12.1.11 - 02 July 2026 + 15156 Injecting authentication headers using request filters? + 15217 jetty-quic-quiche-foreign fails on Windows due to eager resolution of Unix-only quiche_conn_set_keylog_fd + 15226 Jetty 12.0.28 server becomes inaccessible with thousands of qtp threads blocked in HttpChannelState.onIdleTimeout ReentrantLock + 15228 Massive increase in memory usage between 12.1.8 and 12.1.10 caused by ZipFileSystems + 15232 Jetty 12.1.x EE11 doesn't handle Session attributes properly + 15234 Review error response codes from EagerContentHandler + 15267 Introduce module for MinimumDataRateHandler + 15308 CachingWebAppClassLoader is not registering as parallel capable + 15333 Upgrade to Quiche version 0.29.2 + 15345 Move RateControl to jetty-io

12.0.37 - 27 June 2026 + 15226 Jetty 12.0.28 server becomes inaccessible with thousands of qtp threads blocked in HttpChannelState.onIdleTimeout ReentrantLock + 15289 FileSystemPool fails to mount a jar located under a non-ASCII path ("Bad escape")

12.1.10 - 29 May 2026 + 9799 Declare EncodingException for HPACK/QPACK encoders and decoders + 14006 How to handle "Warning Logs in org.eclipse.jetty.ee8.nested.HttpChannelState and org.eclipse.jetty.server.internal.HttpChannelState"? + 14522 Bundle org.eclipse.jetty.websocket.server OSGI metadata exports internal instead of public package + 14528 `BinaryStreamTest.testMoreThanLargestMessageOneByteAtATime()` is flaky + 14745 NPE in HttpChannelState.completeStream() when _request is null during multipart cleanup + 14984 XmlConfiguration emits "Deprecated method ... setMaxThreads" WARN from shipped jetty-threadpool-virtual.xml + 15009 Make processing of RST_STREAM more lenient + 15011 `PathResource.resolve()` fails on Microsoft Windows due to `Illegal char <:>` + 15021 Resource handling regression in 12.1.9 + 15031 IOResources#toRetainableByteBuffer data loss when using resources without path + 15074 HTTP/2 extended connect responses contain Content-Length: 0 + 15094 Jetty 12.1 Regression: Deferred Authentication provides Callback.NOT_CALLED leading to errors + 15118 Upgrade to Quiche version 0.29.0 + 15136 Refresh Digest authentication implementation + 15161 Reduce memory footprint for persistent HttpConnections + 15180 Upgrade to Quiche version 0.29.1

12.0.36 - 30 May 2026 + 14006 How to handle "Warning Logs in org.eclipse.jetty.ee8.nested.HttpChannelState and org.eclipse.jetty.server.internal.HttpChannelState"? + 14745 NPE in HttpChannelState.completeStream() when _request is null during multipart cleanup + 15136 Refresh Digest authentication implementation + 15161 Reduce memory footprint for persistent HttpConnections

12.1.9 - 30 April 2026 + 8876 Jetty 12 - JMX-ify HttpContent.Factory implementations + 12110 Request Authority checks needed + 14196 Using passivation with eviction: HttpServletRequest.getSession() may return null due to race-condition + 14541 Jetty HTTP Client - setMaxRequestHeadersSize resulting in java.lang.OutOfMemoryError + 14564 Jetty 12.1.x TLS connections hang after several requests with internal HTTPS self-requests + 14646 Regression in Jetty 12.1: Invalid UTF-8 exception for application/x-www-form-urlencoded; charset=iso-8859-1 + 14805 HTTP/3 server crashes on `quiche_header_info` + 14821 Websocket IllegalStateException ('Demand already fulfilled') since Jetty 12.1 + 14824 FileSystemPool doesn't always own its filesystems + 14846 NPE in MimeTypes$Mutable.getMimeByExtension on startup with web-fragment with mime mapping + 14853 CombinedResource.getRealURI() returns null when multiple members exist, causing 404 for all static resources + 14870 Refactor compliance checks + 14913 Upgrade to Quiche version 0.28.0 + 14972 Jetty 12.1.8 jetty-home has `lib/*-config.jar` files

12.0.35 - 30 April 2026 + 14745 NPE in HttpChannelState.completeStream() when _request is null during multipart cleanup + 14870 Refactor compliance checks

12.1.8 - 31 March 2026 + 10906 Is there a ConsoleRequestLog (JettySlf4jRequestLog) module? + 13513 Make MemoryEndPoint use RBB.DynamicCapacity (@afarber) + 13685 Infinite loop on Content.copy() with Content.Source.from(... , Path, ) when Path has size 0. + 14332 Complete mess with idleTimeout + 14431 ServletContainerInitializers are always excluded when used with absolute-ordering + 14494 Review use of CharsetStringBuilder subclasses + 14651 Retain negative Max-Age cookie attribute + 14685 CachingHttpContentFactory#getContent may return null if httpContent size is not set + 14689 `ThreadIdPool.take()` bottlenecks `QueuedThreadPool.tryExecute()` + 14694 Sync jetty-ee11 with jetty-ee10 + 14732 possible race condition in jetty 12.x code + 14747 Revert usage of SLF4J2 fluent APIs + 14752 Jetty 12.1 Violation of RFC9113 with Host and :authority headers

12.0.34 - 01 April 2026 + 14332 Fix idleTimeout for websocket + 14431 ServletContainerInitializers are always excluded when used with absolute-ordering + 14494 Review use of CharsetStringBuilder subclasses

12.1.7 - 04 March 2026 + 14165 Integrating Eclipse Soteria with Jetty EE10+ + 14366 Clarify Deprecation Policy + 14373 Response listener that avoids any data copies + 14408 Redundant database index created by JDBCSessionDataStore + 14435 NoSuchMethodError error raised by HttpStateChannel with Jetty 12.1.6 run with maven plugin + 14436 Jetty 12.1.6 HttpFields from(HttpField...) does not provide opportunity to set compliance listener (@afarber) + 14442 Allow splitting of Transfer-Encoding chunks + 14485 Illegal header value on UTF-8 encoding when using HTTP/2 + 14495 Support Transfer-Encoding chunk extensions + 14566 CompressionHandler/GzipEncoderSink not respect setSyncFlush(true)

12.0.33 - 04 March 2026 + 14495 Support Transfer-Encoding chunk extensions