Security Advisory
Important
This is a breaking release. RequestBuilderBase.java
has a new method added. This is in response to GHSA-mfj5-cf8g-g2fv
.
What's Changed
- brotli 1.17.0 by @sullis in #1974
- Enable Dependabot by @hyperxpro in #1975
- Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.4.0 by @dependabot in #1979
- Bump s4u/maven-settings-action from 2.2.0 to 3.0.0 by @dependabot in #1976
- Bump crazy-max/ghaction-import-gpg from 5.2.0 to 6.1.0 by @dependabot in #1977
- Bump com.google.errorprone:error_prone_core from 2.25.0 to 2.30.0 by @dependabot in #1978
- Bump org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.3.1 by @dependabot in #1981
- Bump com.uber.nullaway:nullaway from 0.10.10 to 0.11.2 by @dependabot in #1980
- Bump jetty.version from 11.0.16 to 11.0.23 by @dependabot in #1982
- Bump org.jacoco:jacoco-maven-plugin from 0.8.9 to 0.8.12 by @dependabot in #1987
- Bump org.hamcrest:hamcrest from 2.2 to 3.0 by @dependabot in #1990
- Bump commons-io:commons-io from 2.11.0 to 2.16.1 by @dependabot in #1986
- Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.25 to 10.1.28 by @dependabot in #1983
- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.5 by @dependabot in #1985
- Bump org.jetbrains:annotations from 24.0.1 to 24.1.0 by @dependabot in #1994
- Bump com.github.luben:zstd-jni from 1.5.6-4 to 1.5.6-5 by @dependabot in #1992
- Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.10.0 by @dependabot in #1996
- Bump com.google.errorprone:error_prone_core from 2.30.0 to 2.31.0 by @dependabot in #1995
- Bump org.apache.maven.plugins:maven-surefire-plugin from 3.4.0 to 3.5.0 by @dependabot in #1993
- Bump org.apache.kerby:kerb-simplekdc from 2.0.2 to 2.1.0 by @dependabot in #1991
- Bump netty.version from 4.1.112.Final to 4.1.113.Final by @dependabot in #1999
- Bump org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0 by @dependabot in #2001
- Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.16 by @dependabot in #2000
- Bump jetty.version from 11.0.23 to 11.0.24 by @dependabot in #1998
- Bump ch.qos.logback:logback-classic from 1.4.11 to 1.5.8 by @dependabot in #2003
- Bump org.junit:junit-bom from 5.10.2 to 5.11.0 by @dependabot in #2002
- Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.28 to 10.1.29 by @dependabot in #2004
- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.7 by @dependabot in #2010
- Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.29 to 10.1.30 by @dependabot in #2008
- Bump com.uber.nullaway:nullaway from 0.11.2 to 0.11.3 by @dependabot in #2007
- Bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0 by @dependabot in #2022
- Bump com.github.luben:zstd-jni from 1.5.6-5 to 1.5.6-7 by @dependabot in #2021
- Bump org.jetbrains:annotations from 24.1.0 to 26.0.1 by @dependabot in #2017
- Bump s4u/maven-settings-action from 3.0.0 to 3.1.0 by @dependabot in #2025
- Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.12 by @dependabot in #2024
- Bump com.uber.nullaway:nullaway from 0.11.3 to 0.12.1 by @dependabot in #2023
- Bump netty.version from 4.1.113.Final to 4.1.114.Final by @dependabot in #2013
- Bump org.junit:junit-bom from 5.11.0 to 5.11.3 by @dependabot in #2029
- Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.10.0 to 3.11.1 by @dependabot in #2030
- Bump io.netty:netty-common from 4.1.114.Final to 4.1.115.Final by @dependabot in #2031
- Bump commons-io:commons-io from 2.16.1 to 2.17.0 by @dependabot in #2028
- Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.0 to 3.5.2 by @dependabot in #2032
- Bump commons-io:commons-io from 2.17.0 to 2.18.0 by @dependabot in #2036
- Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.30 to 10.1.31 in /client by @dependabot in #2034
- Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.31 to 10.1.33 by @dependabot in #2038
- Bump com.github.luben:zstd-jni from 1.5.6-7 to 1.5.6-8 by @dependabot in #2037
- [CookieStore] Only set
Cookie
s if they are not already set by @pickypg in #2033 - Prepare for v3.0.1 release by @hyperxpro in #2040
New Contributors
Full Changelog: async-http-client-project-3.0.0...async-http-client-project-3.0.1