Skip to content

chore: Update Jetty to 12.1.9 and jakarta-servlet-api to 6.1.0#104

Open
sidharth-jain23 wants to merge 4 commits into
hypertrace:mainfrom
sidharth-jain23:jetty-upgrade
Open

chore: Update Jetty to 12.1.9 and jakarta-servlet-api to 6.1.0#104
sidharth-jain23 wants to merge 4 commits into
hypertrace:mainfrom
sidharth-jain23:jetty-upgrade

Conversation

@sidharth-jain23
Copy link
Copy Markdown

@sidharth-jain23 sidharth-jain23 commented May 14, 2026

Description

Upgrade Jetty from 11.0.26 to 12.1.9 to address security vulnerabilities in the older Jetty version. This also bumps jakarta-servlet-api from 6.0.0 to 6.1.0 as required by Jetty 12.1 EE10.

Jetty 12 restructured its module coordinates — servlet-related modules moved under the org.eclipse.jetty.ee10 group. This PR updates the BOM aliases accordingly:

  • jetty-servlet → org.eclipse.jetty.ee10:jetty-ee10-servlet
  • jetty-servlets → org.eclipse.jetty.ee10:jetty-ee10-servlets
  • jetty-server remains org.eclipse.jetty:jetty-server (core module, unchanged)

Testing

  • Built downstream services that consume this BOM to confirm they compile and run correctly with the new Jetty 12 + EE10 module coordinates.
  • Manually tested end-to-end with corresponding hypertrace-service-framework changes.

@sidharth-jain23 sidharth-jain23 requested a review from a team as a code owner May 14, 2026 15:09
@sidharth-jain23 sidharth-jain23 changed the title Update Jetty to 12.1.7 and jakarta-servlet-api to 6.1.0 chore: Update Jetty to 12.1.7 and jakarta-servlet-api to 6.1.0 May 14, 2026
@sidharth-jain23 sidharth-jain23 changed the title chore: Update Jetty to 12.1.7 and jakarta-servlet-api to 6.1.0 chore: Update Jetty to 12.1.8 and jakarta-servlet-api to 6.1.0 May 14, 2026
- Migrate Jetty module coordinates to EE10 variants for Jetty 12 compatibility:
  - jetty-servlet -> org.eclipse.jetty.ee10:jetty-ee10-servlet
  - jetty-servlets -> org.eclipse.jetty.ee10:jetty-ee10-servlets
- jetty-server remains org.eclipse.jetty:jetty-server (core module)
- Bump jakarta-servlet-api from 6.0.0 to 6.1.0 (required by Jetty 12.1 EE10)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The EE10 servlet modules (org.eclipse.jetty.ee10:*) are not managed by
the core jetty-bom (org.eclipse.jetty:jetty-bom). Add the jetty-ee10-bom
as a platform import and explicit versions to ensure resolution works.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Comment thread hypertrace-bom/build.gradle.kts Outdated
@sidharth-jain23 sidharth-jain23 changed the title chore: Update Jetty to 12.1.8 and jakarta-servlet-api to 6.1.0 chore: Update Jetty to 12.1.9 and jakarta-servlet-api to 6.1.0 May 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants