Special Thanks to the following Eclipse Jetty community members

Changelog

#15874 - [12.1.x] Introduced recursion depth limit in JSON parsing.
#15871 - SessionHandler uses ConnectionMetaData.isSecure() instead of Request.isSecure(), breaking secure session cookies behind ForwardedRequestCustomizer (@adityaanikam)
#15869 - PathResource incorrectly treats a classpath resource inside a JAR under a non-ASCII path as an alias
#15852 - Upgrade quiche to version 0.30.0
#15846 - Allow per-request form limits to be used with EE8/EE9
#15840 - HTTP/1 response header overflow retry loses previously determined connection persistence
#15839 - Simplified callback method notifications.
#15822 - Introduce flag in Rewrite Rules to preserve UriCompliance Violations when rewriting URIs
#15807 - ArrayByteBufferPool.clear() leaves the bucket's secondary QueuedPool poisoned: NPE on the next acquire()
#15733 - ee11 servlet: ServletRequest.getServletContext() returns the source context, not the target, after a cross-context RequestDispatcher.include()
#15679 - Fixes race for HTTP3StreamConnection release of Chunk
#15678 - CompressionHandler randomly truncates output
#15675 - Optimize Huffman codec (@wendigo)
#15674 - Optimize HPack (@wendigo)
#15432 - BrotliEncoderSink drops all but the last pulled buffer, silently truncating large Brotli responses
#15386 - Issues in http2 stream idle timeouts
#15368 - HTTP/2 client aborts exchange and loses response completed during server graceful shutdown (regression in 12.1.10 / 12.0.36 from #15134 / #14692)