All Versions
30
Latest Version
Avg Release Cycle
22 days
Latest Release
1219 days ago
Changelog History
Page 2
Changelog History
Page 2
-
v2.0.6 Changes
April 04, 2020π Security
- β¬οΈ Upgrade to SnakeYAML to address CVE-2017-18640 (#3223, #3228, FasterXML/jackson-dataformats-text#187)
β‘οΈ Dependency updates
- β¬οΈ Bump byte-buddy from 1.10.8 to 1.10.9 (#3220)
- β¬οΈ Bump checker-qual from 3.2.0 to 3.3.0 (#3224)
- β¬οΈ Bump sphinx-maven-plugin from 2.6.0 to 2.7.0 (#3219)
π Documentation
- π Fix typo in
flattenMdc
field name (#3222)
-
v2.0.5 Changes
March 29, 2020 -
v2.0.4 Changes
March 27, 2020 -
v2.0.3 Changes
March 27, 2020π Security
- 0οΈβ£ Disable message interpolation in
ConstraintViolations
by default (#3208)
π Bug fixes
- Executor metrics shouldn't contain fmt string (#3142)
- π¦ Expose
JmxReporter
inBootstrap
(#3156) - π Fix FreeMarker "incompatible improvements" error logs (#3198)
- π Fix regression in
AbstractParam
handling (#3163)
β‘οΈ Dependency updates
- β¬οΈ Bump checker-qual from 3.1.1 to 3.2.0 (#3178)
- β¬οΈ Bump freemarker from 2.3.29 to 2.3.30 (#3182)
- β¬οΈ Bump httpclient from 4.5.11 to 4.5.12 (#3183)
- β¬οΈ Bump jackson-bom from 2.10.2.20200130 to 2.10.3 (#3179)
- β¬οΈ Bump jakarta.activation-api from 1.2.1 to 1.2.2 (#3161)
- β¬οΈ Bump jakarta.xml.bind-api from 2.3.2 to 2.3.3 (#3175)
- β¬οΈ Bump javassist from 3.26.0-GA to 3.27.0-GA (#3199)
- β¬οΈ Bump jersey-bom from 2.30 to 2.30.1 (#3165)
- β¬οΈ Bump jetty-setuid-java from 1.0.3 to 1.0.4 (#3172)
- β¬οΈ Bump jetty.version from 9.4.26.v20200117 to 9.4.27.v20200227 (#3176)
- β¬οΈ Bump junit-jupiter from 5.6.0 to 5.6.1 (#3203)
- β¬οΈ Bump junit5.version from 5.6.0 to 5.6.1 (#3204)
- β¬οΈ Bump liquibase-core from 3.8.6 to 3.8.7 (#3170)
- β¬οΈ Bump liquibase-core from 3.8.7 to 3.8.8 (#3200)
- β¬οΈ Bump maven-javadoc-plugin from 3.1.1 to 3.2.0 (#3194)
- β¬οΈ Bump maven-site-plugin from 3.8.2 to 3.9.0 (#3190)
- β¬οΈ Bump metrics-bom from 4.1.2 to 4.1.3 (#3169)
- β¬οΈ Bump metrics-bom from 4.1.3 to 4.1.4 (#3173)
- β¬οΈ Bump metrics-bom from 4.1.4 to 4.1.5 (#3188)
- β¬οΈ Bump mockito.version from 3.2.4 to 3.3.0 (#3164)
- β¬οΈ Bump mockito.version from 3.3.0 to 3.3.3 (#3193)
- β¬οΈ Bump octokit from 4.16.0 to 4.17.0 in /docs (#3189)
- β¬οΈ Bump octokit from 4.17.0 to 4.18.0 in /docs (#3207)
- β¬οΈ Bump pgpverify-maven-plugin from 1.5.1 to 1.7.0 (#3184)
- β¬οΈ Bump sphinx from 2.4.2 to 2.4.3 in /docs (#3166)
- β¬οΈ Bump sphinx from 2.4.3 to 2.4.4 in /docs (#3180)
- β¬οΈ Bump tomcat-jdbc from 9.0.31 to 9.0.33 (#3196)
π Documentation
- π Update dead link to Jersey documentation (#3197)
- β‘οΈ Update Javadoc and method signature for
Cli#run(String...)
(#3174)
Assorted
- 0οΈβ£ Disable message interpolation in
-
v2.0.2 Changes
February 24, 2020π Security
- Escape EL expressions in
ViolationCollector
to address CVE-2020-5245 (#3157)- Security Advisory: Remote Code Execution (RCE) vulnerability in dropwizard-validation <2.0.2
- Thanks to Alvaro MuΓ±oz (@pwntester) and the GitHub Security Lab for the responsible disclosure!
π Bug fixes
- π Fix regression in OptionalInt/Long/Double handling (#3134)
β‘οΈ Dependency updates
- β¬οΈ Bump byte-buddy from 1.10.7 to 1.10.8 (#3151)
- β¬οΈ Bump checker-qual from 3.1.0 to 3.1.1 (#3127)
- β¬οΈ Bump hibernate-core from 5.4.10.Final to 5.4.11.Final (#3137)
- β¬οΈ Bump hibernate-core from 5.4.11.Final to 5.4.12.Final (#3147)
- β¬οΈ Bump hibernate-validator from 6.1.1.Final to 6.1.2.Final (#3126)
- β¬οΈ Bump jdbi3-bom from 3.12.0 to 3.12.2 (#3146)
- β¬οΈ Bump liquibase-core from 3.8.5 to 3.8.6 (#3136)
- β¬οΈ Bump maven-shade-plugin from 3.2.1 to 3.2.2 (#3144)
- β¬οΈ Bump octokit from 4.15.0 to 4.16.0 in /docs (#3128)
- β¬οΈ Bump plexus-compiler-javac-errorprone from 2.8.5 to 2.8.6 (#3150)
- β¬οΈ Bump sphinx from 2.3.1 to 2.4.0 in /docs (#3132)
- β¬οΈ Bump sphinx from 2.4.0 to 2.4.1 in /docs (#3141)
- β¬οΈ Bump sphinx from 2.4.1 to 2.4.2 in /docs (#3155)
- β¬οΈ Bump tomcat-jdbc from 9.0.30 to 9.0.31 (#3143)
Assorted
- Escape EL expressions in
-
v2.0.1 Changes
January 30, 2020π Bug fixes
- Prefer jakarta apis over older javax apis (#3069)
- π Fix thread safety issue with eTag calculation (#3120)
β‘οΈ Dependency updates
- β¬οΈ Bump assertj-core from 3.14.0 to 3.15.0 (#3116)
- β¬οΈ Bump byte-buddy from 1.10.4 to 1.10.5 (#3060)
- β¬οΈ Bump byte-buddy from 1.10.5 to 1.10.6 (#3071)
- β¬οΈ Bump byte-buddy from 1.10.6 to 1.10.7 (#3110)
- β¬οΈ Bump caffeine from 2.8.0 to 2.8.1 (#3102)
- β¬οΈ Bump checker-qual from 3.0.1 to 3.1.0 (#3093)
- β¬οΈ Bump guava from 28.1-jre to 28.2-jre (#3086)
- β¬οΈ Bump hibernate-validator from 6.1.0.Final to 6.1.1.Final (#3101)
- β¬οΈ Bump httpclient from 4.5.10 to 4.5.11 (#3104)
- β¬οΈ Bump jackson-bom from 2.10.1 to 2.10.2 (#3092)
- β¬οΈ Bump jackson-bom from 2.10.2 to 2.10.2.20200130 (#3122)
- β¬οΈ Bump jdbi3-bom from 3.11.1 to 3.12.0 (#3064)
- β¬οΈ Bump jersey-bom from 2.29.1 to 2.30 (#3096)
- β¬οΈ Bump jetty.version from 9.4.24.v20191120 to 9.4.25.v20191220 (#3080)
- β¬οΈ Bump jetty.version from 9.4.25.v20191220 to 9.4.26.v20200117 (#3105)
- β¬οΈ Bump jmh.version from 1.22 to 1.23 (#3112)
- β¬οΈ Bump junit from 4.12 to 4.13 (#3088)
- β¬οΈ Bump junit-jupiter from 5.5.2 to 5.6.0 (#3108)
- β¬οΈ Bump junit5.version from 5.5.2 to 5.6.0 (#3109)
- β¬οΈ Bump lesscpy from 0.13.0 to 0.14.0 in /docs (#3113)
- β¬οΈ Bump liquibase-core from 3.8.2 to 3.8.3 (#3070)
- β¬οΈ Bump liquibase-core from 3.8.3 to 3.8.4 (#3077)
- β¬οΈ Bump liquibase-core from 3.8.4 to 3.8.5 (#3095)
- β¬οΈ Bump maven-source-plugin from 3.2.0 to 3.2.1 (#3075)
- β¬οΈ Bump mockito.version from 3.2.0 to 3.2.4 (#3067)
- β¬οΈ Bump octokit from 4.14.0 to 4.15.0 in /docs (#3090)
- β¬οΈ Bump pgpverify-maven-plugin from 1.5.0 to 1.5.1 (#3074)
- β¬οΈ Bump slf4j.version from 1.7.29 to 1.7.30 (#3066)
- β¬οΈ Bump sphinx from 2.2.2 to 2.3.0 in /docs (#3063)
- β¬οΈ Bump sphinx from 2.3.0 to 2.3.1 in /docs (#3076)
- β¬οΈ Bump tomcat-jdbc from 9.0.29 to 9.0.30 (#3061)
Assorted
- GitHub Actions checkout v2 (#3078)
- β Add configuration for Dependabot (#3081)
- 0οΈβ£ Use default PGP keyservers (hkps://hkps.pool.sks-keyservers.net)
- π Replacing ResourceTestRule with ResourceExtension in documentation (#3087)
- Example validation annotations (#3082)
- β FileAppenderFactoryTest: verify that the appender has started (#3079)
- π Use LinkedHashMap in App1Resource for deterministic iterations (#3103)
-
v2.0.0 Changes
December 10, 2019Upgrade notes: https://www.dropwizard.io/en/release-2.0.x/manual/upgrade-notes/upgrade-notes-2_0_x.html
- β Add TLS socket logging appender (#2317)
- β Add opt-in EmptyOptionalNoContentExceptionMapper for returning 204 responses on empty Optional responses (#2350)
- β Add configuration for excluding mime types and paths to gzip (#2356)
- π Support expirable log level configurations (#2375)
- β Add additional syslog logging facilities (#2381)
- β Add opt-in logging throttling via the messageRate config property (#2384)
- π Fix UUIDParams accepting input of incorrect length (#2382)
- π Fix usage
@SelfValidating
with@BeanParam
(#2334, #2335) - π Fix resource endpoints injected via DI not being logged on startup (#2389)
- 0οΈβ£ Disable protocols less secure than TLS v1.2 by default (#2417)
- β Add totalSizeCap to file log appender (#2502)
- Gzipped content encoded requests and responses are compatible with Servlet 3.1 and Async IO (#2566)
- π Retired use of deprecated Apache StrSubstitutor and StrLookup classes and replaced them with Apacheβs StringSubstitutor and StringLookup (#2462)
- π§ Deprecate Bundle in favor of ConfiguredBundle (#2516)
- Allow unknown JSON properties (i.e. disable DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES) by default (#2570)
- π Deprecate *Param classes and will be removed in 3.0.0 (#2637)
- β Add data size class adhering to the correct SI and IEC prefixes (#2686)
- β Added PortDescriptor class and method in ServerLifeCycleListener to provide a list of PortDescriptors, detailing all listening information for the application (#2711)
- β Add support for proxy-protocol in http connector configuration (#2709)
- 0οΈβ£ Disable using X-Forwarded-* headers by default (#2748)
- π Fix typo by renaming ResilentSocketOutputStream to ResilientSocketOutputStream (#2766)
- β Adds an opt-in URI request logging filter factory (UriFilterFactory) (#2794)`
- β Add support for configuring Jettyβs cookie compliance (#2812)
- π Deprecate Authorizer.authorize(principal, role) in favor of Authorizer.authorize(principal, role, context) (#2837)
- π Fix undefined config environment variables with a default value causing an exception in strict mode (#2801)
- β Removed dropwizard-jdbi as official module and moved it into itβs own project: dropwizard-jdbi (#2922)
- β Add
@JsonProperty
to AbstractServerFactory setters - β Add InjectValidatorBundle that enable context injection into validators
- β Add JUnit 5 Example to Testing Clients (#2367)
- β Add TLS socket logging appender
- β Add a JSONUnauthorizedHandler (#2839)
- β Add config settings for tasks and health check resources (#3037)
- β Add current class loader to javassist ClassPool
- β Add mapping for Jetty alpn-boot to Java versions (#2948)
- β Add missing βtoβ in BaseConfigurationFactory exception messages (#2869)
- β Add new constructors to allow specifying a response content type for Task and PostBodyTask, keeping the default as text/plain;charset=UTF-8
- β Add pip requirements file with Sphinx and dependencies
- β Add possibility to disable logging bootstrap for ResourceTestRule (#2338)
- β Add safe Jackson deserializers to prevent a DoS attack (#2511)
- β Add support for PATCH request to ResourceTestRule client (#2410)
- β Add support for SLF4J markers to dropwizard-json-logging (#2899)
- β Add support for disabled metric attributes on ConsoleReporterFaβ¦ (#2976)
- β Add support for logging caller data in dropwizard-json-logging
- β Add support for pathQuery json access log attribute
- β Added support for independently client-specified JCE Providers for both keystore and truststore (#2390)
- β Addressed ThrottlingLoggingAppenderTest issues
- β Adds a request logging url filter. Fixes #2794
- π Allow full customization of HttpClientBuilder (#2864)
- π Allow overriding ViewMessageBodyWriter#detectLocale() (#2967)
- π Allow reporting Metrics on stop (#2558)
- π Allow simple logger level config to support βOFFβ (#2819)
- π Allow to disable logging bootstrap in DAOTest
- π Allow to setNormalizeUri on HTTP client
- π² Appropriately log ssl params
- Avoid error message while signing artifacts
- Be more precise about use of Metered and Timed annotations
- Catch EofException at the jetty handler level
- Checkout all freemarker templates with lf line endings
- β Compiler Warning Cleanup (#2466)
- ConnectorProvider Not Set Silently
- Convert to lazy evaluation for json event creation (#2506)
- π² Correctly log resource paths with relative path segments (#2923)
- 0οΈβ£ Default values allowed on strict undefined config env vars
- Dependency reorganization (#2897)
- π Deprecate *Param classes
- Disable Errorprone: EqualsGetClass check (#2718)
- Disable FAIL_ON_UNKNOWN_PROPERTIES by default
- π² Document TeeFilter for JSON log format (#2596)
- β¬οΈ DropwizardTestSupport sets ConfigurationFactoryFactory too early (#2551)
- Enable Jackson Afterburner only on Java 8 (#2966)
- β Ensure DropwizardResourceConfig#forTesting() is using a random port
- Exclude javax.el and jakarta.el-api, using glassfish jakarta.el instead (#2750)
- Explicitly create BootstrapServiceRegistry in SessionFactoryFac⦠(#2977)
- Extend from AbstractHandlerContainer instead of AbstractHandler (#2460)
- π Fix Incomplete TaskServletTest Method Stubbing To Avoid NullpointerException In Tests (#3032)
- π Fix Integration Testing Example (#2364)
- π Fix Jackson (fuzzy) enum handling (#2599)
- π Fix date formatting pattern in test (#2585)
- π Fix deprecation usage of argparse4j
- π Fix errorpone warnings (#2399)
- π Fix escape signs and broken
@see
section (#2331) - π Fix for InvalidKeyException: Illegal key size (#2411, #2408)
- π Fix illegal reflection warning in DropwizardResourceConfig (#2964)
- π Fix incorrect reading of somaxconn for tcp backlog on linux (#2430)
- π Include default requestLog format string in documentation (#2500, #2526)
- π Fix jersey attempting to resolve auth filter fields
- π Fix shared metrics race with multiple environments
- Fix tests: Disable FAIL_ON_UNKNOWN_PROPERTIES
- π Fixed flaky test in CachingAuthorizer (#2683)
- π Improve Dropwizard test support (#2673)
- π Improve validation message for min/max duration
- Include all Apache Tomcat JDBC ConnectionPool metrics (#2475)
- Increases the values in the hibernate validator annotations to actual minimums
- β Let async logs finish in throttling append test
- π Make Duration, DataSize, and Size serializable (#2975)
- Mark PermissiveEnumDeserializer as cacheable (#2446)
- π Merge pull request #2316 from dropwizard/move-to-junit5
- π Merge pull request #2320 from nickbabcock/remove-prereq-
- π Merge pull request #2324 from nickbabcock/jersey-resolv
- β¬οΈ Merge pull request #2325 from xiaodong-xie/upgrade-liquibase
- π Merge pull request #2339 from nickbabcock/argparse4j
- π Merge pull request #2341 from nickbabcock/freemarker-attributes
- π Merge pull request #2342 from nickbabcock/env-metric-race
- Merge pull request #2344 from manuel-hegner/feature/improve_self_validation
- π Merge pull request #2349 from nickbabcock/fix-javadoc-errors
- π Merge pull request #2404 from nickbabcock/cleanup-params-test
- π Merge pull request #2405 from nickbabcock/log-ssl
- π Merge pull request #2409 from nickbabcock/inclusive
- π Merge pull request #2414 from tsundberg/timed-and-meterd-cannot-be-used-at-the-same-time
- π Merge pull request #2448 from dropwizard/resource-config-random-port
- π Merge pull request #2487 from zmarois/patch-1
- Merge pull request #2509 from mattnelson/json_uri_query
- π Merge pull request #2514 from bennyz/redundant-the
- β‘οΈ Merge pull request #2519 from dropwizard/dependency-updates
- π Merge pull request #2522 from alex-shpak/feature/inject-validator-2
- π Merge pull request #2541 from shail/eofExceptionIssue
- π Merge pull request #2549 from minisu/patch-3
- π Merge pull request #2573 from isaki/throttle_revisit
- Merge pull request #2575 from isaki/cache_auth_test_fix
- Merge pull request #2576 from sergioescala/removing_unnecessary_import
- π Merge pull request #2578 from nickbabcock/cve-suppress
- π Merge pull request #2600 from dropwizard/issue-2539
- π Merge pull request #2643 from nickbabcock/before-after
- π Merge pull request #2659 from dropwizard/errorprone-nullaway
- π Merge pull request #2665 from nickbabcock/sona-example
- π Merge pull request #2675 from dennyac/dropwizard-jersey-metrics-documentation
- π Merge pull request #2684 from nickbabcock/logging-docs
- π Merge pull request #2692 from FredDeschenes/2.0-release-notes-abstractbinder
- π Merge pull request #2693 from dropwizard/remove-checkstyle
- π Merge pull request #2703 from slivkamiro/feature/validation-query
- π Merge pull request #2722 from dropwizard/issue-2721
- π Merge pull request #2741 from davnicwil/specify-task-response-type
- π Merge pull request #2760 from dropwizard/issue-2759
- Merge pull request #2764 from tristanbuckner/reset_closed_client
- π Merge pull request #2767 from nickbabcock/test-bind
- π Merge pull request #2775 from nickbabcock/remove-doc
- π Merge pull request #2786 from josephlbarnett/javassist-classpath
- π Merge pull request #2803 from koraytugay/patch-1
- π Merge pull request #2804 from stevenbenitez/fix/caching-authenticator-doc
- π Merge pull request #2805 from mzamani1/fix-conscrypt-docs
- π Merge pull request #2811 from cyberdelia/normalize-uri
- π Merge pull request #2854 from toadzky/fix-hibernate-validator-values-on-server-factory
- π Merge pull request #2874 from jamesalfei/master
- π Merge pull request #2883 from dropwizard/dependency-cleanup
- π Merge pull request #2919 from alexey-wg2/remove-duplicated-service-entry
- π Merge pull request #2940 from msymons/master
- Merge pull request #2943 from gisripa/requestAttrs_json_logging
- π Merge pull request #3021 from cjhawley/patch-1
- Migrate jetty min data rates to Sizes
- β Migrate tests to JUnit 5.4.0 (#2493)
- Migrate to jetty-only gzip handler (#2566)
- π Move ResilientSocketOutputStream into io.dropwizard.logging (#2925)
- Nested calls to
@UnitOfWork
methods cause inconsistent behaviour (#2913) - π§ Only override ConfigurationSourceProvider if explicitly provided (#2720)
- π² Overhaul logging resource endpoints
- π¨ Refactor inject validator bundle to use resourceContext directly
- Register HK2 AbstractBinder with Jersey (#3000)
- β Remove Guava (#2400, #2555)
- β Remove metrics-ganglia completely (#2310)
- β Remove restrictions on generic type for ConfiguredBundle
- 0οΈβ£ Replace InjectValidatorBundle with feature and register by default
- β Replace JSON string asserts in MultipleContentTypeTest (#3056)
- Replace ThrottlingAppenderWrapper with external version
- Replace livereload and Guard with sphinx-autobuild
- Replace remaining use of Hamcrest with AssertJ (#2444)
- β Request Uri event should not contain params in tests (#2504)
- Return 404 for POST /admin/tasks (#2627)
- β Rework resource config test for resilient CI
- β Rewrite of throttling logging appender testing (#2458)
- Satisfy optional check before unwrap analyses (#2644)
- Simplify SelfValidatingValidator (#2413)
- π Support URL encoded entry names in ResourceURL#isDirectory() (#2674)
- π Support configuration of exception details with JSON logging (#2501)
- π Support custom request executor in HttpClientBuilder (#2959)
- π Support dumping Jetty config on start/stop (#2743)
- π Support for requestAttributes in Json access log
- π Support handling failed commands via Application#onFatalError(β¦ (#3020)
- π Support nested JUnit 5 tests with DropwizardExtension (#2924)
- Surround bootclasspath in quotes for special characters in user home
- β Test deserializing config without JsonAutoDetect
- β Test support cleanup on before exceptions
- UUID param to length check input
- π Use AtomicReference in LogConfigurationTask for timer
- β Use Dropwizardβs CharStreams class in DefaultServerFactoryTest
- β Use Java Stream API in DbDumpCommandTest (#2326)
- π Use commons-text native undef var detection (#2829)
- π Use correct property for Dropwizard versions in dropwizard-bom
- π Use custom public and secret keyrings when signing
- π Use instrumented thread factory (#2649)
- π Use strict illegal-access policy on Java 9 and later (#2965)
- π Allowing validation query to be null #2702
- π make it possible to created subclass of apache http builder (#2958)
- β‘οΈ Update JdbiFactory to use metricsβ InstrumentedSqlLogger (#2682)
π Version updates - β¬οΈ Bump bcprov-jdk15on to 1.64 (#2642, #2791, #2917, #2972)
- β¬οΈ Bump byte-buddy to 1.10.4 (#2611, #2631, #2707, #2710, #2782, #2835, #2849, #2860, #2876, #2984, #3018, #3041)
- β¬οΈ Bump caffeine to 2.8.0 (#2661, #2868)
- β¬οΈ Bump checker-qual to 3.0.0 (#2676, #2728, #2756, #2790, #2827, #2865, #2866, #2894, #2902, #2955, #3048, #3012)
- β¬οΈ Bump classmate to 1.5.1 (#2708, #2985)
- β¬οΈ Bump commons-lang3 to 3.9 (#2732)
- β¬οΈ Bump commons-text to 1.8 (#2828, #2905)
- β¬οΈ Bump Mustache compiler to 0.9.6 (#2616)
- β¬οΈ Bump Errorprone to 2.3.4 (#3046, #3047)
- β¬οΈ Bump Freemarker to 2.3.29 (#2887)
- β¬οΈ Bump Guava to 28.1-jre (#2472, #2688, #2798, #2900)
- β¬οΈ Bump hibernate-core to 5.4.10.Final (#2706, #2785, #2863, #2952, #2993, #3007, #3026, #3052)
- β¬οΈ Bump hibernate-validator to 6.1.0.Final (#2629, #2662, #2705, #2802, #3003)
- β¬οΈ Bump Apache HttpClient to 4.5.10 (#2615, #2715, #2799, #2914)
- β¬οΈ Bump Jackson to 2.10.0 (#2393, #2777, #2826, #2870, #3019, #2944)
- β¬οΈ Bump jakarta.el to 3.0.3 (#2912)
- β¬οΈ Bump javassist to 3.26.0-GA (#2738, #2961)
- β¬οΈ Bump JAXB API to 2.3.1 (#2608)
- β¬οΈ Bump JDBI3 to 3.11.1 (#2369, #2451, #2546, #2731, #2726, #2744, #2754, #2762, #2855, #2872, #2907, #2929, #3027, #3030)
- β¬οΈ Bump Jersey to 2.29.1 (#2395, #2613, #2813, #2916)
- β¬οΈ Bump Jetty to 9.4.24.v20191120 (#2346, #2657, #2734, #2740, #2752, #2800, #2879, #2956, #2997, #3031, #3033)
- β¬οΈ Bump alpn-boot to v8.1.13.v20181017 (#2547, #2340)
- β¬οΈ Bump Joda-Time to 2.10.5 (#2772, #2831, #2937, #2998)
- β¬οΈ Bump Liquibase to 3.8.2 (#2386, #2621, #2845, #2890, #3016, #3038)
- β¬οΈ Bump logback-throttling-appender to 1.1.0 (#2928)
- β¬οΈ Bump Dropwizard Metrics to 4.1.2 (#2761, #2986, #3055)
- β¬οΈ Bump Objenesis to 3.1 (#2968)
- β¬οΈ Bump SLF4J to 1.7.29 (#2652, #2873, #2877, #3009)
- β¬οΈ Bump tomcat-jdbc to 9.0.29 (#2636, #2700, #2733, #2776, #2793, #2838, #2885, #2979, #2935, #3034)
- β¬οΈ Upgrade dependencies (#2445, #2473, #2537, #2565)
- β¬οΈ Bump JUnit 5 to 5.5.2 (#2347, #2604, #2635, #2651, #2697, #2698, #2724, #2727, #2822, #2842, #2848, #2850, #2910, #2911)
- β¬οΈ Bump Mockito to 3.2.0 (#2630, #2654, #2680, #2695, #2725, #2730, #2784, #2834, #2957, #3044)
- β¬οΈ Bump assertj-core to 3.14.0 (#2648, #2666, #2696, #2861, #2862, #2867, #3004)
- β¬οΈ Bump H2 to 1.4.200 (#2660, #2694, #2983)
- β¬οΈ Bump hsqldb to 2.5.0 (#2788)
- β¬οΈ Bump Octokit to 4.14.0 (#2607, #2716)
- β¬οΈ Bump Sphinx to 2.2.2 (#2328, #2606, #2632, #2689, #2712, #2729, #2789, #2796, #2810, #2886, #3002, #3049)
-
v1.3.28 Changes
December 08, 2020β‘οΈ Dependency updates
- β¬οΈ Bump checker-qual from 3.7.0 to 3.8.0 (joschi#47, joschi#64)
- β¬οΈ Bump jackson-bom from 2.9.10.20200824 to 2.9.10.20201202 (joschi#63)
- β¬οΈ Bump jdbi3-bom from 3.17.0 to 3.18.0 (joschi#65)
- β¬οΈ Bump jetty.version from 9.4.33.v20201020 to 9.4.35.v20201120 (joschi#41, joschi#59)
- This addresses GHSA-86wm-rrjm-8wh8
- β¬οΈ Bump maven-shade-plugin from 3.2.0 to 3.2.4 (joschi#54)
- β¬οΈ Bump metrics4.version from 4.1.14 to 4.1.16 (joschi#43, joschi#61)
- β¬οΈ Bump tomcat-jdbc from 9.0.39 to 9.0.40 (joschi#56)
- β¬οΈ Bump junit-jupiter-engine from 5.6.2 to 5.7.0 (joschi#53)
- β¬οΈ Bump assertj-core from 3.17.2 to 3.18.1 (joschi#40)
- β¬οΈ Bump mockito-core from 3.5.15 to 3.6.28 (joschi#52, joschi#60)
- β¬οΈ Bump slf4j-simple from 1.7.25 to 1.7.30 (joschi#50)
- β¬οΈ Bump jacoco-maven-plugin from 0.8.5 to 0.8.6 (joschi#39)
- β¬οΈ Bump actions/cache from v1 to v2.1.3 (joschi#58)
- β¬οΈ Bump joschi/setup-jdk from v1 to v2.3.0 (joschi#57)
-
v1.3.27 Changes
October 28, 2020π Improvements
- β Remove obsolete
NonblockingServletHolder
(#3527)NonblockingServletHolder
is now deprecated and will be removed in Dropwizard 2.1.x.
π Security
- β¬οΈ Bump jetty.version from 9.4.32.v20200930 to 9.4.33.v20201020 (#3522)
- This is addressing GHSA-g3wg-6mcf-8jj6 (CVE-2020-27216)
β‘οΈ Dependency updates
- β Remove obsolete
-
v1.3.26 Changes
October 22, 2020π Improvements
- Swallow
EofException
when response was incomplete (#3382)
π Bug fixes
- β Reset Jersey client in tests (#3453)
β‘οΈ Dependency updates
- β¬οΈ Bump Mustache Java compiler from 0.9.6 to 0.9.7 (#3508)
- β¬οΈ Bump guava from 24.1.1-jre to 30.0-jre (#3509)
- β¬οΈ Bump httpclient from 4.5.12 to 4.5.13 (#3516)
- β¬οΈ Bump jdbi3-bom from 3.14.3 to 3.17.0 (#3510)
- β¬οΈ Bump jetty.version from 9.4.31.v20200723 to 9.4.32.v20200930 (#3478)
- β¬οΈ Bump joda-time from 2.10.6 to 2.10.7 (#3519)
- β¬οΈ Bump metrics-bom from 4.1.12.1 to 4.1.14 (#3520)
- β¬οΈ Bump tomcat-jdbc from 9.0.37 to 9.0.39 (#3495)
- β¬οΈ Upgrade to Liquibase 3.10.3
- β¬οΈ Bump assertj-core from 3.16.1 to 3.17.2 (#3448)
- β¬οΈ Bump junit from 4.12 to 4.13.1 (joschi#24, joschi#25)
- β¬οΈ Bump mockito.version from 3.4.6 to 3.5.15 (#3513)
- β¬οΈ Bump maven-project-info-reports-plugin from 3.1.0 to 3.1.1 (joschi#29)
- β¬οΈ Bump octokit from 4.18.0 to 4.19.0 in /docs (#3518)
- Enforce checker-qual 3.7.0 for dependency convergence
- Swallow