Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps org.eclipse.jetty:jetty-bom from 12.0.27 to 12.0.31.

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.0.31

Changelog

  • #14132 - 12.0.x: Fix loop caused by NegotiatingClientConnection talking to broken server
  • #14130 - 12.0.x: Improve buffer pools stats and dump
  • #14097 - Can't use Jetty when the default Locale is Azerbaijan
  • #14017 - Fix cookie-config web.xml attributes when used with quickstart
  • #14013 - Regular handling of bad URIs
  • #14007 - 12.0.x: Rework consumeAvailable() mechanism
  • #13993 - Fixes for ThreadLimitHandler with NON_BLOCKING invocation type
  • #13962 - HTTP/2 Client connection timeout does not work

12.0.30

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #13983 - 12.0.x: Fix error handling from jsp with post form
  • #13978 - 12.0.x: allow configuring the default max local streams on the H2 client
  • #13962 - HTTP/2 Client connection timeout does not work
  • #13933 - completeStream changes introduced "Unconsumed" bug
  • #13922 - ResourceServlet Download link broken
  • #13886 - Servlet filter mappings not working with quickstart
  • #13849 - Connection reset on HTTP/2 when using CompressionHandler with default WindowRateControl
  • #13842 - 12.0.x: warn the first time the TCCL fails to be set
  • #13613 - HttpInput#read rethrows already thrown exception, leading to possible self-suppressing exception issue
  • #13470 - Jetty 12.0: ManagedSession issues due to recursion and/pr multiple completions of the stream.
  • #13413 - Fix <license><name> by using SPDX in pom.xml (@​julianladisch)

12.0.29

Changelog

  • #13788 - 12.0.x: Make ContextHandler catch and ignore exceptions thrown by Thread.setContextClassLoader()
  • #13768 - Sanitizing of HTTP headers names and values should remove NUL bytes (U+0000)
  • #13685 - Infinite loop on Content.copy() with Content.Source.from(... , Path, ) when Path has size 0.
  • #13683 - Badly pct-encoded Shift-JIS is not supported by Jetty 12
  • #13682 - HttpClient.[maxRequest|request]HeadersSize should be consistent
  • #13676 - Backport fix for #13613 from 12.1.x to 12.0.x
  • #13634 - Avoid sending RST_STREAM for closed streams
  • #13626 - WebAppContext.setExtraClasspath(String) entry separator
  • #13615 - Concurrency issue, headers from different requests are mixed in Jetty 12.0.27
  • #13613 - HttpInput#read rethrows already thrown exception, leading to possible self-suppressing exception issue
  • #13588 - CONTAINER_JAR_PATTERN ignored on Windows

12.0.28

Changelog

... (truncated)

Commits
  • 5eb4a85 Updating to version 12.0.31
  • 906e3ff 12.0.x: Fix loop caused by NegotiatingClientConnection talking to broken se...
  • 056c513 Improve buffer pools stats and dump (#14123)
  • a67bf1a [12.0.x EE9] Bump the build-deps group in /jetty-ee9 with 2 updates
  • 6e09a6c #14097 add missing locale to String.toLowerCase() to avoid any encoding when ...
  • bd085f4 [12.0.x EE8] Bump org.bouncycastle:bctls-jdk18on
  • 361022b [12.0.x Root pom] Bump the dev-dependencies group with 8 updates
  • 7938925 [12.0.x EE8] Bump the dev-dependencies group
  • 553b59e Regular handling of bad URIs (#14013)
  • c5d11c2 Fixes #13962 - HTTP/2 Client connection timeout does not work.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.eclipse.jetty:jetty-bom](https://github.com/jetty/jetty.project) from 12.0.27 to 12.0.31.
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.0.27...jetty-12.0.31)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant