build(deps): bump jetty-servlet from 9.4.27.v20200227 to 11.0.5 #26

Closed

dependabot[bot] wants to merge 1 commit from dependabot/gradle/org.eclipse.jetty-jetty-servlet-11.0.5 into helma-🐜

dependabot[bot] commented

2021-06-14 07:53:32 +00:00

(Migrated from github.com)

Bumps jetty-servlet from 9.4.27.v20200227 to 11.0.5.

Release notes

Sourced from jetty-servlet's releases.

11.0.5

Changelog

#6392 - Review accidental xml config changes

#6379 - Reduce contention in all ByteBufferPool implementations

#6354 - org.slfj dependency imports packages at 2.0

#6329 - Regression on graceful shutdown default in Jetty 10

#6302 - Treat empty path segments are ambiguous.

#4772 - Jetty WebSocket API onMessage annotation does not support partial messages.

11.0.4

Special Thanks to the following Eclipse Jetty community members

@tjwatson (Thomas Watson)

Changelog

#6354 - org.slfj dependency imports packages at 2.0 (@tjwatson)

#6347 - session-store-gcloud module broken logging dependency

#6330 - CustomRequestLog is missing HTTP version format option

#6305 - Optimise ContextHandler.isProtectedTarget

#6285 - HTTP2 client: IllegalStateException: Cannot release an already released entry

#6276 - Support non-standard domains in SNI and X509

#6268 - Warnings about "unable to parse form content" are not helpful for troubleshooting

#6118 - Display a warning when Hazelcast configuration does not contain Jetty session serializer

#6114 - Jetty Deploy scan / symlink behavior is broken

#6112 - Jetty logging service file leaking to web applications

11.0.3

Changelog

This release resolves CVE-2021-28169

#3764 DeprecationWarning Decorator

#5684 Review disabled tests

#5798 jetty-runner startup error with jetty-10

#5817 Provide more filtering for CustomRequestLog

#6049 Default provider [files] section always executed

#6084 GzipHandler: NPE in setDeflaterPoolCapacity and setInflaterPoolCapacity

#6098 jetty-cdi is missing from jetty-bom

#6099 Cipher preference may break SNI if certificates have different key types

#6105 HttpConnection.getBytesIn() incorrect for requests with chunked content

#6106 WebSocket/CDI integration is broken in Jetty 10

#6125 Do not allow override of jakarta.* container classes by webapps per Servlet 5.0 Section 15.2.1

#6132 Ambiguous segment in URI in DELETE /a/projects/foo/branches/refs%2Fheads%2Ftest request after upgrade from 10.0.0 to 10.0.2

#6153 jetty-maven-plugin does not correctly pass JVM arguments for external deployMode

#6159 Jetty with Conscrypt unable to handle any HTTPS requests when connected by IP rather than hostname.

#6166 WebSocket MessageInputStream.read() spends a lot of time in ByteBuffer.compact()

#6205 OpenIdAuthenticator may use incorrect redirect

#6208 HTTP/2 max local stream count exceeded

#6224 make jetty-jspc-maven-plugin @threadsafe

... (truncated)

Commits

50df216 Updating to version 11.0.5
d8d7b95 Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
8774cca Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
1223bb5 Issue #6354 - fix bad slf4j reference in jetty-osgi-boot-jsp
6dea025 Issue #4772 - support partial messages for Jetty WS API annotations (#6357)
d997a11 Issue #6354 - OSGI manifest for slf4j-api packages lower limit should be 1.7 ...
61a30e3 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
33c1b14 #6379: requeue at the tail to reduce contention + use a simpler concurrent qu...
b4d7e51 Issue #6302 - Treat empty path segments as ambiguous. (#6304)
3648b39 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jetty-servlet](https://github.com/eclipse/jetty.project) from 9.4.27.v20200227 to 11.0.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/jetty.project/releases">jetty-servlet's releases</a>.</em></p> <blockquote> <h2>11.0.5</h2> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6392">#6392</a> - Review accidental xml config changes</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6379">#6379</a> - Reduce contention in all <code>ByteBufferPool</code> implementations</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - org.slfj dependency imports packages at 2.0</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6329">#6329</a> - Regression on graceful shutdown default in Jetty 10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6302">#6302</a> - Treat empty path segments are ambiguous.</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/4772">#4772</a> - Jetty WebSocket API onMessage annotation does not support partial messages.</li> </ul> <h2>11.0.4</h2> <h1>Special Thanks to the following Eclipse Jetty community members</h1> <ul> <li><a href="https://github.com/tjwatson"><code>@tjwatson</code></a> (Thomas Watson)</li> </ul> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - org.slfj dependency imports packages at 2.0 (<a href="https://github.com/tjwatson"><code>@tjwatson</code></a>)</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6347">#6347</a> - session-store-gcloud module broken logging dependency</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6330">#6330</a> - CustomRequestLog is missing HTTP version format option</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6305">#6305</a> - Optimise <code>ContextHandler.isProtectedTarget</code></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6285">#6285</a> - HTTP2 client: IllegalStateException: Cannot release an already released entry</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6276">#6276</a> - Support non-standard domains in SNI and X509</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6268">#6268</a> - Warnings about "unable to parse form content" are not helpful for troubleshooting</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6118">#6118</a> - Display a warning when Hazelcast configuration does not contain Jetty session serializer</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6114">#6114</a> - Jetty Deploy scan / symlink behavior is broken</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6112">#6112</a> - Jetty logging service file leaking to web applications</li> </ul> <h2>11.0.3</h2> <h1>Changelog</h1> <ul> <li>This release resolves <a href="https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq">CVE-2021-28169</a></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/3764">#3764</a> DeprecationWarning Decorator</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5684">#5684</a> Review disabled tests</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5798">#5798</a> jetty-runner startup error with jetty-10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5817">#5817</a> Provide more filtering for CustomRequestLog</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6049">#6049</a> Default provider [files] section always executed</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6084">#6084</a> GzipHandler: NPE in setDeflaterPoolCapacity and setInflaterPoolCapacity</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6098">#6098</a> jetty-cdi is missing from jetty-bom</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6099">#6099</a> Cipher preference may break SNI if certificates have different key types</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6105">#6105</a> HttpConnection.getBytesIn() incorrect for requests with chunked content</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6106">#6106</a> WebSocket/CDI integration is broken in Jetty 10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6125">#6125</a> Do not allow override of jakarta.* container classes by webapps per Servlet 5.0 Section 15.2.1</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6132">#6132</a> Ambiguous segment in URI in DELETE /a/projects/foo/branches/refs%2Fheads%2Ftest request after upgrade from 10.0.0 to 10.0.2</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6153">#6153</a> jetty-maven-plugin does not correctly pass JVM arguments for external deployMode</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6159">#6159</a> Jetty with Conscrypt unable to handle any HTTPS requests when connected by IP rather than hostname.</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6166">#6166</a> WebSocket MessageInputStream.read() spends a lot of time in ByteBuffer.compact()</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6205">#6205</a> OpenIdAuthenticator may use incorrect redirect</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6208">#6208</a> HTTP/2 max local stream count exceeded</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6224">#6224</a> make jetty-jspc-maven-plugin <code>@threadsafe</code></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse/jetty.project/commit/50df21626238a1755802a672481c3b79997e82b2"><code>50df216</code></a> Updating to version 11.0.5</li> <li><a href="https://github.com/eclipse/jetty.project/commit/d8d7b9584474168110359c797351eddb26623dea"><code>d8d7b95</code></a> Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.</li> <li><a href="https://github.com/eclipse/jetty.project/commit/8774ccaa0fb04d2b72fa3c9ba573791c6e6e0c66"><code>8774cca</code></a> Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.</li> <li><a href="https://github.com/eclipse/jetty.project/commit/1223bb50ec91fd3387ee7b7983c8e79c5c975318"><code>1223bb5</code></a> Issue <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - fix bad slf4j reference in jetty-osgi-boot-jsp</li> <li><a href="https://github.com/eclipse/jetty.project/commit/6dea0251c2a4948578092db1c81e0d33b06f95b9"><code>6dea025</code></a> Issue <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/4772">#4772</a> - support partial messages for Jetty WS API annotations (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6357">#6357</a>)</li> <li><a href="https://github.com/eclipse/jetty.project/commit/d997a1171b29d01d9a2291510f082a8637202e0d"><code>d997a11</code></a> Issue <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6354">#6354</a> - OSGI manifest for slf4j-api packages lower limit should be 1.7 ...</li> <li><a href="https://github.com/eclipse/jetty.project/commit/61a30e381d14036a7219342dafe79dd8d2d9860c"><code>61a30e3</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/33c1b14ada4872492adfb74c8cebf0fc75d8438a"><code>33c1b14</code></a> <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6379">#6379</a>: requeue at the tail to reduce contention + use a simpler concurrent qu...</li> <li><a href="https://github.com/eclipse/jetty.project/commit/b4d7e5117db6bc4ef0cb7a16eab589b83dcf0e21"><code>b4d7e51</code></a> Issue <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6302">#6302</a> - Treat empty path segments as ambiguous. (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6304">#6304</a>)</li> <li><a href="https://github.com/eclipse/jetty.project/commit/3648b3916cb3d0f63f2edf06d10d9a6a9c25a2a3"><code>3648b39</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li>Additional commits viewable in <a href="https://github.com/eclipse/jetty.project/compare/jetty-9.4.27.v20200227...jetty-11.0.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.eclipse.jetty:jetty-servlet&package-manager=gradle&previous-version=9.4.27.v20200227&new-version=11.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

dependabot[bot] commented

2021-07-07 09:06:58 +00:00

(Migrated from github.com)

Superseded by #28.