Micronaut Core 3.10.14
Full Changelog: v3.10.13...v3.10.14
Full Changelog: v3.10.13...v3.10.14
What's Changed Bug Fixes 🐞 Apply @bindable defaults to nullable constructor arguments by @graemerocher in #13613 Fix GraalPy application bootstrap paths on Windows by @n0tl3ss in #13634 Full Changelog: v5.2.12...v5.2.13
What's Changed Bug Fixes 🐞 Python: keep incremental compilation incremental with the functional interface provider by @graemerocher in #13596 Advertise the Python processing options a build tool has to discover by @graemerocher in #13608 Full Changelog: v5.2.11...v5.2.12
What's Changed Bug Fixes 🐞 [3.10.x] Release queued response bodies when the connection closes by @dstepanov in #13527 [3.10.x] Test that a rejected request body is drained without leaking buffers by @dstepanov in #13525 [3.10.x] Release HTTP/2 request data when the stream closes before its end by @dstepanov in #13529 Full Changelog: v3.10.12...v3.10.13
What's Changed Bug Fixes 🐞 Wrap evaluated expression values of Optional arguments in Optional by @dstepanov in #13585 Write the introspection of a type postponed after its first visit by @jamesdh in #13588 Improvements ⭐ Let an application say which pooled dependencies it has decided about by @graemerocher in #13587 Dependency updates 🚀 Jackson vulnerability fix in 5.2.x by @radovanradic in #13591…
What's Changed Bug Fixes 🐞 Do not fail HTTP/2 trailers when the access log is enabled by @dstepanov in #13516 Implement ByteArrayByteBuffer.toOutputStream and fix toByteArray by @dstepanov in #13537 Give each bean its own circuit when the intercepted method is inherited by @dstepanov in #13518 Skip the repeatable fallback for a non-repeatable annotation miss by @dstepanov in #13544 Keep AOP proxy…
What's Changed Bug Fixes 🐞 [4.10.x] Keep draining a request body the server has already rejected by @dstepanov in #13524 [4.10.x] Write body bytes that arrive before the response is up for writing by @dstepanov in #13526 [4.10.x] Release buffered HTTP/2 request data when the stream closes before read complete by @dstepanov in #13528 Full Changelog: v4.10.29...v4.10.30
What's Changed Bug Fixes 🐞 Release the body a filter cannot bind and reject such filter bodies at compile time by @dstepanov in #13498 Flush the window update when the HTTP/2 client resumes a backpressured response by @dstepanov in #13487 Do not chunk a streamed response to an HTTP/1.0 client by @dstepanov in #13503 Python: do not let a non-scope module decorator cost a module its pooling by @grae…
What's Changed Improvements ⭐ Report an annotation the processor cannot read instead of emitting nonsense by @graemerocher in #13366 Other Changes 💡 Do not enumerate @bean(typed) beans by an indexed type they hide by @dstepanov in #13473 Speed up the annotation processing test suites: C1-only JVMs, no inject-java re-forking, single Kotlin test compile by @dstepanov in #13476 Full Changelog: v5.2.7…
What's Changed Bug Fixes 🐞 Adapt injected async members in reusable Python contexts by @n0tl3ss in #13428 Other Changes 💡 Fix async Python interface bridges with untyped parameters by @n0tl3ss in #13425 Full Changelog: v5.2.6...v5.2.7
What's Changed Bug Fixes 🐞 Python: convert a standard library value passed to an erased generic parameter by @graemerocher in #13385 Python: keep @internal annotations off the generated source and write raw class literals by @dstepanov in #13401 Initialize ConversionService before DefaultMutableConversionService by @alvarosanchez in #13399 Resolve the declared accessor of a compiled record compone…
What's Changed Bug Fixes 🐞 Resolve io.* Java packages other than io.micronaut from Python by @graemerocher in #13345 Python: a Python module of a package named like a Java package is the module by @graemerocher in #13342 Status routes of a request no route matches run with the propagated context of the filters by @dstepanov in #13357 Python: keep the Java interface base of classes defined inside f…
What's Changed Bug Fixes 🐞 Keep no cookies in the JDK raw HTTP client by @dstepanov in #13260 Return each URI route once from DefaultRouter.uriRoutes() by @dstepanov in #13271 Close the connection when a streamed client response is abandoned by @dstepanov in #13261 Python: inherited constraints on the parameters of an interface method override by @graemerocher in #13309 Python: import the package…
What's Changed [4.10.x] Preserve IPv6 hosts in UriBuilder by @yawkat in #13314 [4.10.x] Handle malformed Forwarded host ports by @yawkat in #13313 Full Changelog: v4.10.28...v4.10.29
What's Changed New Features 🎉 Python-native streaming: async for over publishers, async generators as publishers by @dstepanov in #13208 Bug Fixes 🐞 Fix NPE in PythonContextRuntime.helper when contexts start concurrently by @dstepanov in #13200 Python: do not generate the is-getter of a boolean @Property twice by @dstepanov in #13205 Survive a missing netty in LeakTracker.Factory.staticInitializer…
What's Changed Bug Fixes 🐞 Register the physical signature of Kotlin suspend functions in the Graal reflection config by @dstepanov in #13133 Answer 400 when a Publisher part has no file name by @graemerocher in #13124 Improvements ⭐ Resolve the built-in body handlers' types once by @graemerocher in #13139 Reduce cold startup work: no zip file system scans, lazy MediaType quality, no Loom probe by…
What's Changed Security 🚨 Update to Netty 4.1.138.Final via #13098 Full Changelog: v3.10.11...v3.10.12
What's Changed Security 🚨 Update Netty to 4.2.18.Final via #13097 A number of security fixes have added additional validation and impose new resource usage limits, which may cause existing workloads to fail or be rejected. We recommend that you test your systems thoroughly as part of your Netty upgrade. Full Changelog: v5.1.14...v5.1.15
Security 🚨 GHSA-9c73-4fch-jrwv Unbounded memory growth from fragmented WebSocket messages (DoS) GHSA-gxcm-8fhf-v7x9 Default error response always includes raw exception message with no suppression option GHSA-2j79-mgc9-v76r HTTP request decompression-bomb DoS via unbounded gzip/deflate decoding Full Changelog: v3.10.10...v3.10.11
What's Changed Security 🚨 GHSA-9c73-4fch-jrwv Unbounded memory growth from fragmented WebSocket messages (DoS) GHSA-gxcm-8fhf-v7x9 Default error response always includes raw exception message with no suppression option GHSA-2j79-mgc9-v76r HTTP request decompression-bomb DoS via unbounded gzip/deflate decoding Bug Fixes 🐞 Backport fix for NPE when SSE events are received with no data field by @kevi…
Security 🚨 GHSA-9c73-4fch-jrwv Unbounded memory growth from fragmented WebSocket messages (DoS) GHSA-gxcm-8fhf-v7x9 Default error response always includes raw exception message with no suppression option GHSA-2j79-mgc9-v76r HTTP request decompression-bomb DoS via unbounded gzip/deflate decoding Full Changelog: v5.1.13...v5.1.14
What's Changed Bug Fixes 🐞 Iterate the introspections in a stable order again by @dstepanov in #13096 Keep a property's annotations to the type it is read through by @dstepanov in #13099 Find beans compiled before their annotation was self-indexed by @dstepanov in #13111 Other Changes 💡 Fix the two critical Sonar issues failing the 5.2.x quality gate by @dstepanov in #13095 Only look up introspect…
Update managed-netty version to 4.2.18.Final (#13097) Full Changelog: v4.10.27...v4.10.28
What's Changed New Features 🎉 Add RFC 10008 support (QUERY Method) by @desiderantes in #12780 Derive configuration metadata documentation from Kotlin KDoc by @MariusVolkhart in #12831 feat: add experimental Python support with GraalPy by @graemerocher in #12843 Add Netty activation controls by @n0tl3ss in #12842 feat: add incremental Python and Java compilation by @graemerocher in #12850 Support P…
What's Changed Dependency updates 🚀 Update reactor to 3.8.7 by @sdelamo in #12924 Full Changelog: v5.1.12...v5.1.13
What's Changed Dependency updates 🚀 Update groovy from 5.0.6 to 5.0.8. by @sdelamo in #12885 Other Changes 💡 Document piped stream limitations for streamed responses by @yawkat in #12514 Add Sec-Fetch-* HTTP Headers by @sdelamo in #12899 Full Changelog: v5.1.11...v5.1.12
What's Changed Update netty monorepo to v4.2.17.Final (#12876) Bug Fixes 🐞 fix(cors): replace reference equality with value equality in isAny and isAnyMethod by @fatekingsama in #12627 fix(multipart): case-insensitive Content-Type/Content-Length header matching in FormDemuxer by @florian-3ap in #12836 [5.1.x] Update netty-tcnative to 2.0.81.Final by @yawkat in #12890 Fix FormDemuxer event loop rac…
What's Changed Bug Fixes 🐞 fix(cors): replace reference equality with value equality in isAny and isAnyMethod by @fatekingsama in #12627 Update Jackson dependencies to patch security vulnerabilities (#12834) Full Changelog: v5.0.6...v5.0.7
What's Changed Dependency updates 🚀 Update Jackson dependencies to patch security vulnerabilities by @radovanradic in #12834 Full Changelog: v5.1.9...v5.1.10
What's Changed Bug Fixes 🐞 Fix processing replaced executable methods by @dstepanov in #12827 Full Changelog: v5.1.8...v5.1.9