From 336731596fc2d75b6661944955638b143ab7ac0a Mon Sep 17 00:00:00 2001
From: HTHou <haonan@apache.org>
Date: Wed, 11 Nov 2026 18:44:02 +0800
Subject: [PATCH] Upgrade Jetty to 12.0.41 and Jackson to 2.18.12

---
 LICENSE-binary | 28 ++++++++++++++--------------
 pom.xml        |  4 ++--
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index 83fd51f6e243..14264f0f701d 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -218,14 +218,14 @@ Apache License 2.0
 at.yawk.lz4:lz4-java:1.11.4
 cglib:cglib:3.3.0
 ch.qos.reload4j:reload4j:1.2.22
-com.fasterxml.jackson.core:jackson-annotations:2.18.11
-com.fasterxml.jackson.core:jackson-core:2.18.11 (bundles FastDoubleParser, MIT License, with portions of fast_double_parser, Boost Software License 1.0, fast_float, MIT License, and bigint, BSD 2-Clause; and Schubfach, MIT License)
-com.fasterxml.jackson.core:jackson-databind:2.18.11
+com.fasterxml.jackson.core:jackson-annotations:2.18.12
+com.fasterxml.jackson.core:jackson-core:2.18.12 (bundles FastDoubleParser, MIT License, with portions of fast_double_parser, Boost Software License 1.0, fast_float, MIT License, and bigint, BSD 2-Clause; and Schubfach, MIT License)
+com.fasterxml.jackson.core:jackson-databind:2.18.12
 com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.1
-com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11
-com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base:2.18.11
-com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider:2.18.11
-com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.18.11
+com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.12
+com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base:2.18.12
+com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider:2.18.12
+com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.18.12
 com.github.ben-manes.caffeine:caffeine:2.9.3
 com.github.moquette-io.moquette:moquette-broker:0.18.0
 com.google.code.findbugs:jsr305:3.0.2
@@ -289,13 +289,13 @@ org.apache.ratis:ratis-server:3.3.1
 org.apache.ratis:ratis-server-api:3.3.1
 org.apache.ratis:ratis-thirdparty-misc:1.1.0
 org.apache.thrift:libthrift:0.25.0
-org.eclipse.jetty:jetty-http:12.0.36
-org.eclipse.jetty:jetty-io:12.0.36
-org.eclipse.jetty:jetty-security:12.0.36
-org.eclipse.jetty:jetty-server:12.0.36
-org.eclipse.jetty:jetty-session:12.0.36
-org.eclipse.jetty:jetty-util:12.0.36
-org.eclipse.jetty.ee10:jetty-ee10-servlet:12.0.36
+org.eclipse.jetty:jetty-http:12.0.41
+org.eclipse.jetty:jetty-io:12.0.41
+org.eclipse.jetty:jetty-security:12.0.41
+org.eclipse.jetty:jetty-server:12.0.41
+org.eclipse.jetty:jetty-session:12.0.41
+org.eclipse.jetty:jetty-util:12.0.41
+org.eclipse.jetty.ee10:jetty-ee10-servlet:12.0.41
 org.javassist:javassist:3.30.2-GA
 org.xerial.snappy:snappy-java:1.1.10.9
 org.yaml:snakeyaml:2.6
diff --git a/pom.xml b/pom.xml
index 9d72706f267d..9dfb37abed86 100644
--- a/pom.xml
+++ b/pom.xml
@@ -90,7 +90,7 @@
       https://github.com/apache/iotdb-bin-resources/tree/main/iotdb-tools-thrift
     -->
         <iotdb-tools-thrift.version>0.25.0.0</iotdb-tools-thrift.version>
-        <jackson.version>2.18.11</jackson.version>
+        <jackson.version>2.18.12</jackson.version>
         <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
         <jakarta.servlet-api.version>6.0.0</jakarta.servlet-api.version>
         <jakarta.validation-api.version>3.0.2</jakarta.validation-api.version>
@@ -98,7 +98,7 @@
         <java-websocket.version>1.5.4</java-websocket.version>
         <jcip-annotations.version>1.0-1</jcip-annotations.version>
         <jersey.version>3.1.11</jersey.version>
-        <jetty.version>12.0.36</jetty.version>
+        <jetty.version>12.0.41</jetty.version>
         <jline.version>3.26.2</jline.version>
         <jna.version>5.14.0</jna.version>
         <jtransforms.version>3.1</jtransforms.version>