From 51f1590cac537495f53e8b38628103e428c7c267 Mon Sep 17 00:00:00 2001 From: Kimbsy Date: Wed, 2 Sep 2026 17:10:45 +0100 Subject: [PATCH] Bump jetty dependencies to avoid CVE-2026-10050 --- ring-jetty-adapter/project.clj | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/ring-jetty-adapter/project.clj b/ring-jetty-adapter/project.clj index 6bb65006..4e211069 100644 --- a/ring-jetty-adapter/project.clj +++ b/ring-jetty-adapter/project.clj @@ -8,17 +8,17 @@ [[org.clojure/clojure "1.9.0"] [ring/ring-core "1.15.5"] [org.ring-clojure/ring-jakarta-servlet "1.15.5"] - [org.eclipse.jetty/jetty-server "12.1.8"] - [org.eclipse.jetty/jetty-unixdomain-server "12.1.8"] - [org.eclipse.jetty.ee9/jetty-ee9-servlet "12.1.8"] - [org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server "12.1.8"]] + [org.eclipse.jetty/jetty-server "12.1.12"] + [org.eclipse.jetty/jetty-unixdomain-server "12.1.12"] + [org.eclipse.jetty.ee9/jetty-ee9-servlet "12.1.12"] + [org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-jetty-server "12.1.12"]] :aliases {"test-all" ["with-profile" "default:+1.10:+1.11:+1.12" "test"]} :profiles {:dev {:dependencies [[clj-http "3.13.1"] [less-awful-ssl "1.0.7"] [hato "1.0.0"]] :jvm-opts ["-Dorg.eclipse.jetty.server.HttpChannelState.DEFAULT_TIMEOUT=500"]} - :test {:dependencies [[org.eclipse.jetty/jetty-client "12.1.8"]]} + :test {:dependencies [[org.eclipse.jetty/jetty-client "12.1.12"]]} :1.10 {:dependencies [[org.clojure/clojure "1.10.3"]]} :1.11 {:dependencies [[org.clojure/clojure "1.11.4"]]} :1.12 {:dependencies [[org.clojure/clojure "1.12.4"]]}}