1. 67b0915 Upgrade brotli4j to 1.24.0 for CVE-2026-111497 by Donghun Ha · 3 hours ago master
  2. 378382d Fix SCRAM authentication lifecycle across consecutive requests by Arturo Bernal · 35 hours ago
  3. ccc2391 Tighten RFC 7804 SCRAM message validation. by Arturo Bernal · 11 days ago
  4. e6cc976 Moved socket timeout integration tests to 'time-out' to be executed manually during release preparation due to those tests failing intermittently in CI by Oleg Kalnichevski · 2 days ago
  5. 1d0ae9b Upgraded HttpClient version to 5.7-beta2-SNAPSHOT by Oleg Kalnichevski · 2 days ago
  6. acb0cd3 Add RFC 9211 to the list of supported specifications by Arturo Bernal · 7 days ago
  7. 65f4ccd Explicitly bind to `127.0.0.1` in tests by Ryan Schmitt · 8 days ago
  8. e413d1d Fix spurious TCP resets when initiating TLS connection closure by Ryan Schmitt · 11 days ago
  9. 600e51f Review release notes for US English grammar and spelling. by Gary Gregory · 9 days ago
  10. 482820f Updated release notes for HttpClient 5.7 beta-1 release by Oleg Kalnichevski · 9 days ago
  11. 318bd31 Expire idle connections based on connection or request configuration and then evict them as expired. Deprecated #evictIdleConnections should not be used by Oleg Kalnichevski · 10 days ago
  12. 9411b3d Fixed Jackson deprecations by Oleg Kalnichevski · 10 days ago
  13. 4456b34 Always use maxResultLength constraint with EntityUtils#toByteArray and EntityUtils#toString by Oleg Kalnichevski · 10 days ago
  14. b3f6802 InternalH2ConnPool: support for ConnectionConfig connection life-cycle parameters (validateAfterInactivity, idleTimeout, timeToLive) by Oleg Kalnichevski · 2 weeks ago
  15. ddda928 Upgraded HttpCore to version 5.5-beta4 by Oleg Kalnichevski · 10 days ago
  16. 5a52fee require scram server nonce to extend the client nonce by Javid Khan · 14 days ago
  17. 9f7a05a Bump the all group across 1 directory with 10 updates by dependabot[bot] · 2 weeks ago
  18. 18f2961 Replaced System.out calls with logging in tests by Oleg Kalnichevski · 2 weeks ago
  19. 6681f28 Upgraded maven-surefire-plugin to the version defined in HC Parent by Oleg Kalnichevski · 2 weeks ago
  20. 83af126 Upgraded Testcontainers to version 2.0.5 by Oleg Kalnichevski · 2 weeks ago
  21. e37a0e3 Use Mockito JUnit extension to wire tests with Mockito mocks by Oleg Kalnichevski · 2 weeks ago
  22. 5a3138d SSE: Handle request header names case-insensitively by Arturo Bernal · 3 weeks ago
  23. fd21b1b SSE: Update Last-Event-ID independently of event dispatch by Arturo Bernal · 3 weeks ago
  24. 07bed09 SSE: Do not dispatch incomplete events at end of stream by Arturo Bernal · 3 weeks ago
  25. 4e59869 HTTPCLIENT-2429: Improve support for custom transport layers by Arturo Bernal · 9 weeks ago
  26. c8d231f route the first non-BOM byte through the CR/LF handling in ByteSseEntityConsumer by Javid Khan · 3 weeks ago
  27. 2e1320c treat a lone CR as an SSE line terminator by Javid Khan · 3 weeks ago
  28. 036cdaf Bump actions/checkout from 5 to 7 by dependabot[bot] · 3 weeks ago
  29. 90a7e77 Upgraded HC parent to version 15 / POM cleanup by Oleg Kalnichevski · 4 weeks ago
  30. 8b64f59 Removed the initial implementation of #evictIdleConnections in H2AsyncClientBuilder as it can cause premature termination of connections with multiplexing message exchanges; added #evictExpiredConnections to proactively evict expired connections from the connection pool by Oleg Kalnichevski · 4 weeks ago
  31. b8e9406 Disabled the keep-alive strategy for HTTP/2 connections as it contradicts RFC 9113, section 8.2.2. "Connection-Specific Header Fields"; updated relevant javadocs by Oleg Kalnichevski · 4 weeks ago
  32. 7d62d75 Disable javadoc missing tag warning by Oleg Kalnichevski · 4 weeks ago
  33. a2f45e9 Async exchange handlers to support #outputAborted event by Oleg Kalnichevski · 4 weeks ago
  34. 3423165 Auth challenge parsing improvements by Oleg Kalnichevski · 6 weeks ago
  35. 0e91503 Upgraded HttpCore to version 5.5-beta3 by Oleg Kalnichevski · 6 weeks ago
  36. 7cded0c HTTPCLIENT-2434 Deprecate idle connection eviction by Arturo Bernal · 5 weeks ago
  37. 20ea5c4 Bump actions/setup-java from 5 to 5.6.0 by dependabot[bot] · 3 months ago
  38. e8d667c Add RFC 7639 ALPN header codec; emit ALPN on CONNECT tunnels by Arturo Bernal · 1 year, 1 month ago
  39. 636993f Preserve idle timeout when copying connection configuration by Arturo Bernal · 5 weeks ago
  40. e750f52 Simplifcation of the message exchange handling logic in the main async exec interceptors by Oleg Kalnichevski · 5 weeks ago
  41. 3849cf9 HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay by Matthias Kurz · 5 weeks ago
  42. 94be1b3 Improved connection expiry and eviction example by Oleg Kalnichevski · 5 weeks ago
  43. 6579979 Moved tls handshake timeout integration tests to 'time-out' to be executed manually during release preparation due to those tests failing intermittently in CI by Oleg Kalnichevski · 5 weeks ago
  44. c7c49ed HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() when disconnectEndpoint() throws (#883) by Victor Alekseev · 5 weeks ago
  45. be07c77 Use Brotli4jLoader.isAvailable() instead of relying on class presence. by Arturo Bernal · 9 weeks ago
  46. dd74a83 decode punycode public suffixes in PublicSuffixMatcher.verify (#876) by Javid Khan · 9 weeks ago
  47. 86c313b Fix Brotli async client example by Arturo Bernal · 9 weeks ago
  48. a01e51d Fix Brotli decompression hang with large input buffers by Arturo Bernal · 9 weeks ago
  49. 0bd4895 Add a model and parser for the RFC 9209 Proxy-Status response field by Arturo Bernal · 10 weeks ago
  50. 83386f2 RFC 9211: optional Cache-Status response header by Arturo Bernal · 2 months ago
  51. 6ed50d9 treat malformed delta-seconds as absent in deltaSeconds by Javid Khan · 10 weeks ago
  52. 8b901f8 Moved timeout and stale connection related integration tests into separate groups to be executed manually during release preparation due to those tests failing intermittently in CI by Oleg Kalnichevski · 10 weeks ago
  53. 3b2aeb1 Header parsing optimization in cookie, authentication and caching protocol code by Oleg Kalnichevski · 10 weeks ago
  54. 9128f74 Corrected report declarations of new project modules by Oleg Kalnichevski · 2 months ago
  55. 1ce37cb Deprecate the never-cache-responses-with-query options and make them opt-in by Arturo Bernal · 2 months ago
  56. ff52680 Add WebSocket RFCs to the standards compliance list by Arturo Bernal · 2 months ago
  57. 038378f Verify the server authentication (rspauth) provided in the Digest Authentication-Info response per RFC 7616 by Arturo Bernal · 2 months ago
  58. cb0062c Removed invalid request version check from ResponseCachingPolicy by Oleg Kalnichevski · 2 months ago
  59. 9765867 Fix resource leaking on error in AsyncCachingExec by Jeremie Bolduc · 2 months ago
  60. dbb9e86 Upgraded HttpClient version to 5.7-alpha2-SNAPSHOT by Oleg Kalnichevski · 2 months ago
  61. a890ec7 Corrects application of SSL parameters in the async TLS upgrade method by Oleg Kalnichevski · 3 months ago
  62. 4dae8da Javadoc fixes by Oleg Kalnichevski · 3 months ago
  63. c28479e Integration tests failing intermittently in the CI environment moved to 'slow' group by Oleg Kalnichevski · 3 months ago
  64. e43c290 Mark the SSE and WebSocket modules as experimental by Arturo Bernal · 3 months ago
  65. e23b8e7 Revise RELEASE_NOTES for version 5.7 by Gary Gregory · 3 months ago
  66. 3b4ff29 Add Experimental. to SSE and WebSocket by Arturo Bernal · 3 months ago
  67. 64916ee Updated release notes for HttpClient 5.7-alpha1 by Oleg Kalnichevski · 3 months ago
  68. ab543f1 Enable multiplex message exchanges over active HTTP/2 connections by Oleg Kalnichevski · 3 months ago
  69. 920be79 Hardened WebSocket transport and permessage-deflate for RFC 6455/7692 conformance by Arturo Bernal · 3 months ago
  70. 23a70f9 reject control characters in bearer token in BearerScheme by Javid Khan · 3 months ago
  71. c84facd Removed racy assert by Oleg Kalnichevski · 3 months ago
  72. b1c4b20 Disabled reactive HEAD request integration tests failing intermittently with CI build server by Oleg Kalnichevski · 3 months ago
  73. 38e5063 Enabled H2 response timeout integration tests by Oleg Kalnichevski · 3 months ago
  74. c4eb7e5 Extended HttpCacheEntry and related classes to store the enclosed request body (#859) by hunghhdev · 3 months ago
  75. a4e525d Upgraded Jakarta REST client module to java 17; upgraded jakarta.ws.rs-api to version 4.0.0 by Oleg Kalnichevski · 3 months ago
  76. 88c62e7 HTTPCLIENT-2428: Scale reactor capacity in inflating AsyncDataConsumers to match decompressed output by Arturo Bernal · 3 months ago
  77. 7cb189e Exclude httpclient5-jakarta-rest-client from the reactor on toolchains below its target Java version by Arturo Bernal · 3 months ago
  78. 9816640 Increased test timeout to reduce the chance of test failure in CI by Oleg Kalnichevski · 3 months ago
  79. ebac951 ContentCompressionExec fails to close the underlying response stream in case of an unexpected runtime or protocol exception by Oleg Kalnichevski · 3 months ago
  80. b1defb3 HTTP cache support for the QUERY method (RFC 10008) (#852) by hunghhdev · 3 months ago
  81. a50d07a reject negative 64-bit payload length in WebSocketFrameReader by Javid Khan · 3 months ago
  82. 2d077f2 Do not store a response when the request specifies Cache-Control: no-store by Arturo Bernal · 3 months ago
  83. ad33209 Bump the all group across 1 directory with 16 updates by dependabot[bot] · 3 months ago
  84. c5bce18 Removed explicit depenedency on jackson-databind by Oleg Kalnichevski · 3 months ago
  85. e7b2407 Removed explicit plugin versions from project modules by Oleg Kalnichevski · 3 months ago
  86. a9f86ce Bump actions/dependency-review-action from 4 to 5 by dependabot[bot] · 5 months ago
  87. 66b541b CacheKeyGenerator to support requests with an enclosed content body such as QUERY by Oleg Kalnichevski · 3 months ago
  88. 1e18d54 Do not call the backend when an only-if-cached request cannot be served from cache (RFC 9111 5.2.1.7) by hunghh.dev · 3 months ago
  89. 43cb5c3 compare scheme in redirect same-authority check by Javid Khan · 3 months ago
  90. 7978d71 Corrected invalid comment in DefaultRedirectStrategy (no functional changes) by Oleg Kalnichevski · 3 months ago
  91. b3676f3 HTTP cache protocol interceptors to route requests that cannot be correctly represented as SimpleHttpRequest directly to the request execution pipeline bypassing the caching layer by Oleg Kalnichevski · 3 months ago
  92. 3a46ebc HTTP cache protocol interceptors to use SimpleHttpRequest internally for cache operations; the use of self-contained request object should help simplify handling of requests with an enclosed entity such as QUERY by Oleg Kalnichevski · 3 months ago
  93. 7f316c0 Moved cache request URI extraction and normalization methods to CacheSupport by Oleg Kalnichevski · 3 months ago
  94. 649c849 Replaced deprecated method with an equivalent one from PathSegmentCodec by Oleg Kalnichevski · 3 months ago
  95. 17079a1 Fixed push branch delcaration in maven.yml by Oleg Kalnichevski · 3 months ago
  96. 62716cf Added application/x-www-form-urlencoded support (request and response) to the Jakarta REST client backed by a collection of NameValuePair by Arturo Bernal · 4 months ago
  97. da6f1b2 escape quotes and strip line breaks in rfc7578 multipart parameters by Javid Khan · 4 months ago
  98. 06aac6d HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content decoder by Arturo Bernal · 4 months ago
  99. 77641d6 Restrict trigger push branch for GitHub Workflow by Aurélien Pupier · 4 months ago
  100. 0fde2d4 Add support for HTTP QUERY method (#840) by Mario Daniel Ruiz Saavedra · 4 months ago