Commit Graph

23994 Commits

Author SHA1 Message Date
Jan Bartel 0b33877040
Issue #7344 - wait for forked jetty process (#7374)
* Issue #7344 Make plugin wait for forked jetty process to stop

Signed-off-by: Jan Bartel <janb@webtide.com>
2022-02-21 13:45:54 +01:00
Olivier Lamy 809ed64b12
ignore too recent weld version for 9.4.x branch (#7607)
Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-02-18 13:31:56 +10:00
dependabot[bot] 3d70c8b4ab
Bump maven-site-plugin from 3.10.0 to 3.11.0 (#7610)
Bumps [maven-site-plugin](https://github.com/apache/maven-site-plugin) from 3.10.0 to 3.11.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases)
- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.10.0...maven-site-plugin-3.11.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-17 15:14:16 -06:00
dependabot[bot] 895868fa62
Merge pull request #7602 from eclipse/dependabot/maven/jetty-10.0.x/org.jboss.weld.servlet-weld-servlet-core-3.1.9.Final 2022-02-17 00:47:13 +00:00
Olivier Lamy 4f52695d4f
Enable errorprone and spotbugs for java 17 (#7604)
* add compiler flag to support errorprone for jdk17 and restore spotbugs parsing
* spotbugs is fine with jdk17

Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-02-17 10:12:01 +10:00
Lachlan 0f5824640a
Merge pull request #7546 from eclipse/jetty-10.0.x-7545-OpenIdXML
Add distribution test for OpenID and fix issues with jetty-openid.xml
2022-02-17 09:54:43 +11:00
Lachlan 514ceca56b
Merge pull request #7579 from eclipse/jetty-10.0.x-7573-WebSocketPathParam
Issue #7573 - fix support in websocket for class path param types
2022-02-17 09:44:53 +11:00
Lachlan 533f2b1b56
Merge pull request #7576 from eclipse/jetty-10.0.x-7567-MultiPartGzip
Issue #7567 - don't compare params when checking MIME type for GzipHandler
2022-02-17 09:07:38 +11:00
Joakim Erdfelt f2e9680431
Honor parameters order when parsing query and form parameters (#7599) (#7605)
* Honor parameters order when parsing query and form parameters

When parsing the query or form parameters in Request, the values are stored in a MultiMap. This class extends HashMap which does not preserve the order of insertion so a request with parameters "first=1&second=2" might end up in a map where "second" will come first when iterating on the entry set. 

The order is necessary in some case where the request is signed off the body and/or the query parameters. When the order is not preserved, it is impossible to reconstruct the original request sent, unless using the Request::getInputStream which consumes the stream and makes subsequent calls to Request::getParameters to don't return the form parameters which can be misleading. The same behavior applied to query parameters, by using Request::getQueryString, you get the correct order but Request::getParameters will not.

Moreoever, if the application is behind a reverse proxy using Jetty that is proxying using Request::getParameters which consume the request InputStream, it will be completely impossible to reconstruct the original request.

* Added a test with parameter merging

Co-authored-by: Jacques-Etienne Beaudet <jebeaudet@gmail.com>
2022-02-16 11:34:30 -06:00
Joakim Erdfelt 292d6cda9f
Issue #7572 - make legit test exception less noisy (#7596) 2022-02-16 04:54:30 -06:00
dependabot[bot] d4f453849c
Bump weld-servlet-core from 3.1.8.Final to 3.1.9.Final
Bumps weld-servlet-core from 3.1.8.Final to 3.1.9.Final.

---
updated-dependencies:
- dependency-name: org.jboss.weld.servlet:weld-servlet-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-16 09:18:38 +00:00
dependabot[bot] e859c98eac
Merge pull request #7593 from eclipse/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-compiler-plugin-3.10.0 2022-02-14 23:15:12 +00:00
Simone Bordet fed2cbd6bd
Merge pull request #7574 from sunng87/turnoff-peer-verification-by-default
Turn off peer cerificate verification for quic-server by default
2022-02-14 19:23:16 +01:00
dependabot[bot] 9b48060794
Bump infinispan-bom from 11.0.14.Final to 11.0.15.Final (#7591)
Bumps [infinispan-bom](https://github.com/infinispan/infinispan) from 11.0.14.Final to 11.0.15.Final.
- [Release notes](https://github.com/infinispan/infinispan/releases)
- [Changelog](https://github.com/infinispan/infinispan/blob/main/Jenkinsfile-release)
- [Commits](https://github.com/infinispan/infinispan/compare/11.0.14.Final...11.0.15.Final)

---
updated-dependencies:
- dependency-name: org.infinispan:infinispan-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-14 07:45:34 -06:00
dependabot[bot] f2550d4478
Bump gson from 2.8.9 to 2.9.0 (#7587)
Bumps [gson](https://github.com/google/gson) from 2.8.9 to 2.9.0.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.8.9...gson-parent-2.9.0)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-14 07:34:24 -06:00
dependabot[bot] 1f665df227
Bump json-smart from 2.4.7 to 2.4.8 (#7581)
Bumps [json-smart](https://github.com/netplex/json-smart-v2) from 2.4.7 to 2.4.8.
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](https://github.com/netplex/json-smart-v2/commits/2.4.8)

---
updated-dependencies:
- dependency-name: net.minidev:json-smart
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-14 07:27:09 -06:00
dependabot[bot] 026be2904f
Bump logback-core from 1.3.0-alpha13 to 1.3.0-alpha14 (#7585)
Bumps [logback-core](https://github.com/qos-ch/logback) from 1.3.0-alpha13 to 1.3.0-alpha14.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.3.0-alpha13...v_1.3.0-alpha14)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-14 07:26:33 -06:00
Ludovic Orban a6cd037923 #7461 Adapt other tests to use less strict assertion for expiring pool
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2022-02-14 12:33:18 +01:00
Ludovic Orban 4382bc122e #7461 Use less strict assertion for expiring pool to account for potential expirations
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2022-02-14 12:33:18 +01:00
dependabot[bot] 0f1dcfe233
Bump maven-compiler-plugin from 3.8.1 to 3.10.0
Bumps [maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.8.1 to 3.10.0.
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.8.1...maven-compiler-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-14 08:56:07 +00:00
Lachlan Roberts 7081a776b7 Issue #7573 - fix support in websocket for class path param types
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-14 16:37:57 +11:00
dependabot[bot] d42664ee1e
Merge pull request #7568 from eclipse/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-javadoc-plugin-3.3.2 2022-02-14 02:52:05 +00:00
Lachlan Roberts 21ec2f072f Issue #7567 - don't need to convert to lowercase with a AsciiLowerCaseSet
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-14 12:23:55 +11:00
Lachlan Roberts 0aa307db64 Issue #7567 - don't compare params when checking MIME type for GzipHandler
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-14 12:13:14 +11:00
Ning Sun 65a47a369d
Turn off mutual TLS for quic-server by default
Signed-off-by: Ning Sun <sunng@protonmail.com>
2022-02-13 21:36:38 +08:00
Joakim Erdfelt b99984d12d
Fixing Jetty 10 release - must use Java 17 (#7556)
* Fixing missing `jdk.incubator.foreign` error during /javadoc/ (aggregate module) build.
* eclipse-release profile now ensures that JDK 17 is used
* Exclude quiche modules from javadoc
* Enable jacoco on JDK 17 (seems to work now)
* Flip JDK importance around (JDK17 first, JDK11 next)
* errorprone not available on JDK17 (yet)
* correcting errors during Jenkinsfile recordIssues
* Remove pmd (not being used anymore)
* Bump javadoc from 3.3.1 to 3.3.2
2022-02-11 14:56:38 -06:00
dependabot[bot] 3a98712a62
Bump maven-javadoc-plugin from 3.3.1 to 3.3.2
Bumps [maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](https://github.com/apache/maven-javadoc-plugin/compare/maven-javadoc-plugin-3.3.1...maven-javadoc-plugin-3.3.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-11 10:35:01 +00:00
Jan Bartel ff0b596ca7
Issue #7513 Move jmx annotation to PropertiesConfigurationManager.getFile (#7532)
Signed-off-by: Jan Bartel <janb@webtide.com>
2022-02-11 09:16:26 +11:00
dependabot[bot] 9602120b9b
Bump openwebbeans.version from 2.0.25 to 2.0.26 (#7549)
Bumps `openwebbeans.version` from 2.0.25 to 2.0.26.

Updates `openwebbeans-web` from 2.0.25 to 2.0.26
- [Release notes](https://github.com/apache/openwebbeans/releases)
- [Commits](https://github.com/apache/openwebbeans/compare/openwebbeans-2.0.25...openwebbeans-2.0.26)

Updates `openwebbeans-jetty9` from 2.0.25 to 2.0.26
- [Release notes](https://github.com/apache/openwebbeans/releases)
- [Commits](https://github.com/apache/openwebbeans/compare/openwebbeans-2.0.25...openwebbeans-2.0.26)

---
updated-dependencies:
- dependency-name: org.apache.openwebbeans:openwebbeans-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.openwebbeans:openwebbeans-jetty9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-10 12:11:00 -06:00
dependabot[bot] 1471b502a7
Bump hawtio-default from 2.14.4 to 2.14.5 (#7559)
Bumps [hawtio-default](https://github.com/hawtio/hawtio) from 2.14.4 to 2.14.5.
- [Release notes](https://github.com/hawtio/hawtio/releases)
- [Changelog](https://github.com/hawtio/hawtio/blob/main/CHANGES.md)
- [Commits](https://github.com/hawtio/hawtio/compare/hawtio-2.14.4...hawtio-2.14.5)

---
updated-dependencies:
- dependency-name: io.hawt:hawtio-default
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-10 07:24:08 -06:00
Jochen Schalanda 9073fe2193
Bump slf4j to 2.0.0-alpha6 (#7555)
> SLF4J 2.0.x series requires Java 8. It builds upon the 1.8.x series and adds a backward-compatible fluent logging api. By backward-compatible, we mean that existing logging frameworks do not have to be changed for the user to benefit from the [fluent logging API](https://www.slf4j.org/manual.html#fluent). However, existing frameworks must migrate to the `ServiceLoader` mechanism. The resulting internal changes are [detailed](https://www.slf4j.org/faq.html#changesInVersion200) in the FAQ page.
>
> - SLF4J now ships with the slf4j-reload4j module delegating to the reload4j backend. Reload4j is a drop-in replacement for log4j version 1.2.17.
> - `SimpleLogger` now prints the thread Id if instructed to do so. This fixes [SLF4J-499](https://jira.qos.ch/browse/SLF4J-499) requested by Michael Osipov

Signed-off-by: Jochen Schalanda <jochen@schalanda.name>
2022-02-09 08:48:46 -06:00
dependabot[bot] aca6695e24
Bump osgi.annotation from 8.0.1 to 8.1.0 (#7552)
Bumps [osgi.annotation](https://github.com/osgi/osgi) from 8.0.1 to 8.1.0.
- [Release notes](https://github.com/osgi/osgi/releases)
- [Commits](https://github.com/osgi/osgi/commits)

---
updated-dependencies:
- dependency-name: org.osgi:osgi.annotation
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-09 05:07:03 -06:00
Simone Bordet ce0d3c7b8d
Merge pull request #7547 from kaiyuezhou/kaiyuezhou/fix-typo
Fix typo in java doc
2022-02-08 10:15:45 +01:00
Lachlan Roberts 2c60549eee Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-10.0.x-7545-OpenIdXML 2022-02-08 16:02:11 +11:00
Kaiyue Zhou d67fc16a48 Fix typo: "application/octect-stream" -> "application/octet-stream" 2022-02-08 13:01:25 +08:00
Lachlan Roberts 5fe999caa2 Issue #7545 - changes from review
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-08 15:59:23 +11:00
Lachlan Roberts e1d149f84c Issue #7545 - add name annotations for args in OpenIdConfiguration constructor
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-08 15:28:54 +11:00
Lachlan Roberts 58c230e26c Issue #7545 - add distribution test for jetty-openid so that we can test XML
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-02-08 15:28:02 +11:00
dependabot[bot] 6c79be91b7
Merge pull request #7536 from eclipse/dependabot/maven/jetty-10.0.x/com.google.cloud-google-cloud-datastore-2.2.4 2022-02-08 04:27:28 +00:00
Jan Bartel c742c2ef9d
Issue #7414 Deprecate QoSFilter setters (#7506)
* Issue #7414 Deprecate QoSFilter setters

Signed-off-by: Jan Bartel <janb@webtide.com>
2022-02-08 14:27:33 +11:00
Greg Wilkins bdc60ee711
Jetty 10.0.x #7517 #7518 trie fixes (#7533)
* Fix #7518 Trie.getBest with empty Key (#7527)

Fix #7518 Trie.getBest with empty Key

 * Only increment current row if not recursing.
 * Fixed match ending with big char

Signed-off-by: Greg Wilkins <gregw@webtide.com>

* Jetty 9.4.x 7517 trie stack overflow (#7528)

Fix #7518 Trie stack overflows

* Avoid recursion where possible

Signed-off-by: Greg Wilkins <gregw@webtide.com>

* Added extra tests

Signed-off-by: Greg Wilkins <gregw@webtide.com>

* removed empty file

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2022-02-08 06:20:50 +11:00
dependabot[bot] 9e41227a3b
Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.1 (#7543)
Bumps [maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin) from 3.1.2 to 3.2.1.
- [Release notes](https://github.com/apache/maven-project-info-reports-plugin/releases)
- [Commits](https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.1.2...maven-project-info-reports-plugin-3.2.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-project-info-reports-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-07 12:08:45 -06:00
Simone Bordet 67532c85f0
Updated VERSION.txt with 9.4.44 (missing from a previous merge) and 9.4.45 releases.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2022-02-07 17:08:52 +01:00
Simone Bordet a4fda96f49
Updating to version 10.0.9-SNAPSHOT 2022-02-07 12:02:02 +01:00
Simone Bordet 716c7afd8e
Updating to version 10.0.8 2022-02-07 11:34:12 +01:00
Simone Bordet 35b76de25c
Updated Jetty Quiche Native to 0.11.0.2.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2022-02-07 11:23:41 +01:00
Ludovic Orban bf53b23ef0
#7529 upgrade quiche native lib to version 0.11.0b to work on less recent linux libc (#7534)
#7529 upgrade quiche native lib to version 0.11.0.1 to work on less recent linux libc

Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2022-02-04 13:58:19 +01:00
dependabot[bot] 1184dc273d
Bump google-cloud-datastore from 2.2.3 to 2.2.4
Bumps [google-cloud-datastore](https://github.com/googleapis/java-datastore) from 2.2.3 to 2.2.4.
- [Release notes](https://github.com/googleapis/java-datastore/releases)
- [Changelog](https://github.com/googleapis/java-datastore/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/java-datastore/compare/v2.2.3...v2.2.4)

---
updated-dependencies:
- dependency-name: com.google.cloud:google-cloud-datastore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-04 09:20:36 +00:00
Simone Bordet 4166f85026
Merge pull request #7530 from eclipse/jetty-10.0.x-7529-upgrade-quiche-0_11_0
Upgrade quiche native lib to version 0.11.0
2022-02-03 11:25:39 +01:00
Ludovic Orban 9d3e21365f #7529 upgrade quiche native lib to version 0.11.0
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2022-02-03 10:46:20 +01:00