Tag for release: jetty-9.4.19.v20190610

 + 2909 Remove B64Code
 + 3332 jetty-maven-plugin - transitive dependencies not loaded from
   "target/classes"
 + 3498 WebSocket Session.suspend() now suspends incoming frames instead
   of reads
 + 3534 Use System nanoTime, not currentTimeMillis for IdleTimeout
 + 3550 Server becomes unresponsive after sitting idle from a load spike
 + 3562 InetAccessHandler should be able to apply to a certain port or
   connector
 + 3568 Make UserStore able to be started/stopped with its LoginService
 + 3583 jetty-maven plugin in multi-module-project does not use files from
   /target/test-classes folder of dependent projects
 + 3605 IdleTimeout with Jetty HTTP/2 and InputStreamResponseListener
 + 3608 Reply with 400 Bad request to malformed WebSocket handshake
 + 3616 Backport WebSocket SessionTracker from Jetty 10
 + 3620 Use of `throwUnavailableOnStartupException=true` does not stop Server
   in jetty-home
 + 3627 Only renew session id when spnego authentication is fully complete
 + 3628 NPE in QueuedThreadPool.getReservedThreads()
 + 3630 X-Forwarded-For missing last hextet for ipv6
 + 3633 endpointIdentificationAlgorithm enabled by default
   jetty-ssl-context.xml
 + 3653 access control exception if programmatic security manager is used
 + 3655 Spaces missing on Cookies generated via RFC6265
 + 3663 Remove deprecation of HttpClient replacement methods in WebSocketClient
 + 3680 Bom manages non-existent infinispan-remote and infinispan-embedded
   dependencies due to config classifier
 + 3683 Multipart file not deleted when client aborts upload
 + 3690 Upgrade to asm 7.1
 + 3713 Emit warning when invoking deprecated method in Jetty XML
 + 3715 Improve Log.condensePackage performance
 + 3722 HttpSessionListener.sessionDestroyed should be able to access webapp
   classes
 + 3726 Remove OSGi export uses of servlet-api from jetty-util
 + 3729 Make creation of java:comp/env threadsafe
 + 3743 Update XmlConfiguration usage in Jetty to always use Constructors that
   provide Location information
 + 3748 @resource field not injected in Jetty Demo
 + 3750 NPE in WebSocketClient.toString()
 + 3751 Modern Configure DTD / FPI is used inconsistently

Tag for release: jetty-9.4.18.v20190429

 + 3476 IllegalStateException in WebSocket ConnectionState
 + 3550 Server becomes unresponsive after sitting idle from a load spike
 + 3563 Update to apache jasper 8.5.40
 + 3573 Update jetty-bom for new infinispan artifacts.
 + 3582 HeapByteBuffer cleared unexpected
 + 3597 Session persistence broken from 9.4.13+
 + 3609 Fix infinispan start module dependencies

Tag for release: jetty-9.4.17.v20190418

 + 3464 Split SslContextFactory into Client and Server
 + 3549 Directory Listing on Windows reveals Resource Base path
 + 3555 DefaultHandler Reveals Base Resource Path of each Context

Tag for release: jetty-9.3.27.v20190418

 + 3549 Directory Listing on Windows reveals Resource Base path
 + 3555 DefaultHandler Reveals Base Resource Path of each Context

Tag for release: jetty-9.2.28.v20190418

 + 3549 Directory Listing on Windows reveals Resource Base path
 + 3555 DefaultHandler Reveals Base Resource Path of each Context

Tag for release: jetty-9.4.16.v20190411

 + 1861 Limit total bytes pooled by ByteBufferPools
 + 3133 Logging of `key.readyOps()` can throw unchecked `CancelledKeyException`
 + 3159 WebSocket permessage-deflate RSV1 validity check
 + 3274 OSGi versions of java.base classes in
   org.apache.felix:org.osgi.foundation:jar conflicts with new rules on Java 9+
 + 3319 Modernize Directory Listing: HTML5 and Sorting
 + 3361 HandlerCollection.addHandler is lacking synchronization
 + 3373 OutOfMemoryError: Java heap space in GZIPContentDecoder
 + 3389 Websockets jsr356 willDecode not invoked during decoding
 + 3394 java.security.acl.Group is deprecated and marked for removal
 + 3404 Cleanup QuotedQualityCSV internal use of Double
 + 3411 HttpClient does not timeout during multiple redirection
 + 3421 Duplicate JSESSIONID sent when invalidating new session
 + 3422 CLOSE_WAIT socket status forever after terminating websocket client
   side
 + 3425 Upgrade conscrypt version to 2.0.0 and remove usage of reflection
 + 3429 JMX Operation to trigger manual deployment scan in WebAppProvider
 + 3440 Stop server if Unavailable thrown
 + 3444 org.eclipse.jetty.http.Http1FieldPreEncoder generates an invalid header
   byte-array if header is null
 + 3456 Allow multiple programmatic login/logout in same request
 + 3464 Split SslContextFactory into Client and Server
 + 3481 TLS close_notify() is not guaranteed
 + 3489 Using setExtraClasspath("lib/extra/*") does not work on Microsoft
   Windows
 + 3526 HTTP Request Locale not retained in WebsocketUpgrade Request
 + 3540 Use configured Provider in SslContextFactory consistently
 + 3545 NullPointerException on ServletOutputStream.print("");

Tag for release: jetty-9.2.27.v20190403

 + 3319 Refactored Directory Listing to modernize and avoid XSS

Tag for release: jetty-9.3.26.v20190403

 + 2954 Improve cause reporting for HttpClient failures
 + 3274 OSGi versions of java.base classes in
   org.apache.felix:org.osgi.foundation:jar conflicts with new rules on Java 9+
 + 3302 Support host:port in X-Forwarded-For header in
   ForwardedRequestCustomizer
 + 3319 Allow reverse sort for directory listed files

Tag for release: jetty-9.4.15.v20190215

 + 113 Add support for NCSA Extended Log File Format
 + 150 extraClasspath() method on WebAppContext dont support dir path
 + 2646 Better handle concurrent calls to change session id and invalidate
   within a context
 + 2718 NPE using more than one Endpoint.publish
 + 2817 Change HttpClient and WebSocketClient default to always have SSL
   support enabled
 + 3030 Enforce Content-Encoding check only on parameter extraction
 + 3038 SSL Connection Leak
 + 3049 Warn on common SslContextFactory problematic configurations
 + 3133 Logging of `key.readyOps()` can throw unchecked `CancelledKeyException`
 + 3139 NPE on
   WebSocketServerContainerInitializer.configureContext(ServletContextHandler)
 + 3146 ServletContainerInitializer from war WEB-INF/classes not executing
 + 3154 Add support for javax.net.ssl.HostnameVerifier to HttpClient
 + 3161 Update to Apache JSP 8.5.35
 + 3178 BufferingResponseListener does not clear buffer in onHeaders
 + 3186 Jetty maven plugin - javax.annotation.jar picked up from jetty plugin
   rather than from applications classpath
 + 3202 jetty-maven plugin in multi-module project not using files from /target
   folders of sister projects
 + 3207 Async ServletOutputStream print methods
 + 3210 Threadpool module creates unmanged threadpool
 + 3212 Client and server need to to treat an incoming HTTP/2 RST_STREAM frame
   differently
 + 3234 AuthenticationProtocolHandler should not cache the failed results
 + 3240 ALPN support for Java 13
 + 3241 Missing main manifest attribute in jetty-runner.jar
 + 3242 Fix WebSocket components dump()
 + 3278 NullPointerException if base resource is an empty ResourceCollection
 + 3279 WebSocket write may hang forever
 + 3302 Support host:port in X-Forwarded-For header in
   ForwardedRequestCustomizer
 + 3305 Avoid additional selectNow() on non-Windows runtimes
 + 3307 WebAppClassLoader loadClass can throw NullPointerException for missing
   class
 + 3311 Ability to serve HTTP and HTTPS from the same port
 + 3317 Improve uncaught exception handler double logging
 + 3329 Hazelcast delete expired session fails in deserialize
 + 3350 Do not expect to be able to connect to https URLs with the HttpClient
   created from a parameterless constructor

jetty-9.4.14.v20181114

 + 3097 Duplicated programmatic Servlet Listeners causing duplicate calls
 + 3103 HttpClientLoadTest reports a leak in byte buffer
 + 3104 Align jetty-schemas version within apache-jsp module as well