Skip to content

Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements#6976

Merged
jrnorth merged 10 commits into2.29.xfrom
upgrade-karaf-version
Mar 4, 2026
Merged

Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements#6976
jrnorth merged 10 commits into2.29.xfrom
upgrade-karaf-version

Conversation

@zkirksey
Copy link
Collaborator

@zkirksey zkirksey commented Feb 25, 2026

What does this PR do?

  • Upgrade karaf to 4.4.10
  • Remove jetty bundle replacements
  • Address CVE-2026-27727
  • Fix integration test error

Who is reviewing it?

Select relevant component teams:

Ask 2 committers to review/merge the PR and tag them here.

How should this be tested?

Any background context you want to provide?

What are the relevant tickets?

Fixes: #____

Screenshots

Checklist:

  • Documentation Updated
  • Update / Add Threat Dragon models
  • Update / Add Unit Tests
  • Update / Add Integration Tests

Notes on Review Process

Please see Notes on Review Process for further guidance on requirements for merging and abbreviated reviews.

Review Comment Legend:

  • ✏️ (Pencil) This comment is a nitpick or style suggestion, no action required for approval. This comment should provide a suggestion either as an in line code snippet or a gist.
  • ❓ (Question Mark) This comment is to gain a clearer understanding of design or code choices, clarification is required but action may not be necessary for approval.
  • ❗ (Exclamation Mark) This comment is critical and requires clarification or action before approval.

@zkirksey zkirksey requested a review from stustison as a code owner February 25, 2026 16:43
@zkirksey zkirksey changed the title Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements Upgrade Karaf to [WIP] 4.4.10 and remove Jetty bundle replacements Feb 25, 2026
@zkirksey zkirksey changed the title Upgrade Karaf to [WIP] 4.4.10 and remove Jetty bundle replacements [WIP] Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements Feb 25, 2026
@zkirksey zkirksey changed the title [WIP] Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements Upgrade Karaf to 4.4.10 and remove Jetty bundle replacements Feb 26, 2026
@lavoywj
Copy link
Contributor

lavoywj commented Mar 2, 2026

Could we also upgrade the Jackson xml version to address this CVE GHSA-72hv-8253-57qq

@jrnorth jrnorth merged commit 99e2a13 into 2.29.x Mar 4, 2026
13 of 14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants