Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps org.eclipse.jetty:jetty-bom from 9.4.51.v20230217 to 12.1.1.

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.1.1

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #13526 - BinaryStreamTest.testMoreThanLargestMessageOneByteAtATime() is flaky
  • #13521 - Rework BlockingArrayQueue growth strategy
  • #13506 - HTTP/2 CONTINUATION frames may cause connection close
  • #13500 - Add jetty-compression artifacts to jetty-bom
  • #13499 - Jetty 12.1 brotli linking problem
  • #13498 - Jetty 12.1.x Migration Guide
  • #13489 - OSGi package import problem with org.eclipse.jetty.http3.client.http
  • #13487 - Regression in Jetty 12.1.0: @​OnWebSocketFrame and @​OnWebSocketMessage can no longer coexist
  • #13485 - [jetty-http-spi] Add Https Implementation (@​SentryMan)
  • #13475 - jakarta Websocket served with h2 and timeouts disabled always times out after 30s
  • #13465 - Review invocation of UpgradeListener.onHandshakeResponse() in case of failures
  • #13464 - Automatic MultiPart cleanup for Jetty 12
  • #13457 - ClassCastException due to HashSet being used in a non thread-safe way
  • #13456 - use jdk25 instead of jdk24
  • #13447 - Apache jsp/el jars in 12.1.0 are not groupId prefixed (like they are in 12.0.x releases)
  • #13436 - AssertionError in MemoryEndPointPipe.MemoryEndPoint.fill()
  • #13409 - Jetty fails to discover WebFragments in Library Files on classpath
  • #13401 - CookieCompliance violation testing
  • #13398 - Improve LoginAuthenticators to handle Proxy-Authenticate (@​znight1020)
  • #13385 - Regression in javax.servlet.http.HttpServletResponse#setHeader since jetty 10
  • #13375 - WebSocketClient attempts to use HTTP/2 on servers without SETTINGS_ENABLE_CONNECT_PROTOCOL
  • #13346 - TCP half-close during WebSocket session close causes ClosedChannelException
  • #13341 - Complete WebSocket close handshake asynchronously
  • #13336 - HTTP/2 - Valid horizontal tab "\t" in http header is coverted into "?"
  • #12735 - Provide better documentation of JettyWebSocketServletContainerInitializer and jetty-${ee-version}-websocket-jetty-server modules
  • #12029 - OutputStreamContentSource.AsyncOutputStream rethrows already thrown exception

12.1.0

Introducing Jetty 12.1.0

New Features:

  • New Jakarta EE11 Server Environment
  • New Compression layer with support for gzip, brotli, and zstandard compression and decompression. Available on Server via a new CompressionHandler and HttpClient APIs.
  • New Server WebApp Deployment layer. Gone are the multiple scanners and multiple directories, now only 1 directory is scanned, along with support for Jetty Server Environment (ee8, ee9, ee10, ee11, etc) configuration files that apply to all webapps deployed in that environment.
  • New Jetty Start Modules for easier management of environment specific configurations (see start.jar --help for details)

Special Thanks to the following Eclipse Jetty community members

... (truncated)

Commits
  • b706895 Updating to version 12.1.1
  • 569496e Fixes #13466 - Lost WebSocket upgrade failure. (#13559)
  • 3a07bce Improved the I/O architecture documentation. (#13558)
  • c724f58 Issue #13447 use new artifactId with new names (#13510)
  • c0789c4 Improve calculation of HTTP/1 header size (#13537)
  • f01f404 Issue #12735 - restore some documentation for the servlet dependent Jetty Web...
  • f880653 Merge pull request #13486 from jetty/jetty-12.1.x-13465-WebSocketClientRespon...
  • 95d3783 #13489 remove internal types from signatures of publicly-defined APIs
  • 4ec3ad6 #13489 remove mistakenly exported internal package
  • 712decf Made sure the HTTP/2 client closes the request side in case of failed tunnel.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 8, 2025 11:31
@dependabot dependabot bot added java Pull requests that update Java code dependencies Pull requests that update a dependency file labels Sep 8, 2025
Bumps [org.eclipse.jetty:jetty-bom](https://github.com/jetty/jetty.project) from 9.4.51.v20230217 to 12.1.1.
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.51.v20230217...jetty-12.1.1)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/org.eclipse.jetty-jetty-bom-12.1.1 branch from cc5c924 to 3c4d4f8 Compare September 24, 2025 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants