.Final
• #9247 - Bump maven-checkstyle-plugin to 3.2.1
• #9267 - Bump maven-dependency-plugin to 3.5.0
• #9365 - Bump maven-deploy-plugin to 3.1.0
• #9252 - Bump maven-enforcer-plugin to 3.2.1
• #9363 - Bump maven-invoker-plugin to 3.5.0
• #9266 - Bump maven-plugin-plugin to 3.7.1
• #9263 - Bump maven.plugin-tools.version to 3.7.1
• #9256 - Bump maven.resolver.version to 1.9.4
• #9368 - Bump maven.surefire.plugin.version to 3.0.0-M9
• #9362 - Bump maven.version to 3.9.0
• #9100 - Bump org.apache.aries.spifly.dynamic.bundle to 1.3.6
• #9103 - Bump org.eclipse.osgi to 3.18.200
• #9110 - Bump org.eclipse.osgi.services to 3.11.100
• #9262 - Bump spring-beans to 5.3.25

11.0.13

Special Thanks to the following Eclipse Jetty community members

• @janvojt (Jan Vojt)
• @joschi (Jochen Schalanda)
• @leonchen83 (Baoyi Chen)
• @cowwoc (Gili Tzabari)
• @Vlatombe (Vincent Latombe)

Changelog

• #9006 - WebSocket Message InputStream read() returns signed byte
• #8913 - Review Jetty XML syntax to allow calling JDK methods
• #8905 - GzipHandler fails to set Vary header on 304 responses
• #8900 - Improved documentation about virtual threads.
• #8897 - Update Conditional request handling for RFC7232
• #8895 - Generate downloadable version of javadocs documentation in website deploy script
• #8863 - Provide a possibility to name virtual threads
• #8810 - ArrayRetainableByteBufferPool inefficiently calculates bucket indices
• #8786 - KeyStoreScanner is not able to monitor a symlink file and always resolves to the target.
• #8779 - CompactPathRule drops query section on use
• #8770 - Review whether to send request body in redirects
• #8753 - Starting HttpClient with destinationIdleTimeout set throws NPE. (@janvojt)
• #8750 - AbstractProxyServlet.onServerResponseHeaders does not support headers with empty values
• #8743 - Add log.isDebugEnabled() to reduce string allocation (@leonchen83)
• #8721 - jetty:effective-web-xml doesn't generate quickstart information for web fragment jars that contain META-INF/resources
• #8716 - Multiple Host header values handled poorly
• #8712 - ELContextCleaner no longer needed.
• #8688 - Fix traversal bug on extraction of bad jar/zip files during jetty-start
• #8682 - expand jetty properties when generating dry-run command line
• #8678 - Jetty client is not responding to GO_AWAY packet received from (Jetty) Server and continue to send traffic on same connection
• #8628 - Pseudo restore PathMappings.getMatch(String) for backwards compat reasons
• #8623 - Use AutoLock in InputStreamResponseListener
• #8600 - Allow to pass instances of ClientConfig and Config to Hazelcast data store factory (@Vlatombe)
• #8591 - Indicate units of HttpClient properties (@cowwoc)
• #8558 - Idle timeout occured sometimes on HTTP/2 client with InputStreamResponseListener
• #8536 - HotSwapHandler race condition
• #8473 - add getter for the WebSocketUpgradeHandler configuration
• #8460 - Log or throw exception if DefaultSessionIdManager is used but has not been started.
• #8330 - Persistent OpenId sessions can throw IllegalStateException
• #7993 - HttpClient idleTimeout configuration being ignored/overridden
• #7286 - WebSocket write can time out even if the frame / callback has not been failed.
• #7117 - Timeout with Expect 100 continue when using ProxyServlet

Dependencies

• #8794 - Bump asm.version to 9.4
• #8799 - Bump commons-compress to 1.22
• #8656 - Bump google-cloud-datastore to 2.11.4
• #8673 - Bump grpc-core to 1.49.2
• #8638 - Bump hawtio-default to 2.15.2
• #8985 - Bump httpcore to 4.4.16
• #8664 - Bump infinispan-bom to 11.0.16.Final
• #8796 - Bump jboss-logmanager to 2.1.19.Final
• #8952 - Bump jnr-constants to 0.10.4
• #8605 - Bump log4j2 to 2.19.0
• #8798 - Bump logback-core to 1.4.4
• #8658 - Bump mariadb-java-client to 3.0.8
• #8640 - Bump org.eclipse.osgi to 3.18.100
• #8642 - Bump org.eclipse.osgi.services to 3.11.0
• #8662 - Bump org.eclipse.osgi.util to 3.7.100
• #8655 - Bump protostream to 4.5.0.Final
• #8603 - Bump slf4j to version 2.0.5 (@joschi)
• #8652 - Bump tycho-p2-repository-plugin to 3.0.0
• #8637 - Bump wildfly-elytron to 2.0.0.Final

10.0.13

Special Thanks to the following Eclipse Jetty community members

• @janvojt (Jan Vojt)
• @joschi (Jochen Schalanda)
• @leonchen83 (Baoyi Chen)
• @cowwoc (Gili Tzabari)
• @Vlatombe (Vincent Latombe)

Changelog

• #9006 - WebSocket Message InputStream read() returns signed byte
• #8913 - Review Jetty XML syntax to allow calling JDK methods
• #8905 - GzipHandler fails to set Vary header on 304 responses
• #8900 - Improved documentation about virtual threads.
• #8897 - Update Conditional request handling for RFC7232
• #8895 - Generate downloadable version of javadocs documentation in website deploy script
• #8863 - Provide a possibility to name virtual threads
• #8810 - ArrayRetainableByteBufferPool inefficiently calculates bucket indices
• #8786 - KeyStoreScanner is not able to monitor a symlink file and always resolves to the target.
• #8779 - CompactPathRule drops query section on use
• #8770 - Review whether to send request body in redirects
• #8753 - Starting HttpClient with destinationIdleTimeout set throws NPE. (@janvojt)
• #8750 - AbstractProxyServlet.onServerResponseHeaders does not support headers with empty values
• #8743 - Add log.isDebugEnabled() to reduce string allocation (@leonchen83)
• #8721 - jetty:effective-web-xml doesn't generate quickstart information for web fragment jars that contain META-INF/resources
• #8716 - Multiple Host header values handled poorly
• #8712 - ELContextCleaner no longer needed.
• #8688 - Fix traversal bug on extraction of bad jar/zip files during jetty-start
• #8682 - expand jetty properties when generating dry-run command line
• #8678 - Jetty client is not responding to GO_AWAY packet received from (Jetty) Server and continue to send traffic on same connection
• #8628 - Pseudo restore PathMappings.getMatch(String) for backwards compat reasons
• #8623 - Use AutoLock in InputStreamResponseListener
• #8600 - Allow to pass instances of ClientConfig and Config to Hazelcast data store factory (@Vlatombe)
• #8591 - Indicate units of HttpClient properties (@cowwoc)
• #8558 - Idle timeout occured sometimes on HTTP/2 client with InputStreamResponseListener
• #8536 - HotSwapHandler race condition
• #8473 - add getter for the WebSocketUpgradeHandler configuration
• #8460 - Log or throw exception if DefaultSessionIdManager is used but has not been started.
• #8330 - Persistent OpenId sessions can throw IllegalStateException
• #7993 - HttpClient idleTimeout configuration being ignored/overridden
• #7286 - WebSocket write can time out even if the frame / callback has not been failed.
• #7117 - Timeout with Expect 100 continue when using ProxyServlet

Dependencies

• #8794 - Bump asm.version to 9.4
• #8799 - Bump commons-compress to 1.22
• #8656 - Bump google-cloud-datastore to 2.11.4
• #8673 - Bump grpc-core to 1.49.2
• #8638 - Bump hawtio-default to 2.15.2
• #8985 - Bump httpcore to 4.4.16
• #8664 - Bump infinispan-bom to 11.0.16.Final
• #8796 - Bump jboss-logmanager to 2.1.19.Final
• #8952 - Bump jnr-constants to 0.10.4
• #8605 - Bump log4j2 to 2.19.0
• #8942 - Downgrade Logback to 1.3.5 for Jetty 10.0.x
• #8603 - Bump slf4j to 2.0.5 (@joschi)
• #8658 - Bump mariadb-java-client to 3.0.8
• #8640 - Bump org.eclipse.osgi to 3.18.100
• #8642 - Bump org.eclipse.osgi.services to 3.11.0
• #8662 - Bump org.eclipse.osgi.util to 3.7.100
• #8655 - Bump protostream to 4.5.0.Final
• #8637 - Bump wildfly-elytron to 2.0.0.Final

12.0.0.alpha3

Changelog

• #9007 - Improved locking for HttpReceiver.ContentSource.
• #8999 - Overuse of FileID.isArchive() and inability to deal with packed jars without .jar extension
• #8998 - Cleanup of TypeUtil and ContextHandler stop/start
• #8980 - jetty-12.0.x WebappClassloader addJars(Resource) incorrectly transforms into a CombinedResource
• #8975 - Jetty 12 - rename getBaseResponse() to getServletContextResponse()
• #8940 - Converted writeTrailers to a static method
• #8935 - Re-enable DefaultServletRangesTest and fix byte ranges for ee10
• #8934 - Jetty-12 Rewrite RuleProcessor
• #8933 - Mutable server MimeTypes
• #8928 - Cleanup ContextHandler
• #8927 - Jetty 12 - Fix GzipHandler handling of chunked and Content-Length
• #8923 - Update FileID.getExtension() behaviors to match new JDK 20 Path.getExtension() behaviors
• #8921 - Normalization of resources incorrect for quickstart in jetty-12
• #8919 - Jetty 12 mimetype cleanup
• #8914 - Add debug logging to SerializedInvoker
• #8909 - Jetty 12 recycle servlet channel
• #8893 - Re-enable and fix StatisticsServletTest for ee9
• #8890 - use modify-sources-plugin release version 1.0.2
• #8886 - Changes to Resource no longer support custom url schemes.
• #8861 - Jetty 12 - General cleanup of URIUtil
• #8858 - Jetty 12 - Review MovedContextHandler
• #8789 - Jetty 12 - use JVM provided null OutputStream
• #8781 - Jetty 12 - Alternate TryPathsHandler based on Request.Processor existence
• #8771 - Jetty 12 - Fix demo-ee10 LikeJettyXml (and testcase)
• #8767 - Refactor and improvements to HttpContent Factories
• #8762 - Experiment with lock free AdaptiveExecutionStrategy
• #8760 - Restored server push functionality.
• #8749 - Jetty 12 - request.getContext().getContextPath() should return full context, not just last one
• #8748 - Jetty 12 - Introduce PathMappingsHandler
• #8744 - jetty-12: Update to jasper 10.1.1
• #8742 - Re-enable and fix websocket tests for Jetty 12 ee9 and ee10
• #8741 - Jetty 12 - Remove start slash cleanup from resolve(String)
• #8735 - ResourceHandler set base resource as string
• #8734 - Jetty 12 - Simplification of aliases in PathResource (Take 2)
• #8726 - Jetty 12 - Improve ErrorProcessor to handle error pages
• #8725 - Make Client's Request and Response abort() fully async
• #8722 - Jetty 12 - Re-enabled distribution tests that were disabled.
• #8714 - Jetty 12 - Re-enable some disabled session tests.
• #8711 - ResourceCollection should not have a path
• #8702 - Jetty 12 - Resource resolve() and newResource() return null on resources that do not exist

9.4.50.v20221201

Sponsored Release

This is a release of the End of Community Support Jetty 9.x series that was sponsored by a support contract from Webtide.com

Changelog

• #8774 - Added SizeLimitHandler
• #8678 - Jetty client is not responding to GO_AWAY packet received from (Jetty) Server and continue to send traffic on same connection

Dependencies

• #8826 - Bump infinispan to 11.0.16.Final
• #8847 - Bump jboss-logmanager to 2.1.19.Final
• #8849 - Bump jboss-threads to 3.5.0.Final
• #8961 - Bump jnr-constants to 0.10.4
• #8951 - Bump protostream to 4.4.4.Final
• #8989 - Bump spring-beans to 5.3.24
• #8949 - Bump testcontainers to 1.17.6
• #8828 - Bump wildfly-elytron to 2.0.0.Final

12.0.0.alpha2

Changelog

• #8718 - Moved FastCGIProxyServlet in ee9 to FastCGIProxyHandler in core.
• #8708 - unwrap exception until we get the first non ServletException, as this can be wrap of wrap of wrap when using ContextHandlerCollection cherry-pick of #7803
• #8705 - Jetty 12 - Re-enabled RequestLog tests.
• #8703 - fix ee8-websocket-javax.mod file for jetty 12
• #8701 - Forward port of PR #7778 to jetty-12.0.x.
• #8692 - Jetty 12 - Remove deprecated methods from QoSFilter
• #8691 - Jetty 12 - Fix typo "octect" -> "octet"
• #8689 - Fix jaas demos
• #8686 - move flatten mojo configuration in top pom, fix boms and remove non needed content
• #8685 - [Jetty 12] Made WebSocket over HTTP/2 work.
• #8630 - Jetty 12 - Restrict ResourceCollection to only hold directory entries
• #8626 - Renamed ServletContextRequest.getBaseRequest() to getServletContextRequest()
• #8625 - Fixes the case where HTTP/2 readData() was returning EOF
• #8621 - Fix Caching ContentFactories in Jetty-12
• #8620 - Introduced [Callback|Promise]Completable.with(Consumer) to simplify u…
• #8615 - Restored interim responses functionality (100 Continue, 102 Processing, 103 Early Hints)
• #8614 - Jetty 12 : QuickStart generation based on Path, usage based on Resource
• #8611 - Jetty 12 : Descriptor cleanup
• #8610 - Jetty 12 : ResourceFactory.of(WebAppContext) to WebAppContext.getResourceFactory()
• #8609 - Jetty 12 : XmlAppendable use Charset, not String
• #8606 - Jetty 12: restore scope listeners functionality
• #8602 - Jetty 12 - Improving URIUtil.addPathQuery behavior + adding tests
• #8598 - Complete TODO to fix WebSocket RemoteEndpoint API in Jetty 12
• #8595 - Jetty 12 : precompressed content support for ResourceService
• #8589 - Jetty 12 - Improve FileID and use where appropriate
• #8573 - Jetty 12 - Delay Resource Alias calculation until it's requested/needed
• #8471 - Jetty 12 : ResourceListing produces XHTML (and is validated in test cases)
• #8448 - incomplete Blocking.Callback and write errors
• #7891 - Better Servlet PathMappings for Regex

12.0.0.alpha1

Special Thanks to the following Eclipse Jetty community members

• @MoonLord-LM (MoonLord-LM)

Changelog

• #8548 - Fix the StatisticsServlet for Jetty-12 EE10
• #8547 - re-enabling and fixing some tests for Jetty-12
• #8540 - Maven pom is not correct for org.eclipse.jetty/infinispan-embedded and org.eclipse.jetty/infinispan-remote (@MoonLord-LM)
• #8491 - jetty 12.0.x error unwrap servlet exception
• #8490 - add module configuration for demo handler
• #8474 - Jetty 12 : Resource API Review
• #8436 - Jetty 12 : More testing for Resource alias

9.4.49.v20220914

End of Life Notice

• #7958 - Jetty 9.4.x is now at End of Community Support. (See issue for details)

Changelog

• #8578 - getRequestURL can append "null" if getRequestURI is unspecified in an authority-form request-target
• #8493 - Review HTTP client feature setRemoveIdleDestinations

Dependencies

• #8253 - Bump google-cloud-datastore to 2.9.1
• #8233 - Bump jna to 5.12.1
• #8242 - Bump mariadb-java-client to 3.0.6
• #8238 - Bump maven-enforcer-plugin to 3.1.0
• #8230 - Bump maven.version to 3.8.6
• #8246 - Bump org.eclipse.osgi to 3.18.0
• #8245 - Bump testcontainers.version to 1.17.3

11.0.12

Special Thanks to the following Eclipse Jetty community members

• @MoonLord-LM (MoonLord-LM)

Changelog

• #8497 - jetty-bom/11.0.11 depends on jetty-slf4j-impl/10.0.8-SNAPSHOT that cause 404 error (@MoonLord-LM)

Dependencies

• #8389 - Bump avro to 1.11.1
• #8239 - Bump checkstyle to 10.3.1
• #8300 - Bump google-cloud-datastore to 2.10.1
• #8508 - Bump grpc-core to 1.49.0
• #8249 - Bump jakarta.annotation-api to 2.1.1
• #8506 - Bump jboss-threads to 3.5.0.Final
• #8254 - Bump jna-jpms to 5.12.1
• #8529 - Bump mariadb-java-client to 3.0.7
• #8371 - Bump maven-assembly-plugin to 3.4.2
• #8520 - Bump maven-checkstyle-plugin to 3.2.0
• #8248 - Bump maven-enforcer-plugin to 3.1.0
• #8377 - Bump maven-install-plugin to 3.0.1
• #8528 - Bump maven-javadoc-plugin to 3.4.1
• #8368 - Bump maven-resources-plugin to 3.3.0
• #8244 - Bump maven.version to 3.8.6
• #8308 - Bump spotbugs-maven-plugin to 4.7.1.0
• #8309 - Bump tycho-p2-repository-plugin to 2.7.4
• #8369 - Bump wildfly-elytron to 1.20.0.Final