sdk-java Bump org.eclipse.jetty:jetty-bom from 9.4.51.v20230217 to 12.0.22

Bumps org.eclipse.jetty:jetty-bom from 9.4.51.v20230217 to 12.0.22.

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.0.22

Changelog

#13182 - Ignore bad cookie names in legacy CookieCutter

#13164 - ProxyServlet abort

#13161 - Change default stop timeout value in WebSocketClient

#13147 - Support maven.offline property in jetty-start, to control of download of maven files from remote repos during --add-modules

#13144 - Cross Context Dispatch with Async does not honor context

#13136 - Do not abort response in nested HttpChannelState.onError if sendError

#13135 - Allow onSuccess to abort Iterating Callback

#13131 - Surface received GOAWAY in HttpClient

#13128 - Merge back Release/12.0.21

#13126 - Fix shared blocking callback hang

#13098 - HTTP2 Server Error Handling is different than HTTP1

#13057 - InvalidPathException instead of MalformedURLException after switching to jetty12

#13013 - Rework websocket FrameFlusher's expiration

#12918 - NullPointerException with ServeAs requests (with FormAuthenticator)

#12659 - Use websocket over varying http protocols using a single client

12.0.21

Changelog

#13088 - Documented Jetty module changes.

#13085 - Improvements to HTTP/2 session container code.

#13067 - Fix default fallback Jetty version

#13064 - Jetty 12.0.x/12.1.x: ShutdownMonitorTest is stuck

#13046 - Restore ee9 (and ee8) behaviors with parsing application/x-www-form-urlencoded parameters

12.0.20

Special Thanks to the following Eclipse Jetty community members

@scrat98 (Artem Golovko)

@kohlschuetter (Christian Kohlschütter)

@garydgregory (Gary Gregory)

Changelog

#13033 - Added "since" and "forRemoval" attributes to AbstractLifeCycle.AbstractLifeCycleListener deprecation, and removed its usages.

#13029 - Web-socket that use permessage-deflate extensions are keeping in memory the last message sent to the client

#13019 - [util-ajax] Support CharSequence instead of String for JSON.parse (@scrat98)

#13017 - Upgrade quiche to version 0.24.0

#13016 - Allow the HttpClient in AbstractProxyServlet to configure additional attributes (@garydgregory)

#13008 - Introduce HttpClient's Request.onResponseListener()

#13004 - QueuedThreadPool throws error on quick successive execute calls if initialized with BlockingArrayQueue or ArrayBlockingQueue

#12988 - Introduce an HTTP/2 frame listener

#12985 - Optimize memory usage of FrameFlusher.timeoutExpired

#12981 - MultiPart annotation scanning not done if metadata-complete==true

#12965 - Allow Resource instances to provide Content.Source directly

... (truncated)

Commits

335c9ab Updating to version 12.0.22
0b3adca Fixes #13098 - HTTP2 Server Error Handling is different than HTTP1 (#13141)
7c8c3bb Fixes #4493 - Document ThreadPoolBudget behavior. (#13188)
317e566 Issue #13144 - Cross context dispatch in ee9/ee8 breaks AsyncContext.dispatch...
3fbe5cd Merge pull request #13182 from jetty/fix/jetty-12.0.x/13168/badCookieNames
d1a3ebb Jetty 12.0.x setup pom and release script for new central portal (#13174)
391ab02 Use new apache-jsp dependencies (#13180)
db0d6d3 Issue #13057 - ServletContext.getResource() failures should result in Malform...
e090592 remove totally spotbugs errorprone
c112a1c Support maven.offline property in jetty-start, to control of download of ma...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Jun 09 '25 11:06 dependabot[bot]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

Jun 09 '25 11:06 CLAassistant

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

Jun 09 '25 11:06 CLAassistant

Superseded by #2585.

Jul 07 '25 13:07 dependabot[bot]