Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 11, 2025

Bumps org.eclipse.jetty:jetty-bom from 12.0.15 to 12.0.23.

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.0.23

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #13303 - Improved logging and exception handling in HTTP2Producer.
  • #13300 - o.e.j.plus.jndi.Resources declared in eeX scope then linked via <resource-ref> or <resource-env-ref> in web.xml not found
  • #13299 - Race Condition in WebSocketConnection - Job failed: java.lang.IllegalStateException: FILLING_AND_PARSING
  • #13274 - 13287 Make Environment implementation thread-safe to prevent ConcurrentModificationException
  • #13268 - charset=null is automatically added when using Content-Type: application/problem+json in Servlet ee10
  • #13266 - Fix Typo in http.adoc (@​maarouf-yassine)
  • #13263 - NPE from SslEndPoint.isInputShutdown
  • #13261 - Improve handling of failed HTTP/2 requests
  • #13259 - org.eclipse.jetty.plus.jndi.Transaction should support javax.naming.Referenceable as a constructor option too.
  • #13234 - Regression in 12.0.21 on handling empty query parameters
  • #13232 - Regression in ee9/ee8 getRequestDispatcher() exceptions
  • #13209 - stop throwing ISE when complete() is called after abort()
  • #13201 - Fix ReadPendingException warning
  • #13196 - Download of large file may get stuck in an infinite loop (bug in IOResources.copy / Content.Source) (@​kohlschuetter)
  • #13190 - Introduce ability to decode and/or canonicalize URIs in a RewriteRule
  • #12818 - NPE with websocket java.lang.NullPointerException: Cannot invoke "org.eclipse.jetty.io.RetainableByteBuffer.hasRemaining()" because "this.networkBuffer" is null

12.0.22

Changelog

  • #13182 - Ignore bad cookie names in legacy CookieCutter
  • #13164 - ProxyServlet abort
  • #13161 - Change default stop timeout value in WebSocketClient
  • #13147 - Support maven.offline property in jetty-start, to control of download of maven files from remote repos during --add-modules
  • #13144 - Cross Context Dispatch with Async does not honor context
  • #13136 - Do not abort response in nested HttpChannelState.onError if sendError
  • #13135 - Allow onSuccess to abort Iterating Callback
  • #13131 - Surface received GOAWAY in HttpClient
  • #13128 - Merge back Release/12.0.21
  • #13126 - Fix shared blocking callback hang
  • #13098 - HTTP2 Server Error Handling is different than HTTP1
  • #13057 - InvalidPathException instead of MalformedURLException after switching to jetty12
  • #13013 - Rework websocket FrameFlusher's expiration
  • #12918 - NullPointerException with ServeAs requests (with FormAuthenticator)
  • #12659 - Use websocket over varying http protocols using a single client

12.0.21

Changelog

... (truncated)

Commits
  • 01a4119 Updating to version 12.0.23
  • 030d586 Fixing typo in release script
  • 5ac211c Race Condition in WebSocketConnection - Job failed: java.lang.IllegalStateExc...
  • a5dcbd0 Merge pull request #13303 from jetty/fix/jetty-12.0.x/improve-h2-producer-exc...
  • 5b5f82d Rework locked fields accesses in SslConnection (#13265)
  • 87f982c Merge pull request #13301 from jetty/jetty-12.0.x-13300-resource-ee-namespace
  • e179ee3 upgrade quiche to version 0.24.4
  • 6d3f292 Improved logging and exception handling in HTTP2Producer.
  • 05110ba Issue #13234 - empty query entries should be retained for Fields and Servlet ...
  • de14739 Issue #13300 check ee namespace for resource-ref, resource-env-ref
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.eclipse.jetty:jetty-bom](https://github.com/jetty/jetty.project) from 12.0.15 to 12.0.23.
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.0.15...jetty-12.0.23)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 11, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 7, 2025

Superseded by #124.

@dependabot dependabot bot closed this Aug 7, 2025
@dependabot dependabot bot deleted the dependabot/gradle/org.eclipse.jetty-jetty-bom-12.0.23 branch August 7, 2025 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants