You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@spark.apache.org by "dongjoon-hyun (via GitHub)" <gi...@apache.org> on 2026/05/28 03:32:57 UTC
[PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
dongjoon-hyun opened a new pull request, #56172:
URL: https://github.com/apache/spark/pull/56172
### What changes were proposed in this pull request?
This PR upgrades Jetty to `12.1.9`.
### Why are the changes needed?
To bring in the latest upstream bug fixes and improvements from the Jetty 12.1.x patch release line.
- https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.9
- https://github.com/jetty/jetty.project/issues/14853
- https://github.com/jetty/jetty.project/issues/14821
- https://github.com/jetty/jetty.project/issues/14646
- https://github.com/jetty/jetty.project/issues/14564
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
Pass the CIs.
### Was this patch authored or co-authored using generative AI tooling?
Generated-by: Claude Opus 4.7
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #56172:
URL: https://github.com/apache/spark/pull/56172#issuecomment-4565505698
Thank you, @peter-toth !
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun closed pull request #56172: [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9
URL: https://github.com/apache/spark/pull/56172
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
Posted by "samibashe (via GitHub)" <gi...@apache.org>.
samibashe commented on PR #56172:
URL: https://github.com/apache/spark/pull/56172#issuecomment-6154775102
We run Spark 4.2.0 on Kubernetes and are flagged for CVE-2026-6790
(GHSA-7p3p-8qv8-m2vh) in the jetty-server 12.1.8 shaded into spark-core.
This upgrade carries fix version 5.0.0 only, and branch-4.2 is still on
12.1.8 as of the 4.2.1 RC2 tag. Would the project consider backporting the
Jetty 12.1.9+ bump to branch-4.2 for 4.2.2? Thanks.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #56172:
URL: https://github.com/apache/spark/pull/56172#issuecomment-4565515523
Merged to master for Apache Spark 5.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-57121][BUILD] Upgrade Jetty to 12.1.9 [spark]
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #56172:
URL: https://github.com/apache/spark/pull/56172#issuecomment-6154861419
Unfortunately, no, @samibashe .
Apache Spark community decided to do annual releases for the dependency change. So, we will deliver Spark 5 with this on 2027Q1.
- https://spark.apache.org/versioning-policy.html
> MAJOR: Major releases occur annually (every 12 months) as x.0.0 releases. These releases may include breaking changes, third-party dependency upgrades, API removals and deprecations, and other changes that are not compatible with the previous major line.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org