XPost: linux.debian.devel.release

Package: release.debian.org
Severity: normal
X-Debbugs-Cc: jetty12@packages.debian.org
Control: affects -1 + src:jetty12
User: release.debian.org@packages.debian.org
Usertags: unblock


Hi,

I'd like to request the new jetty12 package to be unblocked. The package
was uploaded to NEW in February but landed in unstable just a few days
before the freeze. This package is intended to replace jetty9 which was
EOLed in January [1].

If this request is granted I'll also file unblock requests for two new
packages (jakarta-standard-taglib and jakarta-jsp-api) required by Jetty 12.

Thank you,

Emmanuel Bourg

[1] https://github.com/jetty/jetty.project/issues/7958


unblock jetty12/12.0.17-3

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: linux.debian.devel.release
To: 1103965@bugs.debian.org

This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------Hqp0Dxi0vjzpl1d4EoKqkhQ2
Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

Q29udHJvbDogdGFncyAtMSBtb3JlaW5mbw0KDQpPbiAyMy0wNC0yMDI1IDEwOjE3LCBFbW1h bnVlbCBCb3VyZyB3cm90ZToNCj4gVGhpcyBwYWNrYWdlIGlzIGludGVuZGVkIHRvIHJlcGxh Y2UgamV0dHk5IHdoaWNoIHdhcw0KPiBFT0xlZCBpbiBKYW51YXJ5IFsxXS4NCg0KDQpJIGJl bGlldmUgaXQgaXMgdG9vIGxhdGUgdG8gcmVwbGFjZSBqZXR0eTkgaW4gdHJpeGllIGFzIGl0 IGhhcyBxdWl0ZSANCnNvbWUgcmV2ZXJzZSBkZXBlbmRlbmNpZXMuIFdlIHByZWZlciBub3Qg dG8gaGF2ZSBtdWx0aXBsZSB2ZXJzaW9ucyBvZiANCnRoZSBzYW1lIHRoaW5nIGluIGEgc3Rh YmxlIHJlbGVhc2UuIFdoeSB3b3VsZCB3ZSB3YW50IHRvIGhhdmUgamV0dHkxMiBpbiANCnRy aXhpZT8NCg0KUGF1bA0KDQo=

--------------Hqp0Dxi0vjzpl1d4EoKqkhQ2--

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmgKU38FAwAAAAAACgkQnFyZ6wW9dQpV CggAjxF6LnkCeKt1IE29Rq61PZ/52HfBOHPRyLlu5mQScJAtwTUqY5vuqImp+iCz/45vb3GgAOcG BsjiNwGLc93abAHcAYdWZt8xnDMr/Ry1s/Lb0b/loRf+l5D+bhs/3xiWmRTQ5I79/vATmbVt6A0A e+QT7oVw1sj7LNA7EAu9qiwQWIC1YfG2RwpVOBEbeUZkivfa0Ckf88d8VcJQOrUp2k2YPViE5ENE d5FgmyN0IR0LdoNsg+0OjKBnHr8sz0PGnIP8oN1H0MBO9iJpjLLygEEjCkeYe8Ax/HyyfZpm2Tx7 FFj9SISdgrTcPNYhLatz6TwyJRdiV8Pnque4+9/Z5w==
=b2hN
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: linux.debian.devel.release

Control: tags -1 - moreinfo

On 24/04/2025 17:06, Paul Gevers wrote:

I believe it is too late to replace jetty9 in trixie as it has quite
some reverse dependencies. We prefer not to have multiple versions of
the same thing in a stable release. Why would we want to have jetty12 in trixie?

I agree it's too late for a full transition to Jetty 12, but several
packages only use jetty9 to run unit tests or for minor features. The
idea is to leave them as-is for Trixie, remove the jetty9 server package
but keep the libjetty9-java library.

There are 11 reverse dependencies using Jetty at runtime:

- eclipse-equinox and eclipse-platform: the lack of jetty12 blocks the upgrades, the packages lag 1.5 year behind upstream releases.

- jalview: desktop application exposing a local SOAP/REST endpoint with
Jetty, can remain with Jetty 9.

- jgit: Jetty is used for unit tests only

- logback: has logging support to Jetty 9 but is not used in practice,
no need to change for Trixie

- lucene9: Jetty is used for unit tests only (libjetty9-java should be
removed from the package dependencies)

- libmaven-site-plugin-java: Jetty can be used to preview a Java project
web site locally, but the plugin is actually unused in Debian, can be
ignored for now.

- ring-clojure: the Jetty adapter is unused (popcon 1)

- trapperkeeper-webserver-jetty9-clojure: specific to Jetty 9, Puppet
hasn't upgraded Jetty yet and will stick to Jetty 9 in Trixie.

- zookeeper: upstream is still on Jetty 9, no pressure to upgrade

- openrefine: likely to be removed in May due to other issues


Allowing jetty12 in Trixie would enable us to have up to date Eclipse
packages and a recent and supported version of the Jetty server, on par
with the Tomcat package. The risk of regression is limited because the
full transition will not happen before Forky.

Emmanuel Bourg

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: linux.debian.devel.release
To: 1103965@bugs.debian.org

This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------imTgRgQ0PVfIb1Y84jKoD6vI
Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

Q29udHJvbDogdGFncyAtMSBtb3JlaW5mbw0KDQpPbiAyNC0wNC0yMDI1IDE4OjE3LCBFbW1h bnVlbCBCb3VyZyB3cm90ZToNCj4gSSBhZ3JlZSBpdCdzIHRvbyBsYXRlIGZvciBhIGZ1bGwg dHJhbnNpdGlvbiB0byBKZXR0eSAxMiwgYnV0IHNldmVyYWwgDQo+IHBhY2thZ2VzIG9ubHkg dXNlIGpldHR5OSB0byBydW4gdW5pdCB0ZXN0cyBvciBmb3IgbWlub3IgZmVhdHVyZXMuIFRo ZSANCj4gaWRlYSBpcyB0byBsZWF2ZSB0aGVtIGFzLWlzIGZvciBUcml4aWUsIHJlbW92ZSB0 aGUgamV0dHk5IHNlcnZlciBwYWNrYWdlIA0KPiBidXQga2VlcCB0aGUgbGliamV0dHk5LWph dmEgbGlicmFyeS4NCg0KDQpJIGtub3cgaXQgZG9lc24ndCBoZWxwIGFueXRoaW5nIHRvIGFz aywgYnV0IHdoeSB3YXNuJ3QgdGhpcyBkb25lIGJlZm9yZSANCnRoZSBmcmVlemVzPw0KDQo+ IC0gZWNsaXBzZS1lcXVpbm94IGFuZCBlY2xpcHNlLXBsYXRmb3JtOiB0aGUgbGFjayBvZiBq ZXR0eTEyIGJsb2NrcyB0aGUgDQo+IHVwZ3JhZGVzLCB0aGUgcGFja2FnZXMgbGFnIDEuNSB5 ZWFyIGJlaGluZCB1cHN0cmVhbSByZWxlYXNlcy4NCg0KDQpTbyB5b3VyIGlkZWEgaXMgdG8g dXBncmFkZSB0aG9zZSBwYWNrYWdlcyBub3c/IFRoYXQgZG9lc24ndCByZWFsbHkgc291bmQg DQppbiBsaW5lIHdpdGggdGhlIGN1cnJlbnQgZnJlZXplOiAib25seSBzbWFsbCwgdGFyZ2V0 ZWQgZml4ZXMgYXJlIA0KYXBwcm9wcmlhdGUgZm9yIHRyaXhpZS4iDQoNCj4gLSBsdWNlbmU5 OiBKZXR0eSBpcyB1c2VkIGZvciB1bml0IHRlc3RzIG9ubHkgKGxpYmpldHR5OS1qYXZhIHNo b3VsZCBiZSANCj4gcmVtb3ZlZCBmcm9tIHRoZSBwYWNrYWdlIGRlcGVuZGVuY2llcykNCg0K DQpIYXZlIGJ1Z3MgYmVlbiBmaWxlZCBhbHJlYWR5Pw0KDQo+IC0gdHJhcHBlcmtlZXBlci13 ZWJzZXJ2ZXItamV0dHk5LWNsb2p1cmU6IHNwZWNpZmljIHRvIEpldHR5IDksIFB1cHBldCAN Cj4gaGFzbid0IHVwZ3JhZGVkIEpldHR5IHlldCBhbmQgd2lsbCBzdGljayB0byBKZXR0eSA5 IGluIFRyaXhpZS4NCg0KDQpJdCBkb2Vzbid0IHJlcXVpcmUgdGhlIHNlcnZlciBwYXJ0IEkg dW5kZXJzdGFuZD8NCg0KPiBBbGxvd2luZyBqZXR0eTEyIGluIFRyaXhpZSB3b3VsZCBlbmFi bGUgdXMgdG8gaGF2ZSB1cCB0byBkYXRlIEVjbGlwc2UgDQo+IHBhY2thZ2VzIGFuZCBhIHJl Y2VudCBhbmQgc3VwcG9ydGVkIHZlcnNpb24gb2YgdGhlIEpldHR5IHNlcnZlciwgb24gcGFy IA0KPiB3aXRoIHRoZSBUb21jYXQgcGFja2FnZS4gVGhlIHJpc2sgb2YgcmVncmVzc2lvbiBp cyBsaW1pdGVkIGJlY2F1c2UgdGhlIA0KPiBmdWxsIHRyYW5zaXRpb24gd2lsbCBub3QgaGFw cGVuIGJlZm9yZSBGb3JreS4NCg0KV2hhdCBpcyBzdGlsbCBsZWZ0IHdpdGggZm9yICJmdWxs IHRyYW5zaXRpb24iPw0KDQpQYXVsDQoNCg==

--------------imTgRgQ0PVfIb1Y84jKoD6vI--

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmgKcXYFAwAAAAAACgkQnFyZ6wW9dQp8 hgf9Hlm/bcqQOxUh6GxrBYESeltCU6n0ZUZdDWDUak14u8iHoUdfd4Gx2l7qYKhdkrgcv1ZnQlji NKIrG6j2AypL+BoqO0eZt65EobBQF05cRzKmqc6fiYLsessaFQf1dcPFQB8fPDH1LLURkuHIhozN 1JEvVCCqtDtXq9H/C3t1NrJb2iHgZ12aTCoAMAuWmkCRjPpRWl8NiWY6EPEMqX9O5pRSqQxNjp+8 YbJHP7iAMGUR9UMm7LbYzLIn06MOgipRYa56WwyKPsB/4v/1lIKwYaCnEcYadCIIsJlvsEQ9Sjla SdyBrSRiq3gfGJQkpCeUsXHfFmV8OJarnCEK+M9vvw==
=H14t
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: linux.debian.devel.release

Control: tags -1 - moreinfo

On 24/04/2025 19:14, Paul Gevers wrote:

I agree it's too late for a full transition to Jetty 12, but several
packages only use jetty9 to run unit tests or for minor features. The
idea is to leave them as-is for Trixie, remove the jetty9 server
package but keep the libjetty9-java library.

I know it doesn't help anything to ask, but why wasn't this done before
the freezes?

I noticed the Jetty 9 EOL at the end of January and rushed to complete
the Jetty 12 packaging. It took quite some time to prepare because it
required several new packages (9 jakarta-* packages and libslf4j2-java)
and then the package stayed nearly 2 months in the NEW queue. I expected
it would migrate before the freeze.

- eclipse-equinox and eclipse-platform: the lack of jetty12 blocks the
upgrades, the packages lag 1.5 year behind upstream releases.

So your idea is to upgrade those packages now? That doesn't really sound
in line with the current freeze: "only small, targeted fixes are
appropriate for trixie."

The Eclipse packages are fairly straightforward to update usually, but I
can hold the upgrade until Forky. The package I'd like to update in
priority is eclipse-jdt-core, which provides the JSP compiler used by
Tomcat. The current version (4.29) supports only Java 19, ideally it
should be aligned with the default Java version in Trixie, which is Java
21. This version started being supported in Eclipse 4.30. That's a more targeted update than a full upgrade to Eclipse 4.35.

- lucene9: Jetty is used for unit tests only (libjetty9-java should be
removed from the package dependencies)

Have bugs been filed already?

Not for lucene9, I just noticed it today as I reviewed the reverse dependencies.

- trapperkeeper-webserver-jetty9-clojure: specific to Jetty 9, Puppet
hasn't upgraded Jetty yet and will stick to Jetty 9 in Trixie.

It doesn't require the server part I understand?

I requires the library, but not the jetty9 "daemon" package. This one
must be removed before the release.

Allowing jetty12 in Trixie would enable us to have up to date Eclipse
packages and a recent and supported version of the Jetty server, on
par with the Tomcat package. The risk of regression is limited because
the full transition will not happen before Forky.

What is still left with for "full transition"?

Replacing libjetty9-java with libjetty12-java everywhere, which is a
little more than switching the paths to a few jar files because Jetty 12 transitioned from the javax to the jakarta namespace and the API
changed. We'll have to send patches upstream, this is likely to take
some time and the Java Team will tackle that task in Forky.

Emmanuel Bourg

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)