As of 1 January 2026, the Jetty and CometD projects will cease publishing EOL updates to Maven Central for Jetty 9, Jetty 10, and Jetty 11, as well as CometD 5, CometD 6, and CometD 7. Sometime in 2026, we will cease updating Jetty 12.0 and CometD 8. We are ironing out the timeline on these two; it could be as soon as 6 months from now, or it could be longer. We are working to finalize future timelines for EOL for both projects. We will let the community know as soon as possible.
If you deploy on EOL versions of Jetty or CometD by 2026, options are available for you to pursue for up-to-date binaries that will address any future CVEs.
We have posted a discussion topic to the Jetty GitHub repo explaining upcoming EOL changes for Jetty and CometD. If you have any questions or would like some clarification, please don't hesitate to post in the discussion.
This topic and its corresponding issue will be updated with any additional information as needed.
I also published a blog on some of the motivations behind the changes, which you can read further if you're interested.
cheers!
Jesse
