alibaba / fastjson2

🚄 FASTJSON2 is a Java JSON library with excellent performance.
Apache License 2.0
3.79k stars 495 forks source link

Bump org.eclipse.jetty:jetty-bom from 11.0.15 to 12.0.14 #3112

Closed dependabot[bot] closed 4 weeks ago

dependabot[bot] commented 1 month ago

Bumps org.eclipse.jetty:jetty-bom from 11.0.15 to 12.0.14.

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.0.14

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #12309 - SessionAuthentication._session is not marked as transient
  • #12303 - Use sessionRequest for wrapping HTTP stream instead of original Request (@​robbie01)
  • #12289 - Improve ConcurrentPool concurrency
  • #12279 - org.eclipse.jetty.maven.ServerSupport.configureHandlers(Server, List<ContextHandler>, RequestLog) removes handlers
  • #12255 - Environment CookieConfig details not visible in Server Dump or JMX
  • #12254 - New DebugListener
  • #12249 - HTTP/2 responses with Content-Length may have no content
  • #12241 - Unable to Add SameSite Cookie Attribute Value in Jetty 12 EE8 environment with Java 17
  • #12239 - Optimize buffer release in HttpConnection
  • #12227 - Improve HttpConnection buffer recycling
  • #12047 - Server should not open connectors early in start sequence (@​kelunik)
  • #11298 - Error 400 - Ambiguous URI Empty Segment
  • #11092 - Startup fails because MetaInfConfiguration is throwing an exception while parsing java classpath with URIUtil when classpath contains wildcard ./mypath/*
  • #7951 - OutputStreamContentProvider blocks forever during an HTTP2 upload after idle timeout is reached
  • #929 - Implement a utility class to save large downloads to a file (@​arsenalzp)

12.0.13

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #12213 - Removed reliance on exception to shutdown non persistent connections
  • #12212 - ShutdownOutput for non-persistent HTTP/1 connections
  • #12209 - Move h2spec exec to a profile
  • #12208 - resolve differences in AliasCheckerSymlinkTests
  • #12207 - Jetty Maven Plugin 12.x no longer configures DefaultHandler
  • #12206 - sendError(-1) is an abort
  • #12203 - Fixes HttpClient Content.Source reads from arbitrary threads
  • #12199 - fix npe when onCompleteFailure happens after reset
  • #12198 - Fix potential NPE from VirtualThreadPool
  • #12183 - Fix order of jetty.http.port property for jetty maven plugin
  • #12173 - Jetty Maven Plugin - jetty:run does not work with pom type dependencies
  • #12172 - change urls https://eclipse.dev to https://jetty.org

... (truncated)

Commits
  • e775165 Updating to version 12.0.14
  • e376b1a HttpURI.Mutable path changes should clear out any existing path violations be...
  • 97ff548 Jetty 12.0.x 12191 alt debug listener (#12254)
  • a1dbb72 Jetty 12.0.x add Eclipse Dash License plugin as part the build process (#12224)
  • 11476a9 Fixes #7515 - Connection limit problem for "onAccepting" connections.
  • bcadd0a Fixes #12265 - Jetty 12.0.13 fails to start when the threadpool-all-virtual m...
  • b371002 Issue #929 - Implement a utility class to save large downloads to a file.
  • 03af351 Fixes #929 - Implement a utility class to save large downloads to a file.
  • f4c38c4 Issue #11092 - Allow MetaInfConfiguration parsing of java.class.path to sup...
  • 09b8aac Remove jdk22 build (#12314)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 4 weeks ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.