Skip to content

[improve][misc] Upgrade Jetty to 12.1.11 - #26233

Merged
lhotari merged 1 commit into
apache:masterfrom
lhotari:lh-jetty-12.1.11
Jul 23, 2026
Merged

[improve][misc] Upgrade Jetty to 12.1.11#26233
lhotari merged 1 commit into
apache:masterfrom
lhotari:lh-jetty-12.1.11

Conversation

@lhotari

@lhotari lhotari commented Jul 23, 2026

Copy link
Copy Markdown
Member

Motivation

Keep Pulsar on the latest Jetty 12.1.x patch release. Jetty 12.1.11 release notes: https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.11

Regarding security fixes: no published Jetty security advisory lists 12.1.11 as its patched version — the most recent Jetty CVEs (CVE-2026-10050 and CVE-2026-10051) were already addressed in 12.1.10, which Pulsar upgraded to previously. However, 12.1.11 contains notable robustness and availability fixes that are relevant to Pulsar's use of Jetty in the broker web service, proxy and function worker:

Modifications

  • Bump jetty from 12.1.10 to 12.1.11 in gradle/libs.versions.toml
  • Update the Jetty artifact versions in distribution/server/src/assemble/LICENSE.bin.txt and distribution/shell/src/assemble/LICENSE.bin.txt

Verifying this change

  • Make sure that the change passes the CI checks.

This change is already covered by existing tests: the existing CI test coverage exercises the Jetty-based HTTP endpoints in the broker, proxy and function worker.

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

  • Dependencies (add or upgrade a dependency)
  • The public API
  • The schema
  • The default values of configurations
  • The threading model
  • The binary protocol
  • The REST endpoints
  • The admin CLI options
  • The metrics
  • Anything that affects deployment

@lhotari lhotari added this to the 5.0.0-M2 milestone Jul 23, 2026
@lhotari
lhotari merged commit 4bfb080 into apache:master Jul 23, 2026
43 checks passed
lhotari added a commit that referenced this pull request Jul 25, 2026
lhotari added a commit that referenced this pull request Jul 25, 2026
sandeep-ctds pushed a commit to datastax/pulsar that referenced this pull request Jul 31, 2026
sandeep-ctds pushed a commit to datastax/pulsar that referenced this pull request Jul 31, 2026
sandeep-ctds pushed a commit to datastax/pulsar that referenced this pull request Jul 31, 2026
nodece pushed a commit to ascentstream/pulsar that referenced this pull request Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants