Will there be anymore p2 update sites for the 12.0.x release?

[andrew-tram]

Jetty Version

12.0.25

Jetty Environment

Java Version
N/A

Question

We're currently using 12.0.25 and noticed a couple CVEs come in: https://nvd.nist.gov/vuln/detail/CVE-2025-11143 and https://nvd.nist.gov/vuln/detail/CVE-2026-1605

It seems like updating to 12.0.33 will address that, but there hasnt been any p2 update sites created since 12.0.25.

If the answer is no, can you point to me where p2 update-sites are created and I'll try to see if I can spin one up on our end.

[joakime]

Jetty uses Eclipse Tycho's Maven p2 repository mechanism.

See: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-p2/

There hasn't been a Jetty p2 update site for years now.
Since the Eclipse Tycho team's merged PR for the initial jetty-p2/pom.xml

• Fix 6403 - add an automatic generated maven deployable p2 site #6404

[andrew-tram]

OKay, I wasn't sure who was responsible for creating those update sites. So it would be someone probably in Orbit?

I reference this page when checking for Jetty update sites - https://download.eclipse.org/tools/orbit/simrel/maven-jetty/release/