build(deps-dev): bump org.eclipse.jetty:jetty-servlet from 9.4.53.v20231009 to 10.0.18

[dependabot[bot]]

Bumps org.eclipse.jetty:jetty-servlet from 9.4.53.v20231009 to 10.0.18.

Release notes

Sourced from org.eclipse.jetty:jetty-servlet's releases.

10.0.18

Special Thanks to the following Eclipse Jetty community members

• @​OlexYarm (OlexYarm)

Changelog

• #10786 - TLS handshake failures leak HttpConnection.RequestTimeouts tasks
• #10755 - deprecate PushCacheFilter
• #10753 - Improve and test jetty.sh behaviors
• #10675 - Fixed issue 10305 Embedded Jetty server fails to start when requests path contains not existed directory (@​OlexYarm)
• #10667 - Add configuration to allow deferring the initial Deployment until after Server is started
• #10390 - Jetty HTTP/3 Client fails when connecting to nghttpx server
• #1256 - DoSFilter leaks USER_AUTH entries

10.0.17

Security Updates

This release addresses:

• CVE-2023-44487 - (in case github/advisory-database#2869 isn't fixed, use top level link https://nvd.nist.gov/vuln/detail/CVE-2023-44487)

Changelog

• #10679 - Review HTTP/2 rate control
• #10547 - Cannot customize Executor on WebSocketClient
• #10545 - Fixed deadlock in class initialization seen on JDK21.
• #10511 - Allow session idle timeout to be configured on authentication.
• #10473 - Startup Script reports ok too fast, and doesn't wait for actual start of Jetty
• #10365 - Cleanup of start properties usages in jetty-10.0.x

10.0.16

Security Updates

This release addresses:

• GHSA-58qw-p7qm-5rvh - provides a workaround for direct users of XmlParser
• CVE-2023-40167
• CVE-2023-36478
• CVE-2023-36479
• CVE-2023-41900

Special Thanks to the following Eclipse Jetty community members

• @​strogiyotec (Almas Abdrazak)
• @​huisongma (huisongma)
• @​garydgregory (Gary Gregory)

Changelog

... (truncated)

Commits

• 8545fd9 Updating to version 10.0.18
• 95804f6 Merge pull request #10795 from jetty/fix/jetty-10-10786-tls-handshake-schedul...
• fa166d0 Fixes #10786 - TLS handshake failures leak HttpConnection.RequestTimeouts tasks
• e98c0ae Merge pull request #10791 from jetty/fix/10.0.x/jetty-sh-updates
• 31b5518 Updates to jetty.sh and testing to reduce failures
• 92f62a1 Improve and test jetty.sh behaviors (#10753)
• 8b5deea #10519 do not close the flusher to avoid an ISE when iterating it during idle...
• a8a8c8b #10519 check if the stream is still in a usable state when quiche_conn_stream...
• caf46b0 #10519 ignore IllegalStateException thrown by flusher when closing
• 6e7fafa Merge pull request #10755 from jetty/jetty-10.0.x-pushCacheFilter
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

| Dependency Name | Ignore Conditions | | --- | --- | | org.eclipse.jetty:jetty-servlet | [>= 11.a, < 12] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions[bot]]

Overall Project	NaN% NaN%	:green_apple:

There is no coverage information present for the Files changed