Re: Inquiry About Jetty Version in Apache Kafka 4.0.0

Yes, I was about to post the same. You can also directly check Jetty
version on Kafka 4.0.0 tag:
https://github.com/apache/kafka/blob/4.0.0/gradle/dependencies.gradle#L71

On Mon, May 19, 2025 at 4:57 PM Steven Schlansker
<stevenschlansker@gmail.com> wrote:
>
>
> > On May 16, 2025, at 12:04 AM, Sahil Sharma D <sahil.d.sharma@ericsson.com.INVALID> wrote:
> >
> > Hi Team,
> >
> > I noticed that Jetty has been upgraded to version 11.x in Kafka 4.0.0. According to the Jetty website, version 11.x has already reached its end of life (EOL). Could you clarify how any future issues or CVEs related to version 11.x will be addressed?
> >
> > Additionally, I would like to know if there is a plan to upgrade Jetty to version 12.x in upcoming releases.
>
> Hi Sahil, I think your premise may be mistaken - I am no authority on the project, but some searching around leads you to
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-1032%3A+Upgrade+to+Jakarta+and+JavaEE+10+in+Kafka+4.0
> which is implemented as
> https://github.com/apache/kafka/pull/16754
>
> indicating that Kafka 4 indeed already uses Jetty 12
>
> Best,
> Steven
>