Skip to content

Bump jetty.version from 12.1.13 to 12.1.14 - #3557

Merged
manovotn merged 1 commit into
6.0from
dependabot/maven/6.0/jetty.version-12.1.14
Nov 3, 2026
Merged

Bump jetty.version from 12.1.13 to 12.1.14#3557
manovotn merged 1 commit into
6.0from
dependabot/maven/6.0/jetty.version-12.1.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps jetty.version from 12.1.13 to 12.1.14.
Updates org.eclipse.jetty:jetty-bom from 12.1.13 to 12.1.14

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.1.14

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #15874 - [12.1.x] Introduced recursion depth limit in JSON parsing.
  • #15871 - SessionHandler uses ConnectionMetaData.isSecure() instead of Request.isSecure(), breaking secure session cookies behind ForwardedRequestCustomizer (@​adityaanikam)
  • #15869 - PathResource incorrectly treats a classpath resource inside a JAR under a non-ASCII path as an alias
  • #15852 - Upgrade quiche to version 0.30.0
  • #15846 - Allow per-request form limits to be used with EE8/EE9
  • #15840 - HTTP/1 response header overflow retry loses previously determined connection persistence
  • #15839 - Simplified callback method notifications.
  • #15822 - Introduce flag in Rewrite Rules to preserve UriCompliance Violations when rewriting URIs
  • #15807 - ArrayByteBufferPool.clear() leaves the bucket's secondary QueuedPool poisoned: NPE on the next acquire()
  • #15733 - ee11 servlet: ServletRequest.getServletContext() returns the source context, not the target, after a cross-context RequestDispatcher.include()
  • #15679 - Fixes race for HTTP3StreamConnection release of Chunk
  • #15678 - CompressionHandler randomly truncates output
  • #15675 - Optimize Huffman codec (@​wendigo)
  • #15674 - Optimize HPack (@​wendigo)
  • #15432 - BrotliEncoderSink drops all but the last pulled buffer, silently truncating large Brotli responses
  • #15386 - Issues in http2 stream idle timeouts
  • #15368 - HTTP/2 client aborts exchange and loses response completed during server graceful shutdown (regression in 12.1.10 / 12.0.36 from #15134 / #14692)
Commits
  • 15cecbd Updating to version 12.1.14
  • 4f315a1 Issue #15871 - Fix SessionHandler ignoring forwarded secure status (#15873)
  • 134a7e9 #15869 fix PathResource.isAlias() when the path' URI is not encoded the same ...
  • 979f9ac Merge pull request #15679 from jetty/fix/jetty-12.1.x/HTTP3StreamConnection-race
  • a291a66 Issue #15733 Fix cross-context dispatch to use the target context (#15763)
  • 73383fb Merge pull request #15846 from jetty/fix/jetty-12.1.x/ee9-per-request-form-li...
  • 1f25119 Fixes #15368 - Fix incorrect eager aborting of H2 channels during graceful sh...
  • 6d7b56e Fixes #15666 - Flaky Test: VirtualThreadsTest.testServletCallbacksInvokedOnVi...
  • 37dcd42 [12.1.x] Introduced recursion depth limit in JSON parsing. (#15874)
  • 24064ed Simplified callback method notifications. (#15839)
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.ee10:jetty-ee10-bom from 12.1.13 to 12.1.14

Release notes

Sourced from org.eclipse.jetty.ee10:jetty-ee10-bom's releases.

12.1.14

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #15874 - [12.1.x] Introduced recursion depth limit in JSON parsing.
  • #15871 - SessionHandler uses ConnectionMetaData.isSecure() instead of Request.isSecure(), breaking secure session cookies behind ForwardedRequestCustomizer (@​adityaanikam)
  • #15869 - PathResource incorrectly treats a classpath resource inside a JAR under a non-ASCII path as an alias
  • #15852 - Upgrade quiche to version 0.30.0
  • #15846 - Allow per-request form limits to be used with EE8/EE9
  • #15840 - HTTP/1 response header overflow retry loses previously determined connection persistence
  • #15839 - Simplified callback method notifications.
  • #15822 - Introduce flag in Rewrite Rules to preserve UriCompliance Violations when rewriting URIs
  • #15807 - ArrayByteBufferPool.clear() leaves the bucket's secondary QueuedPool poisoned: NPE on the next acquire()
  • #15733 - ee11 servlet: ServletRequest.getServletContext() returns the source context, not the target, after a cross-context RequestDispatcher.include()
  • #15679 - Fixes race for HTTP3StreamConnection release of Chunk
  • #15678 - CompressionHandler randomly truncates output
  • #15675 - Optimize Huffman codec (@​wendigo)
  • #15674 - Optimize HPack (@​wendigo)
  • #15432 - BrotliEncoderSink drops all but the last pulled buffer, silently truncating large Brotli responses
  • #15386 - Issues in http2 stream idle timeouts
  • #15368 - HTTP/2 client aborts exchange and loses response completed during server graceful shutdown (regression in 12.1.10 / 12.0.36 from #15134 / #14692)
Commits
  • 15cecbd Updating to version 12.1.14
  • 4f315a1 Issue #15871 - Fix SessionHandler ignoring forwarded secure status (#15873)
  • 134a7e9 #15869 fix PathResource.isAlias() when the path' URI is not encoded the same ...
  • 979f9ac Merge pull request #15679 from jetty/fix/jetty-12.1.x/HTTP3StreamConnection-race
  • a291a66 Issue #15733 Fix cross-context dispatch to use the target context (#15763)
  • 73383fb Merge pull request #15846 from jetty/fix/jetty-12.1.x/ee9-per-request-form-li...
  • 1f25119 Fixes #15368 - Fix incorrect eager aborting of H2 channels during graceful sh...
  • 6d7b56e Fixes #15666 - Flaky Test: VirtualThreadsTest.testServletCallbacksInvokedOnVi...
  • 37dcd42 [12.1.x] Introduced recursion depth limit in JSON parsing. (#15874)
  • 24064ed Simplified callback method notifications. (#15839)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from manovotn as a code owner October 14, 2026 17:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 14, 2026
@dependabot
Bump jetty.version from 12.1.13 to 12.1.14
3f7cdbe 
Bumps `jetty.version` from 12.1.13 to 12.1.14.

Updates `org.eclipse.jetty:jetty-bom` from 12.1.13 to 12.1.14
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.1.13...jetty-12.1.14)

Updates `org.eclipse.jetty.ee10:jetty-ee10-bom` from 12.1.13 to 12.1.14
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.1.13...jetty-12.1.14)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-bom
  dependency-version: 12.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/6.0/jetty.version-12.1.14 branch from ead1b8c to 3f7cdbe Compare November 3, 2026 16:55
@manovotn
manovotn merged commit 0267094 into 6.0 Nov 3, 2026
16 checks passed
@manovotn
manovotn deleted the dependabot/maven/6.0/jetty.version-12.1.14 branch November 3, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@manovotn manovotn Awaiting requested review from manovotn manovotn is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@manovotn