From 973c592e421df170cf382e555fa594c79082cdd2 Mon Sep 17 00:00:00 2001
From: Haonan <hhaonan@outlook.com>
Date: Wed, 11 Nov 2026 22:59:20 +0800
Subject: [PATCH] Upgrade Jetty to 12.0.41 and Jackson to 2.18.12 (#19226)

(cherry picked from commit 7b407ec0029235c9154a14f825bd3e24404eea00)
---
 LICENSE-binary | 27 ++++++++++++++-------------
 pom.xml        |  4 ++--
 2 files changed, 16 insertions(+), 15 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index d14c894798c75..07016ae0d710a 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -222,12 +222,13 @@ commons-io:commons-io:2.14.0
 org.apache.commons:commons-lang3:3.18.0
 com.google.code.gson:gson:2.13.1
 com.google.guava.guava:32.1.2-jre
-com.fasterxml.jackson.core:jackson-annotations:2.16.2
-com.fasterxml.jackson.core:jackson-core:2.16.2
-com.fasterxml.jackson.core:jackson-databind:2.16.2
-com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base:2.16.2
-com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider:2.16.2
-com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.16.2
+com.fasterxml.jackson.core:jackson-annotations:2.18.12
+com.fasterxml.jackson.core:jackson-core:2.18.12 (bundles FastDoubleParser, MIT License, with portions of fast_double_parser, Boost Software License 1.0, fast_float, MIT License, and bigint, BSD 2-Clause; and Schubfach, MIT License)
+com.fasterxml.jackson.core:jackson-databind:2.18.12
+com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.12
+com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base:2.18.12
+com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider:2.18.12
+com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.18.12
 io.swagger.core.v3:swagger-annotations-jakarta:2.2.50
 io.swagger.core.v3:swagger-core-jakarta:2.2.50
 io.swagger.core.v3:swagger-integration-jakarta:2.2.50
@@ -236,13 +237,13 @@ io.swagger.core.v3:swagger-models-jakarta:2.2.50
 jakarta.inject:jakarta.inject-api:2.0.1
 at.yawk.lz4:lz4-java:1.10.0
 com.github.ben-manes.caffeine:caffeine:2.9.3
-org.eclipse.jetty:jetty-http:12.0.36
-org.eclipse.jetty:jetty-io:12.0.36
-org.eclipse.jetty:jetty-security:12.0.36
-org.eclipse.jetty:jetty-server:12.0.36
-org.eclipse.jetty:jetty-session:12.0.36
-org.eclipse.jetty.ee10:jetty-ee10-servlet:12.0.36
-org.eclipse.jetty:jetty-util:12.0.36
+org.eclipse.jetty:jetty-http:12.0.41
+org.eclipse.jetty:jetty-io:12.0.41
+org.eclipse.jetty:jetty-security:12.0.41
+org.eclipse.jetty:jetty-server:12.0.41
+org.eclipse.jetty:jetty-session:12.0.41
+org.eclipse.jetty.ee10:jetty-ee10-servlet:12.0.41
+org.eclipse.jetty:jetty-util:12.0.41
 com.google.code.findbugs:jsr305:3.0.2
 com.librato.metrics:librato-java:2.1.0
 org.apache.thrift:libthrift:0.23.0
diff --git a/pom.xml b/pom.xml
index d72382c773237..6cd728c28fa5e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -91,7 +91,7 @@
       https://github.com/apache/iotdb-bin-resources/tree/main/iotdb-tools-thrift
     -->
         <iotdb-tools-thrift.version>0.23.0.0</iotdb-tools-thrift.version>
-        <jackson.version>2.16.2</jackson.version>
+        <jackson.version>2.18.12</jackson.version>
         <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
         <jakarta.servlet-api.version>6.0.0</jakarta.servlet-api.version>
         <jakarta.validation-api.version>3.0.2</jakarta.validation-api.version>
@@ -99,7 +99,7 @@
         <java-websocket.version>1.5.4</java-websocket.version>
         <jcip-annotations.version>1.0-1</jcip-annotations.version>
         <jersey.version>3.1.11</jersey.version>
-        <jetty.version>12.0.36</jetty.version>
+        <jetty.version>12.0.41</jetty.version>
         <jline.version>3.26.2</jline.version>
         <jna.version>5.14.0</jna.version>
         <jtransforms.version>3.1</jtransforms.version>