12.0.0

Important Notes

• New Environment System (ee10 / ee9 / ee8)
• Supports ee10 / ee9 / ee8 at the same time (in different deployed webapps)
  • See Jetty 11 to 12 Migration Docs for help finding the new maven coordinates for EE specific artifacts.
• Jetty Core no longer has dependencies on any Jakarta EE Spec

Security Updates

• This release provides a workaround for Security Advisory GHSA-58qw-p7qm-5rvh

Special Thanks to the following Eclipse Jetty community members

@kohlschuetter (Christian Kohlschütter)
@gregpoulos (Greg Poulos)

Changelog

• #10231 - DefaultServlet no longer supports POST and OPTIONS and returns a 405 instead
• #10229 - HttpConfiguration.setIdleTimeout() breaks long running requests
• #10227 - EE10 Unable to use Cookie attributes with HttpServletResponse.addCookie(jakarta.servlet.http.Cookie)
• #10205 - fixes for jetty 12 ee8 websocket demos
• #10178 - Fix demo-spec webapp failures
• #10066 - Allow SAXParserFactory or SAXParser to be configured in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh workaround
• #10165 - rename JAVAX_API to JAKARTA_API in ee9 and ee10 Source
• #10155 - EE10 Servlet include after HttpServletResponse.getWriter().println() omits Content-Length from the response
• #10135 - Websocket: Using PerMessageDeflateExtension and flush in batchMode send FLUSH_FRAME to client.