[SOLR-14386] Update Jetty to 9.4.27 and dropwizard-metrics version to 4.1.5

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 8.6
• Assignee: Erick Erickson
• Reporter: Markus Schuch
• Created: 04/Apr/20 12:04
• Updated: 15/Jul/20 15:10
• Resolved: 04/Apr/20 23:05

Description

As suggested in #solr-dev i raise this ticket for the next Jetty update.

Summary of changes:
https://github.com/eclipse/jetty.project/compare/jetty-9.4.24.v20191120...jetty-9.4.27.v20200227

9.4.27

 + 3247 Generate jetty-maven-plugin website
 + 4247 Cookie security attributes are going to mandated by Google Chrome
 + 4360 Upgrade to Apache Jasper 8.5.49
 + 4475 WebSocket JSR356 implementation not honoring javadoc of MessageHandler
   on Whole<Reader>
 + 4495 Review ReservedThreadExecutor's concurrency model
 + 4504 X-Forwarded-Server header overwrites X-Forwarded-Host
 + 4520 Jetty jdbc session manager causing exceptions for violating primary key
   in inserting session in the table
 + 4529 ErrorHandler showing servlet info, can not be disabled unless
   overriding most of its functionality
 + 4533 Reinstate hard close in dispatcher
 + 4537 High CPU on Jetty Websocket thread
 + 4541 Jetty server always allocates maximum response header size
 + 4550 XmlConfiguration constructor selection based on number of arguments
 + 4567 Jetty logging supporting Throwable as last argument
 + 4573 Order dependency of X-Forwarded-Host and X-Forwarded-Port
 + 4575 Stopping ReservedThreadExecutor may hang
 + 4577 request getPathInfo returns null
 + 4594 ServletContextListeners added to destroyServletContextListeners in
   ContextHandler::startContext() are not removed by
   ContextHandler::removeEventListener()
 + 4606 DateCache.formatNow(long now) does not honor the passed in long
 + 4612 ReservedThreadExecutor hangs when the last reserved thread idles out

9.4.26

+ 2620 Exception from user endpoint onClose results in unclosed
   WebSocketSession
 + 4383 Errors deleting multipart tmp files java.lang.NullPointerException
   under heavy load
 + 4444 TLS Connection Timeout Intermittently
 + 4461 IllegalStateException in HttpOutput with Jersey

9.4.25

+ 995 UrlEncoded.encodeString should skip more characters
 + 2195 Add parameter expansion to start.jar --exec parameters
 + 3512 File descriptor is not released after zip file uploaded via
   jetty-client
 + 3730 WebSocketClient constructor cleanup (and deprecations)
 + 4269 ResponseWriter should not throw RuntimeIOExceptions
 + 4323 QOS Filter does not handle IllegalStateException and never releases
   passes
 + 4329 rewrite prevents URL session tracking.
 + 4331 Improve handling of HttpOutput.close() for pending writes
 + 4350 Deprecated MultiPartInputStreamParser still used in jetty-server
   (MultiPartsUtilParser) but OSGi ExportPackage suppressed
 + 4351 Servlet.service called before Servlet.init is finished when servlet is
   lazily initialized
 + 4363 jetty-maven-plugin no longer processes supplied context.xml-file.
 + 4366 HTTP client uses SOCKS4 proxy hostname for SSL hostname verification
 + 4374 Jetty client: Response.AsyncContentListener.onContent is not called
 + 4376 Async Content Complete bug results in
   org.eclipse.jetty.io.EofException: Async closed
 + 4385 Limit new UnsupportedOperationException to direct base class
   SslContextFactory usage
 + 4392 Suppress logging of QuietException in HttpChannelState.asyncError()
 + 4402 NPE in JettyRunWarExplodedMojo
 + 4411 Jetty server spins on incomplete request due to delayed dispatch
   until content
 + 4415 GzipHandler invalid input zip size on large
   (over 2,147,483,647 bytes) request body content
 + 4421 HttpClient support for PROXY protocol
 + 4427 Retried HttpClient Requests can result in duplicates cookies