jetty-9.4.43.v20210629 - 30 June 2021

 + 6379 Reduce contention in all `ByteBufferPool` implementations
 + 6382 HttpClient TimeoutException message reports transient values
 + 6400 QueuedThreadPool interrupts pool threads when stopped with zero timeout
 + 6425 Update to asm 9.1
 + 6447 Deprecate support for UTF16 encoding in URIs
 + 6470 java.nio.ReadOnlyBufferException
 + 6473 Improve alias checking in PathResource

jetty-11.0.6 - 29 June 2021

 + 6375 Always check XML `Set` elements with `property` attribute
 + 6382 HttpClient TimeoutException message reports transient values
 + 6394 Review osgi manifests within Jetty 10
 + 6407 Malformed scheme logical expression check in WebSocket
   ClientUpgradeRequest
 + 6410 Ensure Jetty IO uses SocketAddress instead of InetSocketAddress
 + 6418 Bad and/or missing Require-Capability for osgi.serviceloader
 + 6425 Update to asm 9.1
 + 6447 Deprecate support for UTF16 encoding in URIs
 + 6451 Request#getServletPath() returns null for ROOT mapping
 + 6464 Wrong files/lib definitions in certain *-capture.mod files?

jetty-10.0.6 - 29 June 2021

 + 6375 Always check XML `Set` elements with `property` attribute
 + 6382 HttpClient TimeoutException message reports transient values
 + 6394 Review osgi manifests within Jetty 10
 + 6407 Malformed scheme logical expression check in WebSocket
   ClientUpgradeRequest
 + 6410 Ensure Jetty IO uses SocketAddress instead of InetSocketAddress
 + 6418 Bad and/or missing Require-Capability for osgi.serviceloader
 + 6425 Update to asm 9.1
 + 6447 Deprecate support for UTF16 encoding in URIs
 + 6451 Request#getServletPath() returns null for ROOT mapping
 + 6464 Wrong files/lib definitions in certain *-capture.mod files?
 + 6473 Improve alias checking in PathResource

jetty-9.4.43.v202010629 - 29 June 2021

 + 6379 Reduce contention in all `ByteBufferPool` implementations
 + 6382 HttpClient TimeoutException message reports transient values
 + 6400 QueuedThreadPool interrupts pool threads when stopped with zero timeout
 + 6425 Update to asm 9.1
 + 6447 Deprecate support for UTF16 encoding in URIs
 + 6473 Improve alias checking in PathResource

jetty-9.4.43.v20210624 - 24 June 2021

 + 6379 Reduce contention in all `ByteBufferPool` implementations
 + 6382 HttpClient TimeoutException message reports transient values
 + 6400 QueuedThreadPool interrupts pool threads when stopped with zero timeout
 + 6425 Update to asm 9.1
 + 6447 Deprecate support for UTF16 encoding in URIs

jetty-11.0.5 - 11 June 2021

 + 4772 Jetty WebSocket API onMessage annotation does not support partial
   messages.
 + 6302 Treat empty path segments are ambiguous.
 + 6329 Regression on graceful shutdown default in Jetty 10
 + 6354 org.slf4j dependency imports osgi packages at 2.0
 + 6379 Reduce contention in all `ByteBufferPool` implementations
 + 6392 Review accidental xml config changes

jetty-10.0.5 - 11 June 2021
 + 4772 Jetty WebSocket API onMessage annotation does not support partial
   messages.
 + 6302 Treat empty path segments are ambiguous.
 + 6329 Regression on graceful shutdown default in Jetty 10
 + 6354 org.slf4j dependency imports osgi packages at 2.0
 + 6379 Reduce contention in all `ByteBufferPool` implementations
 + 6392 Review accidental xml config changes

jetty-11.0.4 - 04 June 2021

 + 5379 Better handling for wrong SNI
 + 5931 SslConnection should implement getBytesIn()/getBytesOut()
 + 6112 Jetty logging service file leaking to web applications
 + 6114 Jetty Deploy scan / symlink behavior is broken
 + 6118 Display a warning when Hazelcast configuration does not contain Jetty
   session serializer
 + 6276 Support non-standard domains in SNI and X509
 + 6305 Optimise `ContextHandler.isProtectedTarget`
 + 6323 HttpClient gets stuck/never calls onComplete() when multiple requests
   with timeouts are sent
 + 6347 session-store-gcloud module broken logging dependency
 + 6354 org.slfj osgi dependency imports packages at 2.0

jetty-10.0.4 - 04 June 2021

 + 5379 Better handling for wrong SNI
 + 5931 SslConnection should implement getBytesIn()/getBytesOut()
 + 6112 Jetty logging service file leaking to web applications
 + 6114 Jetty Deploy scan / symlink behavior is broken
 + 6118 Display a warning when Hazelcast configuration does not contain Jetty
   session serializer
 + 6276 Support non-standard domains in SNI and X509
 + 6305 Optimise `ContextHandler.isProtectedTarget`
 + 6323 HttpClient gets stuck/never calls onComplete() when multiple requests
   with timeouts are sent
 + 6347 session-store-gcloud module broken logging dependency
 + 6354 org.slfj osgi dependency imports packages at 2.0

jetty-9.4.42.v20210604 - 04 June 2021

 + 5379 Better handling for wrong SNI
 + 5931 SslConnection should implement getBytesIn()/getBytesOut()
 + 6118 Display a warning when Hazelcast configuration does not contain Jetty
   session serializer
 + 6276 Support non-standard domains in SNI and X509
 + 6287 Class loading broken for WebSocketClient used inside webapp
 + 6323 HttpClient gets stuck/never calls onComplete() when multiple requests
   with timeouts are sent

Tag for release: jetty-11.0.3

 + 3764 DeprecationWarning Decorator
 + 5306 Default jetty.*.acceptors should be 1
 + 5684 Review disabled tests
 + 5798 jetty-runner startup error with jetty-10
 + 5817 Provide more filtering for CustomRequestLog
 + 6049 Default provider [files] section always executed
 + 6084 GzipHandler: NPE in setDeflaterPoolCapacity and setInflaterPoolCapacity
 + 6098 jetty-cdi is missing from jetty-bom
 + 6099 Cipher preference may break SNI if certificates have different key
   types
 + 6105 HttpConnection.getBytesIn() incorrect for requests with chunked content

 + 6106 WebSocket/CDI integration is broken in Jetty 10
 + 6125 Do not allow override of jakarta.* container classes by webapps per
   Servlet 5.0 Section 15.2.1
 + 6132 Ambiguous segment in URI in DELETE
   /a/projects/foo/branches/refs%2Fheads%2Ftest request after upgrade from
   10.0.0 to 10.0.2
 + 6153 jetty-maven-plugin does not correctly pass JVM arguments for external
   deployMode
 + 6159 Jetty with Conscrypt unable to handle any HTTPS requests when connected
   by IP rather than hostname.
 + 6166 WebSocket MessageInputStream.read() spends a lot of time in
   ByteBuffer.compact()
 + 6205 OpenIdAuthenticator may use incorrect redirect
 + 6207 Make ALPN optional in HTTP2Client over TLS
 + 6208 HTTP/2 max local stream count exceeded
 + 6224 make jetty-jspc-maven-plugin @threadSafe
 + 6227 Better resolve race between `AsyncListener.onTimeout` and
   `AsyncContext.dispatch`
 + 6238 jetty-keystore Invalid manifest header Bundle-SymbolicName: ""
 + 6250 Lazily allocate HTTP2Stream data queue
 + 6251 Use CyclicTimeout for HTTP2Streams
 + 6254 Total timeout not enforced for queued requests
 + 6263 Review URI encoding in ConcatServlet & WelcomeFilter
 + 6272 Reduce allocation in HttpClient when notifying content listeners
 + 6277 Better handle exceptions thrown from session destroy listener
 + 6280 Copy ServletHolder class/instance properly during startWebapp
 + 6287 Class loading broken for WebSocketClient used inside webapp

Tag for release: jetty-10.0.3

 + 3764 DeprecationWarning Decorator
 + 5306 Default jetty.*.acceptors should be 1
 + 5684 Review disabled tests
 + 5798 jetty-runner startup error with jetty-10
 + 5817 Provide more filtering for CustomRequestLog
 + 6049 Default provider [files] section always executed
 + 6084 GzipHandler: NPE in setDeflaterPoolCapacity and setInflaterPoolCapacity
 + 6098 jetty-cdi is missing from jetty-bom
 + 6099 Cipher preference may break SNI if certificates have different key
   types
 + 6105 HttpConnection.getBytesIn() incorrect for requests with chunked content

 + 6106 WebSocket/CDI integration is broken in Jetty 10
 + 6132 Ambiguous segment in URI in DELETE
   /a/projects/foo/branches/refs%2Fheads%2Ftest request after upgrade from
   10.0.0 to 10.0.2
 + 6153 jetty-maven-plugin does not correctly pass JVM arguments for external
   deployMode
 + 6159 Jetty with Conscrypt unable to handle any HTTPS requests when connected
   by IP rather than hostname.
 + 6166 WebSocket MessageInputStream.read() spends a lot of time in
   ByteBuffer.compact()
 + 6205 OpenIdAuthenticator may use incorrect redirect
 + 6207 Make ALPN optional in HTTP2Client over TLS
 + 6208 HTTP/2 max local stream count exceeded
 + 6224 make jetty-jspc-maven-plugin @threadSafe
 + 6227 Better resolve race between `AsyncListener.onTimeout` and
   `AsyncContext.dispatch`
 + 6238 jetty-keystore Invalid manifest header Bundle-SymbolicName: ""
 + 6250 Lazily allocate HTTP2Stream data queue
 + 6251 Use CyclicTimeout for HTTP2Streams
 + 6254 Total timeout not enforced for queued requests
 + 6263 Review URI encoding in ConcatServlet & WelcomeFilter
 + 6272 Reduce allocation in HttpClient when notifying content listeners
 + 6277 Better handle exceptions thrown from session destroy listener
 + 6280 Copy ServletHolder class/instance properly during startWebapp
 + 6287 Class loading broken for WebSocketClient used inside webapp

Tag for release: jetty-9.4.41.v20210516

 + 6099 Cipher preference may break SNI if certificates have different key
   types
 + 6186 Add Null Protection on Log / Logger
 + 6205 OpenIdAuthenticator may use incorrect redirect
 + 6208 HTTP/2 max local stream count exceeded
 + 6227 Better resolve race between `AsyncListener.onTimeout` and
   `AsyncContext.dispatch`
 + 6254 Total timeout not enforced for queued requests
 + 6263 Review URI encoding in ConcatServlet & WelcomeFilter
 + 6277 Better handle exceptions thrown from session destroy listener

jetty-9.4.41.v20210512 - 12 May 2021

 + 6099 Cipher preference may break SNI if certificates have different key
   types
 + 6186 Add Null Protection on Logger / Log
 + 6205 OpenIdAuthenticator may use incorrect redirect
 + 6208 HTTP/2 max local stream count exceeded
 + 6227 Better resolve race between `AsyncListener.onTimeout` and
   `AsyncContext.dispatch`
 + 6254 Total timeout not enforced for queued requests
 + 6263 Review URI encoding in ConcatServlet & WelcomeFilter

jetty-9.4.40.v20210413 - 13 April 2021

 + 6082 SslConnection compacting
 + 6105 HttpConnection.getBytesIn() incorrect for requests with chunked content
 + 6148 Jetty start.jar always reports jetty.tag.version as `master`
 + 6168 Improve handling of unconsumed content

Tag for release: jetty-11.0.2-SNAPSHOT

 + 4275 Path Normalization/Traversal - Context Matching
 + 5828 Allow to create a WebSocketContainer passing HttpClient
 + 5832 Ctrl-C after jetty:run produces NoClassDefFoundError
 + 5835 Review Durable Filters, Servlets and Listeners
 + 5977 Cache-Control header set by a filter is override by the value from
   DefaultServlet configuration
 + 5994 QueuedThreadPool "free" threads
 + 5996 ERROR : No module found to provide logback-impl for
   logback-access{enabled}
 + 5999 HttpURI ArrayIndexOutOfBounds
 + 6001 Ambiguous URI legacy compliance mode
 + 6008 Allow absolute paths to be provided in start.ini for request log
   directory.
 + 6011 OSGi Cannot start Jetty with osgi.boot - Configurations add wrong
   method taken
 + 6020 Review Jetty Maven Plugin scanning defaults
 + 6021 Standardize Path resolution in XmlConfiguration
 + 6024 Error starting jetty-10: Provider
   org.eclipse.jetty.websocket.javax.client.JavaxWebSocketShutdownContainer not
   found
 + 6026 the jvm DEBUG flag is not working org.eclipse.jetty.LEVEL=DEBUG
 + 6034 SslContextFactory may select a wildcard certificate during SNI
   selection when a more specific SSL certificate is present
 + 6037 Review logging modules for j.u.l.
 + 6050 Websocket: NotUtf8Exception after upgrade 9.4.35 -> 9.4.36 or newer
 + 6063 Allow override of hazelcast version when using module
 + 6072 jetty server high CPU when client send data length > 17408
 + 6076 Embedded Jetty throws null pointer exception
 + 6082 SslConnection compacting
 + 6085 Jetty keeps Sessions in use after "Duplicate valid session cookies"
   Message
+ 6101 Normalise ambiguous URIs
+ 6102 Exclude webapps directory from deployment scan

Tag for release: jetty-10.0.2-SNAPSHOT

 + 4275 Path Normalization/Traversal - Context Matching
 + 5828 Allow to create a WebSocketContainer passing HttpClient
 + 5832 Ctrl-C after jetty:run produces NoClassDefFoundError
 + 5835 Review Durable Filters, Servlets and Listeners
 + 5977 Cache-Control header set by a filter is override by the value from
   DefaultServlet configuration
 + 5994 QueuedThreadPool "free" threads
 + 5996 ERROR : No module found to provide logback-impl for
   logback-access{enabled}
 + 5999 HttpURI ArrayIndexOutOfBounds
 + 6001 Ambiguous URI legacy compliance mode
 + 6008 Allow absolute paths to be provided in start.ini for request log
   directory.
 + 6011 OSGi Cannot start Jetty with osgi.boot - Configurations add wrong
   method taken
 + 6020 Review Jetty Maven Plugin scanning defaults
 + 6021 Standardize Path resolution in XmlConfiguration
 + 6024 Error starting jetty-10: Provider
   org.eclipse.jetty.websocket.javax.client.JavaxWebSocketShutdownContainer not
   found
 + 6026 the jvm DEBUG flag is not working org.eclipse.jetty.LEVEL=DEBUG
 + 6034 SslContextFactory may select a wildcard certificate during SNI
   selection when a more specific SSL certificate is present
 + 6037 Review logging modules for j.u.l.
 + 6050 Websocket: NotUtf8Exception after upgrade 9.4.35 -> 9.4.36 or newer
 + 6063 Allow override of hazelcast version when using module
 + 6072 jetty server high CPU when client send data length > 17408
 + 6076 Embedded Jetty throws null pointer exception
 + 6082 SslConnection compacting
 + 6085 Jetty keeps Sessions in use after "Duplicate valid session cookies"
   Message
 + 6101 Normalise ambiguous URIs
 + 6102 Exclude webapps directory from deployment scan

Tag for release: jetty-9.4.39.v20210325

 + 6034 SslContextFactory may select a wildcard certificate during SNI
   selection when a more specific SSL certificate is present
 + 6050 Websocket: NotUtf8Exception after upgrade 9.4.35 -> 9.4.36 or newer
 + 6052 Cleanup TypeUtil and ModuleLocation to allow jetty-client/hybrid to
   work on Android
 + 6063 Allow override of hazelcast version when using module
 + 6072 jetty server high CPU when client send data length > 17408
 + 6085 Jetty keeps Sessions in use after "Duplicate valid session cookies"
   Message
 + 6101 Normalise ambiguous URIs
 + 6102 Exclude webapps directory from deployment scan

jetty-9.4.38.v20210224 - 24 February 2021

 + 4275 Path Normalization/Traversal - Context Matching
 + 5977 Cache-Control header set by a filter is override by the value from
   DefaultServlet configuration
 + 5994 QueuedThreadPool "free" threads
 + 5999 HttpURI ArrayIndexOutOfBounds
 + 6001 Ambiguous URI legacy compliance mode

jetty-11.0.1 - 19 February 2021

 + 1673 jetty-demo/etc/keystore should not be distributed
 + 4275 Path Normalization/Traversal - Context Matching
 + 4515 Validation extension should not downcast CoreSession
 + 5492 Add ability to manage start modules by java feature
 + 5499 Improve temporary buffer usage for WebSocket PerMessageDeflate.
 + 5605 Blocked IO Thread not woken
 + 5689 Jetty ssl keystorePath doesn't work with absolute path
 + 5706 The WebSocket ServerUpgradeResponse can produce NPE in jetty 10.
 + 5725 Review Preventers
 + 5752 Fix Servlet 5 Schema redirects
 + 5755 Cannot configure maxDynamicTableSize on HTTP2Client
 + 5757 Review Inferred vs Assumed charsets
 + 5759 Update jakarta transaction, mail and injection apis
 + 5761 Remove unneeded dependencies from apache-jsp module
 + 5772 Fix jndi mail problem in jetty-11
 + 5779 Include can set pathInContext
 + 5783 Fix ConnectionStatistics.*Rate() methods
 + 5784 Apache 2.0 license incorrectly stated as "secondary license" to EPL 2.0
 + 5785 Reduce log level for WebSocket connections closed by clients
 + 5787 Make ManagedSelector report better JMX data
 + 5794 ServerConnector leaks closed sockets which can lead to file descriptor
   exhaustion
 + 5799 Allow specifying the duration an object can stay in a pool
 + 5824 Build up of ConstraintMappings when stopping and starting WebAppContext
 + 5830 Jetty-util contains wrong Import-Package
 + 5844 --download flag to jetty-start causes NullPointerException
 + 5845 Use UTF-8 encoding for client basic auth if requested
 + 5850 NPE at Principal WebSocketSession.getUserPrincipal()
 + 5851 org.eclipse.jetty.websocket.servlet.WebSocketServlet cleanup
 + 5855 HttpClient may not send queued requests
 + 5859 Classloader leaks from ShutdownThread and QueuedThreadPool
 + 5866 Support Programmatic WebSocket upgrade in Jetty 10
 + 5868 Cleaning up request attributes after websocket upgrade in Jetty 10
 + 5870 jetty-maven-plugin fails to run ServletContainerInitializer on Windows
   due to URI case comparison bug
 + 5872 Improve JMX support for Jetty logging
 + 5880 Move test-simple-webapp to demos
 + 5882 Simplify ALPN modules
 + 5901 Starting Jetty with JPMS produces warnings about Servlet resources not
   found
 + 5909 Cannot disable HTTP OPTIONS Method
 + 5933 ClientCertAuthenticator is not taking account SslContext configuration
 + 5937 Unnecessary blocking in ResourceService
 + 5939 Use unwrapped exception as exception type for error handling
 + 5941 Use jakarta.servlet.jsp.jstl version 2 implementation from Eclipse
   Glassfish
 + 5950 Deadlock due to logging inside classloaders
 + 5966 jetty-home should not have a webapps/ directory
 + 5973 Proxy client TLS authentication example
 + 5977 Cache-Control header set by a filter is override by the value from
   DefaultServlet configuration
 + 5979 Configurable gzip Etag extension
 + 5992 Jetty 11 build still depends on apache-jstl