[
https://issues.apache.org/jira/browse/ZOOKEEPER-4931?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18046677#comment-18046677
]
Lari Hotari commented on ZOOKEEPER-4931:
----------------------------------------
I hope we'd be able to move Zookeeper's Jetty usage to Jetty 12. If it's not
possible to move to Java 17, I'd suggest having separate libraries that use
Jetty 12.
There's currently a hard dependency in Zookeeper Admin and the Prometheus
Metrics provider. In Apache Pulsar, we are moving to Jetty 12 and I'm working
around the issue by porting zookeeper-prometheus-metrics to use Jetty 12. This
approach works for the metrics provider, but it won't work for the Admin server
parts.
> Upgrade Jetty to a non-EOL version
> ----------------------------------
>
> Key: ZOOKEEPER-4931
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4931
> Project: ZooKeeper
> Issue Type: Wish
> Components: server
> Affects Versions: 3.8.3, 3.9.3
> Reporter: Philipp Trulson
> Priority: Minor
>
> Hey everyone, while scrolling through our SBOMs I noticed that Zookeeper is
> using a pretty "old" version of Jetty - it's still getting security updates
> it seems, but ZK is using Jetty 9 while 12 has been released. I'm sure it's
> not that easy and there's a thrifty reason, but could someone maybe elaborate
> why it's not being updated?
>
> Thanks in advance!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
