build(deps): bump jetty-servlet from 9.4.27.v20200227 to 11.0.6 #28

Closed

dependabot[bot] wants to merge 1 commit from dependabot/gradle/org.eclipse.jetty-jetty-servlet-11.0.6 into helma-🐜

dependabot[bot] commented

2021-07-07 09:06:56 +00:00

(Migrated from github.com)

Bumps jetty-servlet from 9.4.27.v20200227 to 11.0.6.

Release notes

Sourced from jetty-servlet's releases.

11.0.6

Changelog

#6473 - Improve alias checking in PathResource

#6468 - Revert logic in Request.setMetaData & clear emptySegment on HttpUri.clear()

#6464 - Wrong files/lib definitions in certain *-capture.mod files?

#6447 - Deprecate support for UTF16 encoding in URIs

#6426 - Update to spifly 1.3.3

#6425 - Update to asm 9.1

#6418 - Bad and/or missing Require-Capability for osgi.serviceloader

#6410 - Ensure Jetty IO uses SocketAddress instead of InetSocketAddress

#6407 - Malformed scheme logical expression check in WebSocket ClientUpgradeRequest

#6394 - Review osgi manifests within Jetty 11

#6376 - Cleanups for SslClientCertAuthenticator.

#6375 - Always check XML Set elements with property attribute

#6353 - Rename EWYK The AdaptiveExecutionStrategy

11.0.5

Changelog

#6392 - Review accidental xml config changes

#6379 - Reduce contention in all ByteBufferPool implementations

#6354 - org.slfj dependency imports packages at 2.0

#6329 - Regression on graceful shutdown default in Jetty 10

#6302 - Treat empty path segments are ambiguous.

#4772 - Jetty WebSocket API onMessage annotation does not support partial messages.

11.0.4

Special Thanks to the following Eclipse Jetty community members

@tjwatson (Thomas Watson)

Changelog

#6354 - org.slfj dependency imports packages at 2.0 (@tjwatson)

#6347 - session-store-gcloud module broken logging dependency

#6330 - CustomRequestLog is missing HTTP version format option

#6305 - Optimise ContextHandler.isProtectedTarget

#6285 - HTTP2 client: IllegalStateException: Cannot release an already released entry

#6276 - Support non-standard domains in SNI and X509

#6268 - Warnings about "unable to parse form content" are not helpful for troubleshooting

#6118 - Display a warning when Hazelcast configuration does not contain Jetty session serializer

#6114 - Jetty Deploy scan / symlink behavior is broken

#6112 - Jetty logging service file leaking to web applications

11.0.3

Changelog

This release resolves CVE-2021-28169

#3764 DeprecationWarning Decorator

... (truncated)

Commits

6946943 Updating to version 11.0.6
4d2648a Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
c753ca0 #6455 disable MaxDuration mechanism in testConnectionMaxUsage as it clashes w...
d1aeaf7 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
bc0fbbb Revert logic in Request.setMetaData, clear emptySegment on HttpUri.clear() (#...
d13bd9b Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
4673846 Compliance modes documentation (#6312)
c1b6e30 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
0b96734 Merge pull request #6465 from eclipse/jetty-10.0.x-6464-log4j1-download-location
d233f3b Issue #6447 - Deprecate support for UTF16 encoding in URIs (#6457)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jetty-servlet](https://github.com/eclipse/jetty.project) from 9.4.27.v20200227 to 11.0.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/jetty.project/releases">jetty-servlet's releases</a>.</em></p> <blockquote> <h2>11.0.6</h2> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6473">#6473</a> - Improve alias checking in PathResource</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6468">#6468</a> - Revert logic in Request.setMetaData & clear emptySegment on HttpUri.clear()</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6464">#6464</a> - Wrong files/lib definitions in certain *-capture.mod files?</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6447">#6447</a> - Deprecate support for UTF16 encoding in URIs</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6426">#6426</a> - Update to spifly 1.3.3</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6425">#6425</a> - Update to asm 9.1</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6418">#6418</a> - Bad and/or missing Require-Capability for osgi.serviceloader</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6410">#6410</a> - Ensure Jetty IO uses SocketAddress instead of InetSocketAddress</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6407">#6407</a> - Malformed scheme logical expression check in WebSocket ClientUpgradeRequest</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6394">#6394</a> - Review osgi manifests within Jetty 11</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6376">#6376</a> - Cleanups for SslClientCertAuthenticator.</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6375">#6375</a> - Always check XML <code>Set</code> elements with <code>property</code> attribute</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6353">#6353</a> - Rename EWYK The AdaptiveExecutionStrategy</li> </ul> <h2>11.0.5</h2> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6392">#6392</a> - Review accidental xml config changes</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6379">#6379</a> - Reduce contention in all <code>ByteBufferPool</code> implementations</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - org.slfj dependency imports packages at 2.0</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6329">#6329</a> - Regression on graceful shutdown default in Jetty 10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6302">#6302</a> - Treat empty path segments are ambiguous.</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/4772">#4772</a> - Jetty WebSocket API onMessage annotation does not support partial messages.</li> </ul> <h2>11.0.4</h2> <h1>Special Thanks to the following Eclipse Jetty community members</h1> <ul> <li><a href="https://github.com/tjwatson"><code>@tjwatson</code></a> (Thomas Watson)</li> </ul> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - org.slfj dependency imports packages at 2.0 (<a href="https://github.com/tjwatson"><code>@tjwatson</code></a>)</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6347">#6347</a> - session-store-gcloud module broken logging dependency</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6330">#6330</a> - CustomRequestLog is missing HTTP version format option</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6305">#6305</a> - Optimise <code>ContextHandler.isProtectedTarget</code></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6285">#6285</a> - HTTP2 client: IllegalStateException: Cannot release an already released entry</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6276">#6276</a> - Support non-standard domains in SNI and X509</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6268">#6268</a> - Warnings about "unable to parse form content" are not helpful for troubleshooting</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6118">#6118</a> - Display a warning when Hazelcast configuration does not contain Jetty session serializer</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6114">#6114</a> - Jetty Deploy scan / symlink behavior is broken</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6112">#6112</a> - Jetty logging service file leaking to web applications</li> </ul> <h2>11.0.3</h2> <h1>Changelog</h1> <ul> <li>This release resolves <a href="https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq">CVE-2021-28169</a></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/3764">#3764</a> DeprecationWarning Decorator</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse/jetty.project/commit/69469432898becda3aed32a32d4b0adbb7b6daee"><code>6946943</code></a> Updating to version 11.0.6</li> <li><a href="https://github.com/eclipse/jetty.project/commit/4d2648ae4fe8e02cd7d90ad3dc8011aad5461951"><code>4d2648a</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/c753ca0db547dc44e3979eaee2b897fa0d275406"><code>c753ca0</code></a> <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6455">#6455</a> disable MaxDuration mechanism in testConnectionMaxUsage as it clashes w...</li> <li><a href="https://github.com/eclipse/jetty.project/commit/d1aeaf7cfaefc021713983b4a76375699d3c900b"><code>d1aeaf7</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/bc0fbbb5c101ce88deadca004e63b69c94b4ae07"><code>bc0fbbb</code></a> Revert logic in Request.setMetaData, clear emptySegment on HttpUri.clear() (#...</li> <li><a href="https://github.com/eclipse/jetty.project/commit/d13bd9b63b8659c5b35803436b3d71cda774c3c9"><code>d13bd9b</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/4673846635e3c3d85c2c327a4e80e1bb3d172745"><code>4673846</code></a> Compliance modes documentation (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6312">#6312</a>)</li> <li><a href="https://github.com/eclipse/jetty.project/commit/c1b6e30471eddc6180cc95d15ca51b201021c014"><code>c1b6e30</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/0b96734bbb13885b7c4529fdecab61bf8d9175f2"><code>0b96734</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6465">#6465</a> from eclipse/jetty-10.0.x-6464-log4j1-download-location</li> <li><a href="https://github.com/eclipse/jetty.project/commit/d233f3be02e112d4d212c96bc3325a7eade74b06"><code>d233f3b</code></a> Issue <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6447">#6447</a> - Deprecate support for UTF16 encoding in URIs (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6457">#6457</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eclipse/jetty.project/compare/jetty-9.4.27.v20200227...jetty-11.0.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.eclipse.jetty:jetty-servlet&package-manager=gradle&previous-version=9.4.27.v20200227&new-version=11.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

dependabot[bot] commented

2021-10-13 09:09:46 +00:00

(Migrated from github.com)

Superseded by #33.