dependabot[bot] opened a new pull request #90: URL: https://github.com/apache/struts-examples/pull/90
Bumps [jetty-maven-plugin](https://github.com/eclipse/jetty.project) from 11.0.1 to 11.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/jetty.project/releases";>jetty-maven-plugin's releases</a>.</em></p> <blockquote> <h2>11.0.3</h2> <h1>Changelog</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/3764";>#3764</a> DeprecationWarning Decorator</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5684";>#5684</a> Review disabled tests</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5798";>#5798</a> jetty-runner startup error with jetty-10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5817";>#5817</a> Provide more filtering for CustomRequestLog</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6049";>#6049</a> Default provider [files] section always executed</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6084";>#6084</a> GzipHandler: NPE in setDeflaterPoolCapacity and setInflaterPoolCapacity</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6098";>#6098</a> jetty-cdi is missing from jetty-bom</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6099";>#6099</a> Cipher preference may break SNI if certificates have different key types</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6105";>#6105</a> HttpConnection.getBytesIn() incorrect for requests with chunked content</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6106";>#6106</a> WebSocket/CDI integration is broken in Jetty 10</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6125";>#6125</a> Do not allow override of jakarta.* container classes by webapps per Servlet 5.0 Section 15.2.1</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6132";>#6132</a> Ambiguous segment in URI in DELETE /a/projects/foo/branches/refs%2Fheads%2Ftest request after upgrade from 10.0.0 to 10.0.2</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6153";>#6153</a> jetty-maven-plugin does not correctly pass JVM arguments for external deployMode</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6159";>#6159</a> Jetty with Conscrypt unable to handle any HTTPS requests when connected by IP rather than hostname.</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6166";>#6166</a> WebSocket MessageInputStream.read() spends a lot of time in ByteBuffer.compact()</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6205";>#6205</a> OpenIdAuthenticator may use incorrect redirect</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6208";>#6208</a> HTTP/2 max local stream count exceeded</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6224";>#6224</a> make jetty-jspc-maven-plugin <code>@threadsafe</code></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6227";>#6227</a> Better resolve race between <code>AsyncListener.onTimeout</code> and <code>AsyncContext.dispatch</code></li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6238";>#6238</a> jetty-keystore Invalid manifest header Bundle-SymbolicName: ""</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6250";>#6250</a> Lazily allocate HTTP2Stream data queue</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6251";>#6251</a> Use CyclicTimeout for HTTP2Streams</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6254";>#6254</a> Total timeout not enforced for queued requests</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6263";>#6263</a> Review URI encoding in ConcatServlet & WelcomeFilter</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6277";>#6277</a> Better handle exceptions thrown from session destroy listener</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6280";>#6280</a> Copy ServletHolder class/instance properly during startWebapp</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6287";>#6287</a> Class loading broken for WebSocketClient used inside webapp</li> </ul> <h2>11.0.2</h2> <h1>Changelog</h1> <h1>:warning: Important Security related Changes</h1> <ul> <li><a href="https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w";>CVE-2021-28165</a> - <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6072";>#6072</a> - jetty server high CPU when client send data length > 17408</li> <li><a href="https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5";>CVE-2021-28164</a> - <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6101";>#6101</a> - Normalize ambiguous URIs</li> <li><a href="https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq";>CVE-2021-28163</a> - <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6102";>#6102</a> - Exclude webapps directory from deployment scan</li> </ul> <h1>Other Changes</h1> <ul> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/4275";>#4275</a> - Path Normalization/Traversal - Context Matching</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5828";>#5828</a> - Allow to create a WebSocketContainer passing HttpClient</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5832";>#5832</a> - Ctrl-C after jetty:run produces NoClassDefFoundError</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5835";>#5835</a> - Review Durable Filters, Servlets and Listeners</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5977";>#5977</a> - Cache-Control header set by a filter is override by the value from DefaultServlet configuration</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5994";>#5994</a> - QueuedThreadPool "free" threads</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5996";>#5996</a> - ERROR : No module found to provide logback-impl for logback-access{enabled}</li> <li><a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5999";>#5999</a> - HttpURI ArrayIndexOutOfBounds</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse/jetty.project/commit/d97980b614821651dc801f14c9c73a3f098cf886";><code>d97980b</code></a> Updating to version 11.0.3</li> <li><a href="https://github.com/eclipse/jetty.project/commit/2d08ed6ca09ff95fd58c2641b59a4b6252d34eae";><code>2d08ed6</code></a> Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.</li> <li><a href="https://github.com/eclipse/jetty.project/commit/cd73338b846515be4692fa7d8fa08acffcfad36b";><code>cd73338</code></a> Remove WebSocketComponents & HouseKeeper on Server restart. (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6218";>#6218</a>)</li> <li><a href="https://github.com/eclipse/jetty.project/commit/28562d6d6de5d35a25096a58bc1a323a4e225142";><code>28562d6</code></a> Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.</li> <li><a href="https://github.com/eclipse/jetty.project/commit/802d32d2a8f754ab0075942b0baab3b31d729b42";><code>802d32d</code></a> Fixes <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6207";>#6207</a> - Make ALPN optional in HTTP2Client over TLS</li> <li><a href="https://github.com/eclipse/jetty.project/commit/0e2a809ceb5e0e46612976f2a70f981c5597b9ec";><code>0e2a809</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li><a href="https://github.com/eclipse/jetty.project/commit/455e7989060569fc76608608c76ea0dbfc809ed0";><code>455e798</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6293";>#6293</a> from eclipse/jetty-10.0.x-6287-WebSocketClientClassL...</li> <li><a href="https://github.com/eclipse/jetty.project/commit/462aff39bc601dcf650ab30dea6fb69b7513135b";><code>462aff3</code></a> Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.</li> <li><a href="https://github.com/eclipse/jetty.project/commit/67e2b4af2facade1aa17f0fb82397f4766de1667";><code>67e2b4a</code></a> Fixes <a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/5306";>#5306</a> - Default jetty.*.acceptors should be 1. (<a href="https://github-redirect.dependabot.com/eclipse/jetty.project/issues/6236";>#6236</a>)</li> <li><a href="https://github.com/eclipse/jetty.project/commit/ddbf8e290df170c0ad431161ff21b3d9a41bc173";><code>ddbf8e2</code></a> Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x</li> <li>Additional commits viewable in <a href="https://github.com/eclipse/jetty.project/compare/jetty-11.0.1...jetty-11.0.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org
