Commit Graph

25759 Commits

Author SHA1 Message Date
dependabot[bot] 5e4986db52
Bump maven-install-plugin from 3.0.0-M1 to 3.0.1
Bumps [maven-install-plugin](https://github.com/apache/maven-install-plugin) from 3.0.0-M1 to 3.0.1.
- [Release notes](https://github.com/apache/maven-install-plugin/releases)
- [Commits](https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.0.0-M1...maven-install-plugin-3.0.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-install-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:16:00 +00:00
dependabot[bot] a8c356865a
Bump spotbugs-maven-plugin from 4.7.1.0 to 4.7.1.1
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.1.0 to 4.7.1.1.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.1.0...spotbugs-maven-plugin-4.7.1.1)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:14:37 +00:00
dependabot[bot] 5c6c5b6a63
Bump maven-assembly-plugin from 3.4.1 to 3.4.2
Bumps [maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.4.1...maven-assembly-plugin-3.4.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:14:21 +00:00
dependabot[bot] d5d934c9c1
Bump grpc-core from 1.47.0 to 1.48.0
Bumps [grpc-core](https://github.com/grpc/grpc-java) from 1.47.0 to 1.48.0.
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.47.0...v1.48.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:13:54 +00:00
dependabot[bot] 02be9de64b
Bump wildfly-elytron from 1.19.0.Final to 1.20.0.Final
Bumps [wildfly-elytron](https://github.com/wildfly-security/wildfly-elytron) from 1.19.0.Final to 1.20.0.Final.
- [Release notes](https://github.com/wildfly-security/wildfly-elytron/releases)
- [Commits](https://github.com/wildfly-security/wildfly-elytron/compare/1.19.0.Final...1.20.0.Final)

---
updated-dependencies:
- dependency-name: org.wildfly.security:wildfly-elytron
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:13:52 +00:00
dependabot[bot] 1e4140064a
Bump maven-resources-plugin from 3.2.0 to 3.3.0
Bumps [maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](https://github.com/apache/maven-resources-plugin/compare/maven-resources-plugin-3.2.0...maven-resources-plugin-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:13:43 +00:00
dependabot[bot] d5f3e7ead4
Bump exec-maven-plugin from 3.0.0 to 3.1.0
Bumps [exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/exec-maven-plugin-3.0.0...exec-maven-plugin-3.1.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:13:38 +00:00
dependabot[bot] 5a4ac8c1d7
Bump maven-assembly-plugin from 3.4.1 to 3.4.2
Bumps [maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.4.1...maven-assembly-plugin-3.4.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:12:50 +00:00
dependabot[bot] db202a574b
Bump maven-resources-plugin from 3.2.0 to 3.3.0
Bumps [maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](https://github.com/apache/maven-resources-plugin/compare/maven-resources-plugin-3.2.0...maven-resources-plugin-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:12:32 +00:00
dependabot[bot] 5857d64d59
Bump h2spec-maven-plugin from 1.0.9 to 1.0.10
Bumps [h2spec-maven-plugin](https://github.com/jetty-project/h2spec-maven-plugin) from 1.0.9 to 1.0.10.
- [Release notes](https://github.com/jetty-project/h2spec-maven-plugin/releases)
- [Commits](https://github.com/jetty-project/h2spec-maven-plugin/compare/h2spec-maven-plugin-1.0.9...h2spec-maven-plugin-1.0.10)

---
updated-dependencies:
- dependency-name: org.mortbay.jetty:h2spec-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:12:10 +00:00
dependabot[bot] 77ef7092e2
Bump maven.resolver.version from 1.8.1 to 1.8.2
Bumps `maven.resolver.version` from 1.8.1 to 1.8.2.

Updates `maven-resolver-api` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-util` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-spi` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-impl` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-connector-basic` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-transport-file` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

Updates `maven-resolver-transport-http` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.8.1...maven-resolver-1.8.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-file
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:11:47 +00:00
Lachlan Roberts 8a8bc4e45b Issue #8353 - do not attempt to send pong frame after output closed
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-29 16:45:46 +10:00
Simone Bordet 73609a07ab
Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2022-07-28 19:10:23 +02:00
Marc Philipp 4a6c2744a0 Grow request queue instead of pre-allocating it
To avoid excess allocation, in particular for higher values of
`MaxRequestsQueuedPerDestination`, the per-destination request queue is
now initialized with a capacity of 32 entries and configured to grow 32
entries at a time until the maximum is reached.

Resolves #8319.
2022-07-28 19:07:36 +02:00
Lachlan Roberts 7d7dd41dee add javadoc for Resource.resolveAlias
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-28 18:00:56 +10:00
Olivier Lamy eb6ff577ae
codeql correctly setup maven to not depend on default installation (#8334)
* setup Maven via a GHA
2022-07-28 07:02:45 +10:00
Lachlan Roberts 99cb930d78 changes from review PR #8315
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-27 10:21:35 +10:00
dependabot[bot] 6f1ee73221
Bump log4j-api from 2.17.2 to 2.18.0 (#8304)
Bumps log4j-api from 2.17.2 to 2.18.0.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-26 10:23:18 +10:00
Joakim Erdfelt 8102378e2d
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2022-07-21 06:55:27 -05:00
Olivier Lamy e3b0e80857
skip test for CodeQL (#8324)
* skip test for CodeQL
* remove javascript and use clean
2022-07-21 06:55:13 -05:00
Lachlan Roberts cff4ff6c98 Issue #8296 - attempt to resolve symlinks for baseResource in ContextHandler.doStart()
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-21 18:59:51 +10:00
Joakim Erdfelt d9be926b0d
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2022-07-21 02:40:46 -05:00
Joakim Erdfelt cbed42491a
Excluding Stress/Slow tests from normal CI builds. (#8314)
Nightly CI builds still run them.

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-07-21 02:40:26 -05:00
Joakim Erdfelt 5f93e02a6d
Updating issue templates for EOL (#8321) 2022-07-20 17:01:05 -05:00
Lachlan Roberts 05709245a1 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2022-07-20 14:45:12 +10:00
Lachlan b74da7ce3b
Merge pull request #8286 from eclipse/jetty-10.0.x-8216-openid-logout
Issue #8216 - OpenID Connect RP-Initiated Logout
2022-07-20 14:39:13 +10:00
Joakim Erdfelt d8c6de7d58
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2022-07-18 12:39:52 -05:00
Greg Wilkins 26a255e481
Fix #8294 push added cookie (#8298)
* Fix #8294 push added cookie

Reparse cookie added with addCookie
Added extra test to ensure maxAge is being parsed with other cookie attributes

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2022-07-18 12:39:40 -05:00
Joakim Erdfelt 252539d77d
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2022-07-18 12:39:14 -05:00
dependabot[bot] 69b851c6e6
Bump spotbugs-maven-plugin from 4.7.0.0 to 4.7.1.0 (#8303)
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.0.0 to 4.7.1.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.0.0...spotbugs-maven-plugin-4.7.1.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 12:34:10 -05:00
dependabot[bot] a166a986be
Bump google-cloud-datastore from 2.9.1 to 2.10.1 (#8306)
Bumps [google-cloud-datastore](https://github.com/googleapis/java-datastore) from 2.9.1 to 2.10.1.
- [Release notes](https://github.com/googleapis/java-datastore/releases)
- [Changelog](https://github.com/googleapis/java-datastore/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/java-datastore/compare/v2.9.1...v2.10.1)

---
updated-dependencies:
- dependency-name: com.google.cloud:google-cloud-datastore
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 12:33:48 -05:00
dependabot[bot] 975c93b488
Bump tycho-p2-repository-plugin from 2.7.3 to 2.7.4 (#8305)
Bumps tycho-p2-repository-plugin from 2.7.3 to 2.7.4.

---
updated-dependencies:
- dependency-name: org.eclipse.tycho:tycho-p2-repository-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 12:33:35 -05:00
dependabot[bot] 132095e8c3
Bump tycho-p2-repository-plugin from 2.7.3 to 2.7.4 (#8309)
Bumps tycho-p2-repository-plugin from 2.7.3 to 2.7.4.

---
updated-dependencies:
- dependency-name: org.eclipse.tycho:tycho-p2-repository-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 12:33:23 -05:00
dependabot[bot] 2463736716
Bump spotbugs-maven-plugin from 4.7.0.0 to 4.7.1.0 (#8308)
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.0.0 to 4.7.1.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.0.0...spotbugs-maven-plugin-4.7.1.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 12:33:09 -05:00
Lachlan Roberts 6c35fc6f65 Issue #8259 - AliasCheckers for different resource bases on same Context
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-18 17:22:38 +10:00
Lachlan Roberts 23df34e2d4 Issue #8296 - let AllowedResourceAliasChecker work before fully started
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-18 15:21:17 +10:00
Lachlan Roberts 5f246ae5d7 Issue #8296 - add test for issue 8296
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-18 15:20:44 +10:00
dependabot[bot] 96f8dd6ffc
Bump log4j-api from 2.17.2 to 2.18.0 (#8302)
Bumps log4j-api from 2.17.2 to 2.18.0.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-14 20:39:33 +10:00
dependabot[bot] 7efa6ce56f
Bump maven-assembly-plugin from 3.3.0 to 3.4.1 (#8307)
Bumps [maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) from 3.3.0 to 3.4.1.
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.3.0...maven-assembly-plugin-3.4.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-14 17:46:18 +10:00
dependabot[bot] 62f48cccf1
Bump maven-assembly-plugin from 3.3.0 to 3.4.1 (#8301)
Bumps [maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) from 3.3.0 to 3.4.1.
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.3.0...maven-assembly-plugin-3.4.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-14 16:02:56 +10:00
dependabot[bot] 442fdeb60d
Bump google-cloud-datastore from 2.10.0 to 2.10.1 (#8300)
Bumps [google-cloud-datastore](https://github.com/googleapis/java-datastore) from 2.10.0 to 2.10.1.
- [Release notes](https://github.com/googleapis/java-datastore/releases)
- [Changelog](https://github.com/googleapis/java-datastore/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/java-datastore/compare/v2.10.0...v2.10.1)

---
updated-dependencies:
- dependency-name: com.google.cloud:google-cloud-datastore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-14 16:02:42 +10:00
Joakim Erdfelt ee739ff01e
Remove `jetty-9.4.x` configuration from dependabot (#8297)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-07-14 13:09:43 +10:00
Olivier Lamy 9149945945
simplify pom by using simple property rather than xml fragment (#7580)
* simplify pom by using simple property rather than xml fragment

Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-07-14 09:42:28 +10:00
Olivier Lamy c41c73b8de
Add jetty maven plugin ITs as part of code coverage as we do it :) (#7962)
* enable of jacoco coverage for maven its plugin

Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-07-14 07:19:45 +10:00
Lachlan Roberts c38b3261f4 Issue #8216 - fix broken test OpenIdAuthenticationTest
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-13 15:28:21 +10:00
Lachlan Roberts 6de385eac8 Issue #8216 - change logic on when to redirect
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-13 13:37:12 +10:00
Lachlan Roberts 90fe5621f9 Issue #8216 - improve testing for end_session_endpoint
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-12 15:17:08 +10:00
Lachlan Roberts 26732c90a0 Issue #8216 - Use HttpServletRequest.logout() for openid end_session_endpoint redirect
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2022-07-12 12:40:45 +10:00
Lachlan Roberts 92cf466801 Merge commit '5282ca37ef7a81789b3c1d0a41854259898bce96' into jetty-10.0.x-8216-openid-logout 2022-07-12 11:52:09 +10:00
Joakim Erdfelt c58e05a6fa
Merge remote-tracking branch 'origin/jetty-11.0.x' into fix/jetty-11.0.x-cve-update 2022-07-08 16:51:10 -05:00