-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump jetty-util from 8.2.0.v20160908 to 9.4.46.v20220331 #883
Bump jetty-util from 8.2.0.v20160908 to 9.4.46.v20220331 #883
Conversation
@dependabot rebase |
c0271dd
to
8284daf
Compare
Bumps [jetty-util](https://github.com/eclipse/jetty.project) from 8.2.0.v20160908 to 11.0.9. - [Release notes](https://github.com/eclipse/jetty.project/releases) - [Commits](jetty/jetty.project@jetty-8.2.0.v20160908...jetty-11.0.9) --- updated-dependencies: - dependency-name: org.eclipse.jetty:jetty-util dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
8284daf
to
bc3cbc6
Compare
Jetty 9.x is the last version that does not use SLF4J natively: cf. [Jetty 9 documentation](https://www.eclipse.org/jetty/documentation/jetty-9/index.html#configuring-logging) vs [Jetty 10 documentation](https://www.eclipse.org/jetty/documentation/jetty-10/operations-guide/index.html#og-logging) Given the EOL announcement jetty/jetty.project#7958, this is the last upgrade we need to perform.
Jetty 9.x is the last version that does not use SLF4J natively: cf. Jetty 9 documentation vs Jetty 10 documentation. Given the EOL announcement jetty/jetty.project#7958, the upgrade to 9.4 would be the last major upgrade we need to perform. |
@dependabot merge |
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
Beyond `log4j-appserver`, `wiremock` also uses Jetty, but an older version.
Something feels wrong because Jetty 11 requires Java > 8 right? |
Yes, Jetty 10 and 11 requires Java 11. Moreover they use SLF4J 2.0 (sic!) for their internal logging. So the only version of |
Bumps jetty-util from 8.2.0.v20160908 to 11.0.9.
Release notes
Sourced from jetty-util's releases.
... (truncated)
Commits
243a48a
Updating to version 11.0.9cc0eb6e
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.xc99b704
Bump grpc-core from 1.45.0 to 1.45.1 (#7804)6b25c27
Bump jolokia-war from 1.3.3 to 1.7.1 (#6907)cfcd67f
Bump jna-jpms from 5.10.0 to 5.11.0 (#7793)1ce2d33
Bump mariadb-java-client from 3.0.3 to 3.0.4 (#7789)325f2a2
Bump jna-jpms from 5.10.0 to 5.11.0 (#7788)2335b66
Bump mariadb-java-client from 3.0.3 to 3.0.4 (#7787)93d607d
Bump jackson-databind from 2.13.2 to 2.13.2.1 (#7785)0255f4f
Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-11.0.xDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot will merge this PR once CI passes on it, as requested by @ppkarwasz.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)