Update dependency org.glassfish.jersey.containers:jersey-container-jetty-http to v2.47 (branch_9x)

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
org.glassfish.jersey.containers:jersey-container-jetty-http (source)	dependencies	minor	2.39.1 -> 2.47

---

Release Notes

eclipse-ee4j/jersey (org.glassfish.jersey.containers:jersey-container-jetty-http)

v2.47

Compare Source

[Pull 5845] - Prevent NPE in AbstractJaxbProvider

[Pull 5847] - Netty Expect 100-Continue fix

[Pull 5873] - Implementation of Netty HTTP redirect logic being custom replaceble.

[Pull 5880] - Backport compatibility of JacksonFeature with RestEasy to 2.x

[Pull 5882] - Release instances blocking GC when JAXB has PerThread injections

[Pull 5884] - allow the BASIC auth to be not on the 1st place for the WWW_AUTHENTICATE header

[Pull 5891] - Adopt ASM 9.8

[Pull 5894] - [2.x] File upload handling after redirect

[Pull 5899] - Fixed reconnectDelay

[Pull 5904] - Fix for the InputStream caching cases for Servlets

[Pull 5906] - Order release of RequestScoped beans to prevent NPE

[Pull 5907] - Add OWASP plugin to a profile

[Pull 5913] - IPv6 support for http request

[Pull 5914] - Prevent NPE in the servlet container by writing when servlet is shutdown

[Pull 5915] - Dependencies versions update

[Pull 5919] - Compare cookies by paths

[Pull 5920] - Pass Generic Type of OutboundResponse entity to MBW.

[Pull 5923] - Allow HTTP headers to be modified by a writer on aborted response

[Pull 5925] - Clean usage of commons-io where possible

[Pull 5926] - Make aborted response HttpHeaders appendable

v2.46

Compare Source

[Pull 5749] - Jersey update from 3.1.3 to 3.1.4 slows down our external service res…

[Pull 5750] - Use Skipping Analyzer always

[Pull 5751] - test(flaky): fix paramter type assert in testBothAnnotatedConstructor test case

[Pull 5754] - test(flaky): Sorting headers for deterministic order

[Pull 5755] - Netty connector hang up after repeated buffer overflow errors when writing data #​5753

[Pull 5758] - Bump commons-io:commons-io from 2.11.0 to 2.14.0 in /tools/jersey-release-notes-maven-plugin

[Pull 5759] - Added test for JerseyChunkedInputStreamClose

[Pull 5760] - Adopt ASM 9.7.1 (JDK 24)

[Pull 5761] - Adopt Jackson 2.18.0

[Pull 5768] - fixed flaky test in testDisabledModule()

[Pull 5784] - Jersey 3.1.9: java.lang.NoSuchMethodException: jakarta.inject.Inject.value() #​5782

[Pull 5788] - Wrapping all methods of the EntityInputStream

[Pull 5792] - [2.x] ParamConverterProvider constructors are now protected to allow extensibility

[Pull 5800] - NettyConnector - HOST header contains port & 307 works with buffered post

[Pull 5801] - Set correct HOST header for Netty & POST

[Pull 5809] - Fixed memory leak in Micrometer code when exceptions are returned from the method

[Pull 5813] - Fix memory leak when client does not use HK2

[Pull 5816] - Allow to configure Jackson's JaxRSFeature on Jersey DefaultJacksonJaxbJsonProvider

[Pull 5819] - Build & run with JDK 24

v2.45

Compare Source

[Pull 5715] - Release a reference to threadlocal on shutdown

[Pull 5731] - Allow to disable JSON-B using System properties

v2.44

Compare Source

[Pull 5636] - Allow long content length in the JDK connector

[Pull 5639] - Allow having multiple annotations for multipart endpoint with @​FormDataParam in any order

[Pull 5642] - Remove synchronized from Apache stream wrappers

[Pull 5643] - Document Multipart Configuration.

[Pull 5644] - Refactoring Maven build process

[Pull 5648] - Support for Virtual Threads in Executor Services

[Pull 5649] - MAX_HEADER_SIZE for the Netty connector

[Pull 5652] - Unify the SniConfigurator with other branches

[Pull 5664] - More release checks

[Pull 5665] - update Jackson to 2.17.1

[Pull 5666] - [2.x] mvn build improvements

[Pull 5669] - prevent calling ServletRequest#getInputStream if FILTER_FORWARD_ON_404

[Pull 5673] - Support missing Content-Length header

[Pull 5677] - Prevent blowing connections number for reoccurring SSLContextFatories

[Pull 5685] - Better explanation of missing jersey-hk2 module consequences.

[Pull 5688] - Wrap call of deprecated HttpServletResponse#setStatus into try catch

[Pull 5689] - Support Multipart with Buffered Entity and Netty Connector

[Pull 5690] - Prevent NPE in micrometer when there is no response & 404

[Pull 5698] - Last-Modified header is garbled when accessing wadl document on Japanese locale

[Pull 5705] - Allow ChunkedInput#close to close the underlying stream

[Pull 5706] - Propagate WebApplicationException from SseEventSource to provided error handler

[Pull 5707] - Fix intermittent failure in BroadcasterExecutorTest

v2.43

Compare Source

[Pull 5574] - Backing up CI/CD jobs into the Jersey project

[Pull 5580] - Adopt ASM 9.7

[Pull 5592] - Micrometer - Add missing metrics for cases of client errors

[Pull 5604] - Prevent Jackson failing while loading Modules (classloader issues)

[Pull 5605] - Cleaning redundant plugins from plugin management

[Pull 5606] - clean CI/CD scripts from the main project

[Pull 5608] - ObjectMapper.findModules throws Error

[Pull 5613] - Allow the internal package to be a part of the Jersey APIDoc

[Pull 5614] - Added support for HK2 factories, binders to comply with documentation.

[Pull 5617] - Allow for overriding the SNIHostName or turn it off. Allow for Domain Fronting.

[Pull 5621] - Add ability to configure the queue capacity for ChunkedOutput

[Pull 5622] - Document a workaround for HTTP Patch & provide tests

[Pull 5624] - Ensure the RequestScope and other singleton bindings are registered just once

[Pull 5625] - align CONTRIBUTING.md with Eclipse actual requirements

[Pull 5627] - Prevent NPE in Jersey Spring RequestContextFilter

[Pull 5628] - Lazy Load TracingLogger to track MATCH_RESOURCE_METHOD

[Pull 5629] - prevent synchronized blocking the virtual threads in JDK21

[Pull 5631] - 2.x versions update

[Pull 5632] - Multirelease includes JDK21 to support Thread.isVirtual()

[Pull 5633] - Excluding JDK21 multi-release from jaxrs bundle

v2.42

Compare Source

[Pull 5469] - Allow @​Priority for ExceptionMapper

[Pull 5473] - SameSite is capital first letter only.

[Pull 5475] - RegularExpression in Uri Template IS NOT optional

[Pull 5487] - Prevent Netty connection from being stuck

[Pull 5493] - [2.x] backport of the #​5490

[Pull 5506] - Adopt Jackson 2.16.1

[Pull 5507] - prevent NPE when WebAppException#getResponse returns null

[Pull 5511] - Add URL of KeyStore and TrustStore to SslConfigurator

[Pull 5514] - ASCII encode ContentDisposition file name

[Pull 5536] - Add Apache5 properties to be grabbed by config

[Pull 5537] - Put duplicated methods into a common superclass

[Pull 5542] - Propagate Future.cancel() to connectors

[Pull 5544] - Add a logger for a request notifying Jersey Container is involved

[Pull 5557] - Drop JDK 7 profile

[Pull 5560] - [2.x] versions update

[Pull 5561] - [2.x] GitHub action validations added

v2.41

Compare Source

[Pull 5294] - HTTP/2 for Jetty connector

[Pull 5296] - HTTP/2 for Jetty container

[Pull 5350] - Using Java7+ NIO API for improved performance

[Pull 5359] - Race condition

[Pull 5364] - Save time by not inspecting configuration for property when in PropertiesDelegate

[Pull 5365] - Update war.plugin to work with jdk 21

[Pull 5373] - Issue #​3493 - backport BeanParams support from 3.x

[Pull 5378] - GraalVM 20.0.1 adaptation

[Pull 5379] - RFC 6570 implementation

[Pull 5387] - Encode curly brackets in proxy client

[Pull 5390] - update license check plugin to the latest released version

[Pull 5391] - Added jersey-micrometer module

[Pull 5392] - Fix nio failures on Windows

[Pull 5393] - Deprecate duplicated methods and fields in MBR/MBW

[Pull 5394] - Allowing using SSLContext supplier per request by the NettyConnector

[Pull 5405] - Prevent Class Cast Exception in cases where two classloaders handle t…

[Pull 5410] - Jetty HTTP2 modules added to the bom/pom.xml

[Pull 5412] - Netty Expect:100-continue feature support

[Pull 5417] - Fix normalizing URIs with percent encoded symbols

[Pull 5418] - ApiDocs fixes

[Pull 5423] - Filter headers for netty HTTP redirect and CONNECT requests

[Pull 5424] - Fix Jackson 15 -> Jackson 2.15

[Pull 5426] - Propagate back-pressure correctly in MP REST Client SSE publisher

[Pull 5427] - UserGuide and example extended for Micrometer integration

[Pull 5431] - Expect:100-continue fixes for Netty

[Pull 5432] - Decode extended filename in multipart content-disposition

[Pull 5435] - Fixing servlet ResponseWriter#writeResponseStatusAndHeaders for error states

[Pull 5436] - Support multipart by Jetty & Netty

[Pull 5440] - Adopt ASM 9.6

[Pull 5442] - Review Netty Connector

[Pull 5443] - proper way of removing a handler (Netty Connector, Expect100ContinueHandler)

[Pull 5444] - ApiDocs bundle fix

[Pull 5445] - Fix query param in UriBuilder

v2.40

Compare Source

[Pull 5298] - Do not encode slash in templates in MP RestClient

[Pull 5299] - Do not completely swallow the cdi exception on error

[Pull 5305] - Adopt ASM 9.5

[Pull 5306] - Support NettyConnector & RequestEntityProcessing.BUFFERED

[Pull 5310] - Better support inheritance in Resource Methods

[Pull 5311] - Changes to InterceptorInvocationContext related to the integration with Helidon

[Pull 5319] - Additional logging for SNI

[Pull 5320] - Guard list of headers for modifications

[Pull 5324] - Handle equals and hashCode on MicroProfile client proxies

[Pull 5326] - Return null instead of throwing exception when querystring parameter is missing

[Pull 5330] - Fix possible NPE in netty client

[Pull 5331] - allow for resource methods to return

[Pull 5335] - Redirect GuardianList#toString to original toString

[Pull 5345] - Allow for setting connector provider via properties

[Pull 5348] - dependencies update

[Pull 5349] - Parametrize ParamConverters to allow throwing IAE

---

Configuration

📅 Schedule: Branch creation - Every minute ( * * * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[cpoerschke]

main looks to be still on 2.39.1 currently:

solr/gradle/libs.versions.toml

Line 138 in 80fa70f

jersey-containers = "2.39.1"

[cpoerschke]

#3108 for main - presuming we mark this PR as draft then in the meantime.

[malliaridis]

I believe that we want to update main to 2.47 first before looking into upgrading main to 3 and leaving this with the backport of main at 2.47?

[solrbot]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[solrbot]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: versions.props

Command failed: ./gradlew --console=plain --dependency-verification lenient -q :dependencies :solr:dependencies :solr:api:dependencies :solr:benchmark:dependencies :solr:core:dependencies :solr:cross-dc-manager:dependencies :solr:distribution:dependencies :solr:docker:dependencies :solr:documentation:dependencies :solr:example:dependencies :solr:modules:dependencies :solr:packaging:dependencies :solr:prometheus-exporter:dependencies :solr:server:dependencies :solr:solr-ref-guide:dependencies :solr:solrj:dependencies :solr:solrj-streaming:dependencies :solr:solrj-zookeeper:dependencies :solr:test-framework:dependencies :solr:webapp:dependencies :solr:modules:analysis-extras:dependencies :solr:modules:analytics:dependencies :solr:modules:clustering:dependencies :solr:modules:cross-dc:dependencies :solr:modules:extraction:dependencies :solr:modules:gcs-repository:dependencies :solr:modules:hadoop-auth:dependencies :solr:modules:hdfs:dependencies :solr:modules:jaegertracer-configurator:dependencies :solr:modules:jwt-auth:dependencies :solr:modules:langid:dependencies :solr:modules:llm:dependencies :solr:modules:ltr:dependencies :solr:modules:opentelemetry:dependencies :solr:modules:s3-repository:dependencies :solr:modules:scripting:dependencies :solr:modules:sql:dependencies --write-locks

FAILURE: Build failed with an exception.

* What went wrong:
A problem occurred configuring root project 'solr-root'.
> Could not compute lock state from configuration 'unifiedClasspath' due to unresolved dependencies (see suppressed exceptions below for full stacktraces):
   * org.glassfish.jersey.containers:jersey-container-jetty-http:2.47 (requested: 'org.glassfish.jersey.containers:jersey-container-jetty-http' because: requested)
        Failures:
           - Could not resolve org.glassfish.jersey.containers:jersey-container-jetty-http:2.47.
           - Could not resolve org.glassfish.jersey.containers:jersey-container-jetty-http:2.47.
           - Could not get resource 'https://repo.maven.apache.org/maven2/org/glassfish/jersey/containers/jersey-container-jetty-http/2.47/jersey-container-jetty-http-2.47.pom'.
           - Could not GET 'https://repo.maven.apache.org/maven2/org/glassfish/jersey/containers/jersey-container-jetty-http/2.47/jersey-container-jetty-http-2.47.pom'. Received status code 403 from server: Forbidden
  
   * org.glassfish.jersey.containers:jersey-container-jetty-http:2.47 (requested: 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.47' because: constraint)
        Failures:
           - Could not resolve org.glassfish.jersey.containers:jersey-container-jetty-http:2.47.
           - Could not resolve org.glassfish.jersey.containers:jersey-container-jetty-http:2.47.
           - Could not get resource 'https://repo.maven.apache.org/maven2/org/glassfish/jersey/containers/jersey-container-jetty-http/2.47/jersey-container-jetty-http-2.47.pom'.
           - Could not GET 'https://repo.maven.apache.org/maven2/org/glassfish/jersey/containers/jersey-container-jetty-http/2.47/jersey-container-jetty-http-2.47.pom'. Received status code 403 from server: Forbidden


* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 12s

File name: undefined

Command failed: ./gradlew updateLicenses

FAILURE: Build failed with an exception.

* What went wrong:
Could not determine the dependencies of task ':solr:core:compileJava'.
> Could not resolve all dependencies for configuration ':solr:core:compileClasspath'.
   > Could not resolve org.glassfish.jersey.containers:jersey-container-jetty-http.
     Required by:
         project :solr:core
      > Cannot find a version of 'org.glassfish.jersey.containers:jersey-container-jetty-http' that satisfies the version constraints:
           Dependency path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.glassfish.jersey.containers:jersey-container-jetty-http'
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache.solr:api:9.11.0-SNAPSHOT' (apiElements) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.39.1' because of the following reason: Computed from com.palantir.consistent-versions' versions.lock in solr-root
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache.solr:solrj:9.11.0-SNAPSHOT' (apiElements) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.39.1' because of the following reason: Computed from com.palantir.consistent-versions' versions.lock in solr-root
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache.solr:solrj-zookeeper:9.11.0-SNAPSHOT' (apiElements) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.39.1' because of the following reason: Computed from com.palantir.consistent-versions' versions.lock in solr-root
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache.solr:solrj-streaming:9.11.0-SNAPSHOT' (apiElements) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.39.1' because of the following reason: Computed from com.palantir.consistent-versions' versions.lock in solr-root
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache:solr-root:9.11.0-SNAPSHOT' (gcvLocks) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:{strictly 2.39.1}' because of the following reason: Locked by versions.lock
           Constraint path 'org.apache.solr:core:9.11.0-SNAPSHOT' --> 'org.apache:solr-root:9.11.0-SNAPSHOT' (gcvVersionsPropsConstraints) --> 'org.glassfish.jersey.containers:jersey-container-jetty-http:2.47'

   > Could not resolve org.osgi:org.osgi.annotation.versioning:1.1.2.
     Required by:
         project :solr:core > org.apache.logging.log4j:log4j-api:2.25.3
         project :solr:core > org.apache.logging.log4j:log4j-core:2.25.3
         project :solr:core > org.apache.logging.log4j:log4j-api:2.25.3 > org.osgi:org.osgi.annotation.bundle:2.0.0
      > Could not resolve org.osgi:org.osgi.annotation.versioning:1.1.2.
         > Could not get resource 'https://repo.maven.apache.org/maven2/org/osgi/org.osgi.annotation.versioning/1.1.2/org.osgi.annotation.versioning-1.1.2.pom'.
            > Could not GET 'https://repo.maven.apache.org/maven2/org/osgi/org.osgi.annotation.versioning/1.1.2/org.osgi.annotation.versioning-1.1.2.pom'. Received status code 403 from server: Forbidden
> There are 3 more failures with identical causes.

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 11s