Skip to content

Bump lib.jetty.version from 12.1.12 to 12.1.13 - #7285

Merged
nscuro merged 1 commit into
5.1.xfrom
dependabot/maven/5.1.x/lib.jetty.version-12.1.13
Sep 11, 2026
Merged

nscuro merged 1 commit into
5.1.xfrom
dependabot/maven/5.1.x/lib.jetty.version-12.1.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps lib.jetty.version from 12.1.12 to 12.1.13.
Updates org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.1.13

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #15668 - Strengthened connection failure handling.
  • #15649 - Various improvements for SignInWithEthereum Authentication
  • #15633 - Fixes for MultiPartCompliance configuration
  • #15631 - Allow customizing GracefulHandler's shutdown rejection response
  • #15629 - [12.1.x] Improve *AuthenticationProtocolHandler.accept()
  • #15612 - Reuses URIUtil.canonicalPath() for URI matching.
  • #15591 - Fixes FCGI's "try-files" query handling.
  • #15590 - Making CIDR pattern matching case insensitive
  • #15582 - Add additional configuration for SessionAuthentication persistence (12.1)
  • #15556 - Fix the use of quickstart with a combined base resource.
  • #15548 - AbstractProxyServlet.filterServerResponseHeader returns existing value
  • #15504 - BouncyCastleClientALPNProcessor does not have a fallback for empty protocol string. (@​DragonFSKY)
  • #15459 - Add a Jetty module for the HashLoginService
  • #15454 - Fix for 15420 (add support for HttpClient.maxDestinations)
  • #15385 - Streamline dependencies for HTTP/3 Server with Quiche
  • #14930 - SymlinkAllowedResourceAliasChecker.check() fails with NPE (@​kamilkrzywanski)
  • #14906 - Flaky test: RedispatchTests.testEe8FilterWithAwkwardRequestURI() — fails in 45% of CI builds (@​DragonFSKY)
  • #14403 - RoundRobinConnectionPoolTest.testMultiplexWithMaxUsage() on FCGI is flaky (@​DragonFSKY)
Commits
  • e993867 Updating to version 12.1.13
  • 1fa2a1c [12.1.x EE9] Bump org.apache.maven.plugins:maven-compiler-plugin (#15715)
  • c67d57d [12.1.x EE10] Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to 3.0....
  • 3caa491 [12.1.x Root pom] Bump com.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16 in...
  • 1f8fafb Issue #14403 - Defer FCGI application dispatch until the parser returns (#15648)
  • bc6e23a [12.1.x EE9] Bump the dev-dependencies group across 1 directory with 3 update...
  • 42fd273 Adding method Constraint test to improve test coverage
  • 365b721 Making CIDR pattern matching case insensitive
  • 17c051c Fixes #14930 - Resolve base resource for SymlinkAllowedResourceAliasChecker (...
  • 8c18972 [12.1.x Root pom] Bump the dev-dependencies group across 1 directory with 8 u...
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.ee11:jetty-ee11-bom from 12.1.12 to 12.1.13

Release notes

Sourced from org.eclipse.jetty.ee11:jetty-ee11-bom's releases.

12.1.13

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #15668 - Strengthened connection failure handling.
  • #15649 - Various improvements for SignInWithEthereum Authentication
  • #15633 - Fixes for MultiPartCompliance configuration
  • #15631 - Allow customizing GracefulHandler's shutdown rejection response
  • #15629 - [12.1.x] Improve *AuthenticationProtocolHandler.accept()
  • #15612 - Reuses URIUtil.canonicalPath() for URI matching.
  • #15591 - Fixes FCGI's "try-files" query handling.
  • #15590 - Making CIDR pattern matching case insensitive
  • #15582 - Add additional configuration for SessionAuthentication persistence (12.1)
  • #15556 - Fix the use of quickstart with a combined base resource.
  • #15548 - AbstractProxyServlet.filterServerResponseHeader returns existing value
  • #15504 - BouncyCastleClientALPNProcessor does not have a fallback for empty protocol string. (@​DragonFSKY)
  • #15459 - Add a Jetty module for the HashLoginService
  • #15454 - Fix for 15420 (add support for HttpClient.maxDestinations)
  • #15385 - Streamline dependencies for HTTP/3 Server with Quiche
  • #14930 - SymlinkAllowedResourceAliasChecker.check() fails with NPE (@​kamilkrzywanski)
  • #14906 - Flaky test: RedispatchTests.testEe8FilterWithAwkwardRequestURI() — fails in 45% of CI builds (@​DragonFSKY)
  • #14403 - RoundRobinConnectionPoolTest.testMultiplexWithMaxUsage() on FCGI is flaky (@​DragonFSKY)
Commits
  • e993867 Updating to version 12.1.13
  • 1fa2a1c [12.1.x EE9] Bump org.apache.maven.plugins:maven-compiler-plugin (#15715)
  • c67d57d [12.1.x EE10] Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to 3.0....
  • 3caa491 [12.1.x Root pom] Bump com.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16 in...
  • 1f8fafb Issue #14403 - Defer FCGI application dispatch until the parser returns (#15648)
  • bc6e23a [12.1.x EE9] Bump the dev-dependencies group across 1 directory with 3 update...
  • 42fd273 Adding method Constraint test to improve test coverage
  • 365b721 Making CIDR pattern matching case insensitive
  • 17c051c Fixes #14930 - Resolve base resource for SymlinkAllowedResourceAliasChecker (...
  • 8c18972 [12.1.x Root pom] Bump the dev-dependencies group across 1 directory with 8 u...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `lib.jetty.version` from 12.1.12 to 12.1.13.

Updates `org.eclipse.jetty:jetty-bom` from 12.1.12 to 12.1.13
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.1.12...jetty-12.1.13)

Updates `org.eclipse.jetty.ee11:jetty-ee11-bom` from 12.1.12 to 12.1.13
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.1.12...jetty-12.1.13)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee11:jetty-ee11-bom
  dependency-version: 12.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 11, 2026
@owasp-dt-bot

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production

codacy-production Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric Results
Coverage variation ✅ +0.00% coverage variation (-1.00%)
Diff coverage ✅ ∅ diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (c9cdab7) 44339 38702 87.29%
Head commit (a4f5818) 44339 (+0) 38703 (+1) 87.29% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#7285) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@nscuro nscuro added this to the 5.1.1 milestone Sep 11, 2026
@nscuro
nscuro merged commit d8afcc4 into 5.1.x Sep 11, 2026
22 checks passed
@nscuro
nscuro deleted the dependabot/maven/5.1.x/lib.jetty.version-12.1.13 branch September 11, 2026 09:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants