Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Mar 16, 2022

Bumps jetty.version from 9.2.17.v20160517 to 9.4.45.v20220203.
Updates websocket-server from 9.2.17.v20160517 to 9.4.45.v20220203

Updates jetty-servlet from 9.2.17.v20160517 to 9.4.45.v20220203

Release notes

Sourced from jetty-servlet's releases.

9.4.45.v20220203

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #7516 - Fix log class name in ArrayByteBufferPool (@​slovdahl)
  • #7496 - Transient 400: Bad Request responses in jetty-9.4.45.v20220128
  • #7480 - remove duplicated dependencies and upgrade to last spring 3.2.x
  • #7440 - ContextHandler.getAliasChecks() breaks Spring Boot
  • #7375 - Some environments require Request scoping during session save
  • #7348 - Slow CONNECT request causes NPE
  • #7277 - Allow override of ServletRequest.getLocalName() and .getLocalPort() in post-intermediary scenarios
  • #7271 - It is necessary to set MAX_CAPACITY to ArrayTernaryTrie/ArrayTrie
  • #7266 - Wrong ALPN jars are selected for newer versions of JDK8
  • #7222 - Remove redundant overridden methods in AllowedResourceAliasCheckListener
  • #7124 - Add default methods on LifeCycle.Listener interface
  • #7078 - CompressionPools are not shared between multiple contexts for 9.4 WebSocket
  • #7059 - NPE in AllowedResourceAliasChecker.getPath()
  • #7031 - ResponseWriter.println(char) does not print newline
  • #6974 - Major websocket memory change in 9.4.36
  • #6969 - Getting 404 failures when trying to enable logging-log4j module.
  • #6965 - Expose Spec ServerContainer.upgrade() API
  • #6889 - Cherry pick update to infinispan 11.0.11 back to jetty-9.4.x(#6766)
  • #6497 - Replace SameFileAliasChecker
  • #4275 - Path Normalization/Traversal - Context Matching

Dependencies

  • #7519 - Bump google-cloud-datastore from 2.2.2 to 2.2.3
  • #7501 - Bump checkstyle from 9.2.1 to 9.3
  • #7500 - Bump asciidoctor-maven-plugin from 2.2.1 to 2.2.2
  • #7456 - Bump grpc-core from 1.43.2 to 1.44.0
  • #7449 - Bump error_prone_annotations from 2.10.0 to 2.11.0
  • #7445 - Bump guice from 5.0.1 to 5.1.0
  • #7439 - Bump versions-maven-plugin from 2.8.1 to 2.9.0
  • #7435 - Investigate Infinispan transitive dependencies
  • #7434 - Fix log4j2 module
  • #7429 - Bump mariadb-java-client from 2.7.4 to 2.7.5
  • #7427 - Bump testcontainers.version from 1.16.2 to 1.16.3
  • #7412 - Bump maven-plugin-plugin from 3.6.2 to 3.6.4
  • #7411 - Bump maven.plugin-tools.version from 3.6.2 to 3.6.4
  • #7389 - Bump google-cloud-datastore from 2.2.1 to 2.2.2
  • #7388 - Bump maven-compiler-plugin from 3.8.1 to 3.9.0
  • #7387 - Bump build-helper-maven-plugin from 3.2.0 to 3.3.0
  • #7386 - Bump jboss-logging from 3.4.2.Final to 3.4.3.Final
  • #7380 - Bump hawtio-default from 2.14.3 to 2.14.4
  • #7368 - Bump jnr-posix from 3.1.14 to 3.1.15
  • #7366 - Bump jnr-unixsocket from 0.38.15 to 0.38.17

... (truncated)

Commits
  • 4a0c91c Updating to version 9.4.45.v20220203
  • b84ea78 Merge pull request #7519 from eclipse/dependabot/maven/jetty-9.4.x/com.google...
  • 37ad2d2 Merge pull request #7516 from slovdahl/patch-1
  • 846cf4c Bump google-cloud-datastore from 2.2.2 to 2.2.3
  • dcaf3f2 Fix log class name in ArrayByteBufferPool
  • 09f4899 Jetty 9.4.x : fix tries mistakenly throwing ArrayIndexOutOfBoundsException (#...
  • 33c60d8 Merge pull request #7501 from eclipse/dependabot/maven/jetty-9.4.x/com.puppyc...
  • e22d5a1 Merge pull request #7500 from eclipse/dependabot/maven/jetty-9.4.x/org.asciid...
  • bf0d65a Bump asciidoctor-maven-plugin from 2.2.1 to 2.2.2
  • 076b390 Bump checkstyle from 9.2.1 to 9.3
  • Additional commits viewable in compare view

Updates jetty-server from 9.2.17.v20160517 to 9.4.45.v20220203

Release notes

Sourced from jetty-server's releases.

9.4.45.v20220203

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #7516 - Fix log class name in ArrayByteBufferPool (@​slovdahl)
  • #7496 - Transient 400: Bad Request responses in jetty-9.4.45.v20220128
  • #7480 - remove duplicated dependencies and upgrade to last spring 3.2.x
  • #7440 - ContextHandler.getAliasChecks() breaks Spring Boot
  • #7375 - Some environments require Request scoping during session save
  • #7348 - Slow CONNECT request causes NPE
  • #7277 - Allow override of ServletRequest.getLocalName() and .getLocalPort() in post-intermediary scenarios
  • #7271 - It is necessary to set MAX_CAPACITY to ArrayTernaryTrie/ArrayTrie
  • #7266 - Wrong ALPN jars are selected for newer versions of JDK8
  • #7222 - Remove redundant overridden methods in AllowedResourceAliasCheckListener
  • #7124 - Add default methods on LifeCycle.Listener interface
  • #7078 - CompressionPools are not shared between multiple contexts for 9.4 WebSocket
  • #7059 - NPE in AllowedResourceAliasChecker.getPath()
  • #7031 - ResponseWriter.println(char) does not print newline
  • #6974 - Major websocket memory change in 9.4.36
  • #6969 - Getting 404 failures when trying to enable logging-log4j module.
  • #6965 - Expose Spec ServerContainer.upgrade() API
  • #6889 - Cherry pick update to infinispan 11.0.11 back to jetty-9.4.x(#6766)
  • #6497 - Replace SameFileAliasChecker
  • #4275 - Path Normalization/Traversal - Context Matching

Dependencies

  • #7519 - Bump google-cloud-datastore from 2.2.2 to 2.2.3
  • #7501 - Bump checkstyle from 9.2.1 to 9.3
  • #7500 - Bump asciidoctor-maven-plugin from 2.2.1 to 2.2.2
  • #7456 - Bump grpc-core from 1.43.2 to 1.44.0
  • #7449 - Bump error_prone_annotations from 2.10.0 to 2.11.0
  • #7445 - Bump guice from 5.0.1 to 5.1.0
  • #7439 - Bump versions-maven-plugin from 2.8.1 to 2.9.0
  • #7435 - Investigate Infinispan transitive dependencies
  • #7434 - Fix log4j2 module
  • #7429 - Bump mariadb-java-client from 2.7.4 to 2.7.5
  • #7427 - Bump testcontainers.version from 1.16.2 to 1.16.3
  • #7412 - Bump maven-plugin-plugin from 3.6.2 to 3.6.4
  • #7411 - Bump maven.plugin-tools.version from 3.6.2 to 3.6.4
  • #7389 - Bump google-cloud-datastore from 2.2.1 to 2.2.2
  • #7388 - Bump maven-compiler-plugin from 3.8.1 to 3.9.0
  • #7387 - Bump build-helper-maven-plugin from 3.2.0 to 3.3.0
  • #7386 - Bump jboss-logging from 3.4.2.Final to 3.4.3.Final
  • #7380 - Bump hawtio-default from 2.14.3 to 2.14.4
  • #7368 - Bump jnr-posix from 3.1.14 to 3.1.15
  • #7366 - Bump jnr-unixsocket from 0.38.15 to 0.38.17

... (truncated)

Commits
  • 4a0c91c Updating to version 9.4.45.v20220203
  • b84ea78 Merge pull request #7519 from eclipse/dependabot/maven/jetty-9.4.x/com.google...
  • 37ad2d2 Merge pull request #7516 from slovdahl/patch-1
  • 846cf4c Bump google-cloud-datastore from 2.2.2 to 2.2.3
  • dcaf3f2 Fix log class name in ArrayByteBufferPool
  • 09f4899 Jetty 9.4.x : fix tries mistakenly throwing ArrayIndexOutOfBoundsException (#...
  • 33c60d8 Merge pull request #7501 from eclipse/dependabot/maven/jetty-9.4.x/com.puppyc...
  • e22d5a1 Merge pull request #7500 from eclipse/dependabot/maven/jetty-9.4.x/org.asciid...
  • bf0d65a Bump asciidoctor-maven-plugin from 2.2.1 to 2.2.2
  • 076b390 Bump checkstyle from 9.2.1 to 9.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps `jetty.version` from 9.2.17.v20160517 to 9.4.45.v20220203.

Updates `websocket-server` from 9.2.17.v20160517 to 9.4.45.v20220203

Updates `jetty-servlet` from 9.2.17.v20160517 to 9.4.45.v20220203
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.2.17.v20160517...jetty-9.4.45.v20220203)

Updates `jetty-server` from 9.2.17.v20160517 to 9.4.45.v20220203
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.2.17.v20160517...jetty-9.4.45.v20220203)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty.websocket:websocket-server
  dependency-type: direct:production
- dependency-name: org.eclipse.jetty:jetty-servlet
  dependency-type: direct:development
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jul 13, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

3 similar comments
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 17, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 23, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 30, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants