AHC v2.14.5 Release

Security Advisory

GHSA-cmxv-58fp-fm3g

Full Changelog: async-http-client-project-2.12.4...async-http-client-project-2.14.5

AHC v3.0.9 Release

What's Changed

• Enable maven snapshots by @hyperxpro in #2161
• Avoid allocations in ChannelPoolPartioning by @doom369 in #2158
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.52 to 10.1.54 in /client by @dependabot[bot] in #2164
• Add pluggable DnsNameResolver by @doom369 in #2163
• Strip credentials on cross-domain redirects and HTTPS-to-HTTP downgrades 6b2fbb7

Security

• GHSA-cmxv-58fp-fm3g

Full Changelog: async-http-client-project-3.0.8...async-http-client-project-3.0.9

AHC v3.0.8 Release

What's Changed

• netty leak detector 0.2.2 by @sullis in #2143
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.47 to 10.1.49 in /client by @dependabot[bot] in #2142
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.49 to 10.1.50 in /client by @dependabot[bot] in #2145
• Add Support for Multiplexing HTTP/2 by @hyperxpro in #2144
• Modernize README and fix outdated project metadata by @hyperxpro in #2146
• Drop shaded Apache Commons FileUpload and move to test dependency by @hyperxpro in #2147
• Implement full RFC 7616 HTTP Digest Authentication compliance by @hyperxpro in #2148
• Switch to Revapi and Matrix JDK builds for all current JDK LTS by @hyperxpro in #2149
• Bump the actions group with 4 updates by @dependabot[bot] in #2150
• Bump the dependencies group with 50 updates and add profile for different JDKs by @dependabot[bot] in #2151
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.50 to 10.1.52 in /client by @dependabot[bot] in #2153
• RFC 7804 - SCRAM Authentication Implementation with SHA-256 by @hyperxpro in #2154
• Release v3.0.8 by @hyperxpro in #2155

Full Changelog: async-http-client-project-3.0.7...async-http-client-project-3.0.8

AHC v3.0.7 Release

What's Changed

• Add BootstrapHandler inside initChannel for SOCKS by @hyperxpro in #2140

Full Changelog: async-http-client-project-3.0.6...async-http-client-project-3.0.7

AHC v3.0.6 Release

What's Changed

• add large response test by @sullis in #2051
• Bump Netty to 4.2.9.Final by @jorenkoyen in #2135

New Contributors

• @jorenkoyen made their first contribution in #2135

Full Changelog: async-http-client-project-3.0.5...async-http-client-project-3.0.6

AHC v3.0.5 Release

What's Changed

• Fix NPE in NettyConnectListener by @hyperxpro in #2127
• Maintain Content-Type set explicitly by client by @hyperxpro in #2130
• Bump io.netty:netty-codec-http from 4.2.5.Final to 4.2.8.Final by @dependabot[bot] in #2131
• Release AHC v3.0.5 by @hyperxpro in #2133

Full Changelog: async-http-client-project-3.0.4...async-http-client-project-3.0.5

AHC v3.0.4

What's Changed

• Fix SOCKS proxy SSL handler issue - resolve NoSuchElementException when using HTTPS with SOCKS4/SOCKS5 by @hyperxpro in #2114
• remove unused maven property by @sullis in #2115
• maven-compiler-plugin 3.14.1 by @sullis in #2117
• upgrade testcontainers to v2 by @sullis in #2119
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.44 to 10.1.47 in /client by @dependabot[bot] in #2120
• Release v3.0.4 by @hyperxpro in #2126

Full Changelog: async-http-client-project-3.0.3...async-http-client-project-3.0.4

AHC v3.0.3 Release

What's Changed

• netty leak detector 0.0.8 by @sullis in #2087
• Fix NPE race in NettyResponseFuture.cancel (#2042) by @pratt4 in #2088
• Add japicmp by @hyperxpro in #2091
• Feature: Add Option to Strip Authorization Header on Redirect by @hyperxpro in #2090
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.39 to 10.1.40 in /client by @dependabot[bot] in #2092
• netty leak detector extension 0.2.0 by @sullis in #2095
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.40 to 10.1.41 in /client by @dependabot[bot] in #2096
• junit 5.13.0 by @sullis in #2097
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.41 to 10.1.42 in /client by @dependabot[bot] in #2099
• Bump commons-fileupload:commons-fileupload from 1.5 to 1.6.0 in /client by @dependabot[bot] in #2101
• closed parenthesis addition - toString() in ChannelPoolPartitioning by @hnb22 in #2103
• Future-proof HTTPS endpoint identification by @chrisvest in #2104
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.42 to 10.1.44 in /client by @dependabot[bot] in #2105
• Fix incorrect logger class in ResumableAsyncHandler by @guangweifan in #2107
• HTTPS Proxy Support by @hyperxpro in #2109
• Upgrade to Netty 4.2 by @hyperxpro in #2112
• Release v3.0.3 by @hyperxpro in #2113

New Contributors

• @pratt4 made their first contribution in #2088
• @hnb22 made their first contribution in #2103
• @chrisvest made their first contribution in #2104
• @guangweifan made their first contribution in #2107

Full Changelog: async-http-client-project-3.0.2...async-http-client-project-3.0.3

AHC v3.0.2 Release

What's Changed

• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.33 to 10.1.34 by @dependabot in #2044
• Bump brotli4j.version from 1.17.0 to 1.18.0 by @dependabot in #2045
• Bump netty.version from 4.1.115.Final to 4.1.116.Final by @dependabot in #2049
• Bump io.netty.incubator:netty-incubator-transport-native-io_uring from 0.0.25.Final to 0.0.26.Final by @dependabot in #2052
• Bump com.uber.nullaway:nullaway from 0.12.1 to 0.12.3 by @dependabot in #2055
• Bump ch.qos.logback:logback-classic from 1.5.12 to 1.5.16 by @dependabot in #2054
• Bump org.junit:junit-bom from 5.11.3 to 5.11.4 by @dependabot in #2046
• Bump org.jetbrains:annotations from 26.0.1 to 26.0.2 by @dependabot in #2058
• Bump com.github.luben:zstd-jni from 1.5.6-8 to 1.5.6-9 by @dependabot in #2057
• Bump netty.version from 4.1.116.Final to 4.1.117.Final by @dependabot in #2056
• Bump netty.version from 4.1.117.Final to 4.1.118.Final by @dependabot in #2060
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.34 to 10.1.35 by @dependabot in #2061
• Bump io.github.nettyplus:netty-leak-detector-junit-extension from 0.0.5 to 0.0.6 by @dependabot in #2062
• netty leak detector 0.0.6 by @sullis in #2059
• enable leak detection in AutomaticDecompressionTest by @sullis in #2064
• Bump com.github.luben:zstd-jni from 1.5.6-9 to 1.5.6-10 by @dependabot in #2063
• use larger payload in AutomaticDecompressionTest by @sullis in #2065
• fix: inappropriate connection reuse when using HTTP proxy if the initial CONNECT failed by @jasonjoo2010 in #2072
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 by @dependabot in #2069
• Bump com.github.luben:zstd-jni from 1.5.6-10 to 1.5.7-1 by @dependabot in #2067
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.35 to 10.1.36 by @dependabot in #2066
• fix: send CONNECT first when recovering a HTTPS request by @jasonjoo2010 in #2077
• Bump netty.version from 4.1.118.Final to 4.1.119.Final by @dependabot in #2076
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.36 to 10.1.39 by @dependabot in #2073
• Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 by @dependabot in #2084
• Bump com.uber.nullaway:nullaway from 0.12.3 to 0.12.6 by @dependabot in #2082
• Bump com.github.luben:zstd-jni from 1.5.7-1 to 1.5.7-2 by @dependabot in #2078
• Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.18 by @dependabot in #2080
• Disable Dependabot by @hyperxpro in #2085
• Release v3.0.2 by @hyperxpro in #2086

New Contributors

• @jasonjoo2010 made their first contribution in #2072

Full Changelog: async-http-client-project-3.0.1...async-http-client-project-3.0.2

AHC v2.12.4 Release

Security Advisory

GHSA-mfj5-cf8g-g2fv

Important

This is a breaking release. RequestBuilderBase.java has a new method added. This is in response to GHSA-mfj5-cf8g-g2fv.