Commit Graph

26199 Commits

Author SHA1 Message Date
Joakim Erdfelt 5bc5e562c8
Updating to version 11.0.15 2023-04-11 13:37:23 -05:00
Lachlan Roberts a77c8798f4 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-11 12:21:22 +10:00
Lachlan 24b7d06fd5
Issue #9464 - Add optional configuration to log user out after OpenID idToken expires. (Jetty-10) (#9528)
* improvements to logout from the OpenIdLoginService validate
* respect idToken expiry for lifetime of login
* fix checkstyle error
* Add respectIdTokenExpiry configuration
* changes from review
* rename respectIdTokenExpiry to logoutWhenIdTokenIsExpired
* changes from review

---------

Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-11 12:20:16 +10:00
Joakim Erdfelt d35f479f1e
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-10 09:33:29 -05:00
Joakim Erdfelt 81efae2f98
jetty-start cleanup (#9555)
* Extract jars/zips using zipfs
* Restrict MavenMetadata external DTD/XSD access
* Introduce --allow-insecure-http-downloads
* Produce debug log if file exists in destination during copy.
* Simpler MavenMetadata
* If `maven.repo.uri` has been redeclared by user, automatically set allow insecure http downloads.

---------

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-10 08:53:58 -05:00
Simone Bordet 3aaaeb2687
Merged branch 'jetty-10.0.x' into 'jetty-11.0.x'.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2023-04-06 11:25:15 +02:00
Simone Bordet 2c61011de1
Fixes #6184 - JEP-411 will deprecate/remove the SecurityManager from … (#9616)
* Fixes #6184 - JEP-411 will deprecate/remove the SecurityManager from the JVM.

Removed usages of `SecurityManager` and `AccessControlller.doPrivileged()`.
In places where they are still necessary, now using reflection via newly introduced `SecurityUtils` class.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2023-04-06 10:59:02 +02:00
Lachlan Roberts b96a605681 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-06 09:35:07 +10:00
Lachlan 795315f6ff
Merge pull request #9531 from eclipse/jetty-10.0.x-multiPartTestImprovment
parameterize MultiPartServletTest for complianceModes and add extra test
2023-04-06 09:34:34 +10:00
Joakim Erdfelt 8bbde2983a
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-05 16:03:51 -05:00
Joakim Erdfelt 3e42cbfd7b
Fixes #9556 - Better prompt for input on Password (#9557)
* Fixes #9556 - Better prompt for input on Password
* Allow blank username (results in no CRYPT output)
* Error on blank password during input
* Fixing PasswordTest.testCommandLineUsage
* Changes from review

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-05 16:02:01 -05:00
Ludovic Orban 30cbd5a020 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2023-04-05 18:54:58 +02:00
Ludovic Orban 9ff24ea443 #9622 replace wait loops with awaitility and ensure the tested values are stable for a certain duration
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2023-04-05 18:52:05 +02:00
Joakim Erdfelt 642ce818ae
Update README about build tools (#9545)
* Update README about build tools
* Add Docker as tool needed for third party testing
* fast build and jdk to use
* add home/runner locations/branches

---------

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
Signed-off-by: Olivier Lamy <olamy@apache.org>
Co-authored-by: Olivier Lamy <olamy@apache.org>
2023-04-05 08:59:50 -05:00
Joakim Erdfelt c7004cacbc
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-03 14:30:54 -05:00
Joakim Erdfelt a87784cf5d
Merge pull request #9585 from eclipse/dependabot/maven/jetty-10.0.x/maven.surefire.plugin.version-3.0.0
Bump maven.surefire.plugin.version from 3.0.0-M9 to 3.0.0
2023-04-03 14:30:03 -05:00
Joakim Erdfelt b1f8e4bc98
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-03 13:11:25 -05:00
Joakim Erdfelt 7c03051151
Merge pull request #9575 from eclipse/dependabot/maven/jetty-10.0.x/org.infinispan.protostream-protostream-4.6.2.Final
Bump protostream from 4.6.1.Final to 4.6.2.Final
2023-04-03 13:10:20 -05:00
Joakim Erdfelt 429f582f35
Merge pull request #9593 from eclipse/dependabot/maven/jetty-11.0.x/ch.qos.logback-logback-core-1.4.6
Bump logback-core from 1.4.5 to 1.4.6
2023-04-02 12:13:01 -05:00
dependabot[bot] bc8bd45f5a
Bump maven.surefire.plugin.version from 3.0.0-M9 to 3.0.0
Bumps `maven.surefire.plugin.version` from 3.0.0-M9 to 3.0.0.

Updates `maven-failsafe-plugin` from 3.0.0-M9 to 3.0.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M9...surefire-3.0.0)

Updates `maven-surefire-plugin` from 3.0.0-M9 to 3.0.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M9...surefire-3.0.0)

Updates `surefire-junit47` from 3.0.0-M9 to 3.0.0

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.surefire:surefire-junit47
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-02 16:36:32 +00:00
dependabot[bot] 10f79e19bd
Bump protostream from 4.6.1.Final to 4.6.2.Final
Bumps [protostream](https://github.com/infinispan/protostream) from 4.6.1.Final to 4.6.2.Final.
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](https://github.com/infinispan/protostream/commits)

---
updated-dependencies:
- dependency-name: org.infinispan.protostream:protostream
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-02 16:36:31 +00:00
dependabot[bot] 78e5f93ce8
Bump logback-core from 1.4.5 to 1.4.6
Bumps [logback-core](https://github.com/qos-ch/logback) from 1.4.5 to 1.4.6.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.4.5...v_1.4.6)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-02 15:36:40 +00:00
Joakim Erdfelt 33bb507751
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.x 2023-04-02 10:35:03 -05:00
Joakim Erdfelt 59646cdf4c
Merge pull request #9614 from eclipse/fix/10.0.x/dependabot-rollup-2023-april
Jetty 10 - Dependabot Rollup (2023 - April)
2023-04-02 10:32:39 -05:00
Joakim Erdfelt fc06feab6b
Bump osgi.util.promise to 1.3.0
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-02 08:45:15 -05:00
Joakim Erdfelt 64b8a7fa2e
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.platform-org.eclipse.osgi-3.18.300' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:48 -05:00
Joakim Erdfelt 6de595c8e1
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.platform-org.eclipse.osgi.util-3.7.200' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:46 -05:00
Joakim Erdfelt 3ddb5ee8f1
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.tycho-tycho-p2-repository-plugin-3.0.4' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:44 -05:00
Joakim Erdfelt 05b14ff668
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.codehaus.plexus-plexus-utils-3.5.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:39 -05:00
Joakim Erdfelt d57b0d7317
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.asciidoctor-asciidoctor-maven-plugin-2.2.3' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:37 -05:00
Joakim Erdfelt 2048f5f8bd
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.scm-maven-scm-provider-jgit-2.0.0' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:34 -05:00
Joakim Erdfelt 75f9bf0f46
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-resources-plugin-3.3.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:31 -05:00
Joakim Erdfelt 5a02f7de71
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-release-plugin-3.0.0' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:29 -05:00
Joakim Erdfelt 9baa5089b8
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-invoker-plugin-3.5.1' into fix/10.0.x/dependabot-rollup-2023-april
# Conflicts:
#	pom.xml
2023-04-02 06:39:26 -05:00
Joakim Erdfelt 8241c6ab1f
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-install-plugin-3.1.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:01 -05:00
Joakim Erdfelt 388ee02ad8
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-deploy-plugin-3.1.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:38:59 -05:00
Joakim Erdfelt f94c396d1c
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.commons-commons-compress-1.23.0' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:38:56 -05:00
Joakim Erdfelt 485a4ae491
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/net.minidev-json-smart-2.4.10' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:38:54 -05:00
Joakim Erdfelt 0de8aa7fe7
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/maven.resolver.version-1.9.7' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:38:27 -05:00
Joakim Erdfelt 03fbcbd35d
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/asm.version-9.5' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:37:04 -05:00
dependabot[bot] 90f33ab433
Bump maven-release-plugin from 2.5.3 to 3.0.0
Bumps [maven-release-plugin](https://github.com/apache/maven-release) from 2.5.3 to 3.0.0.
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](https://github.com/apache/maven-release/compare/maven-release-2.5.3...maven-release-3.0.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:14:15 +00:00
dependabot[bot] 98dbfe17a5
Bump tycho-p2-repository-plugin from 3.0.3 to 3.0.4
Bumps tycho-p2-repository-plugin from 3.0.3 to 3.0.4.

---
updated-dependencies:
- dependency-name: org.eclipse.tycho:tycho-p2-repository-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:13:22 +00:00
dependabot[bot] 783b25ffdf
Bump logback-core from 1.3.5 to 1.3.6
Bumps [logback-core](https://github.com/qos-ch/logback) from 1.3.5 to 1.3.6.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.3.5...v_1.3.6)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:11:36 +00:00
dependabot[bot] 512f3de172
Bump asciidoctor-maven-plugin from 2.2.2 to 2.2.3
Bumps [asciidoctor-maven-plugin](https://github.com/asciidoctor/asciidoctor-maven-plugin) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/asciidoctor/asciidoctor-maven-plugin/releases)
- [Changelog](https://github.com/asciidoctor/asciidoctor-maven-plugin/blob/asciidoctor-maven-plugin-2.2.3/CHANGELOG.adoc)
- [Commits](https://github.com/asciidoctor/asciidoctor-maven-plugin/compare/asciidoctor-maven-plugin-2.2.2...asciidoctor-maven-plugin-2.2.3)

---
updated-dependencies:
- dependency-name: org.asciidoctor:asciidoctor-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:11:02 +00:00
dependabot[bot] 9cebe48a72
Bump maven-install-plugin from 3.1.0 to 3.1.1
Bumps [maven-install-plugin](https://github.com/apache/maven-install-plugin) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/apache/maven-install-plugin/releases)
- [Commits](https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.0...maven-install-plugin-3.1.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-install-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:10:22 +00:00
dependabot[bot] 7e588c87ab
Bump org.eclipse.osgi.util from 3.7.100 to 3.7.200
Bumps [org.eclipse.osgi.util](https://github.com/eclipse-equinox/equinox) from 3.7.100 to 3.7.200.
- [Release notes](https://github.com/eclipse-equinox/equinox/releases)
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

---
updated-dependencies:
- dependency-name: org.eclipse.platform:org.eclipse.osgi.util
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:08:35 +00:00
dependabot[bot] 6dd6dc5a07
Bump maven-invoker-plugin from 3.4.0 to 3.5.1
Bumps [maven-invoker-plugin](https://github.com/apache/maven-invoker-plugin) from 3.4.0 to 3.5.1.
- [Release notes](https://github.com/apache/maven-invoker-plugin/releases)
- [Commits](https://github.com/apache/maven-invoker-plugin/compare/maven-invoker-plugin-3.4.0...maven-invoker-plugin-3.5.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-invoker-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:07:52 +00:00
dependabot[bot] 5cbff76959
Bump json-smart from 2.4.9 to 2.4.10
Bumps [json-smart](https://github.com/netplex/json-smart-v2) from 2.4.9 to 2.4.10.
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](https://github.com/netplex/json-smart-v2/compare/2.4.9...2.4.10)

---
updated-dependencies:
- dependency-name: net.minidev:json-smart
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:06:46 +00:00
dependabot[bot] 0e7bc950f0
Bump maven-deploy-plugin from 3.1.0 to 3.1.1
Bumps [maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](https://github.com/apache/maven-deploy-plugin/compare/maven-deploy-plugin-3.1.0...maven-deploy-plugin-3.1.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:06:42 +00:00
dependabot[bot] 6009716057
Bump maven-resources-plugin from 3.3.0 to 3.3.1
Bumps [maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](https://github.com/apache/maven-resources-plugin/compare/maven-resources-plugin-3.3.0...maven-resources-plugin-3.3.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 01:06:29 +00:00