)]}' { "log": [ { "commit": "67b09151419e8c5d13725c465e838444098a7794", "tree": "a9048f31c5e60ca5618691219d98e23b2dbb7aa4", "parents": [ "378382d22b120635b9f3c344d0e1b7d1fbdbb622" ], "author": { "name": "Donghun Ha", "email": "donghun.dev@gmail.com", "time": "Sun Oct 25 01:27:11 2026 +0900" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 24 18:34:52 2026 +0200" }, "message": "Upgrade brotli4j to 1.24.0 for CVE-2026-111497\n" }, { "commit": "378382d22b120635b9f3c344d0e1b7d1fbdbb622", "tree": "dd8dc0814b5b84053ab14e72ed7233f33a59081a", "parents": [ "ccc2391313915f833eee7441813efffad470be82" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Oct 23 10:58:23 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Oct 23 19:31:51 2026 +0200" }, "message": "Fix SCRAM authentication lifecycle across consecutive requests\n" }, { "commit": "ccc2391313915f833eee7441813efffad470be82", "tree": "b3080ba59eee65e46d7e83be42e3c8b59db248c0", "parents": [ "e6cc9767dcebd26caa23e24f20424e19fa07ef51" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Oct 13 12:26:38 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Oct 23 10:33:17 2026 +0200" }, "message": "Tighten RFC 7804 SCRAM message validation.\n\nThis change tightens SCRAM-SHA-256 validation for the initial authentication exchange according to RFC 5802, RFC 7677 and RFC 7804.\n\nIt adds stricter validation of SCRAM message structure and attributes, canonical Base64 encoding, strict UTF-8 decoding, duplicate parameter detection, and RFC-compliant handling of password preparation.\n" }, { "commit": "e6cc9767dcebd26caa23e24f20424e19fa07ef51", "tree": "8a1e8fb8a8406f1a9282de458196ebb2bbd470fb", "parents": [ "1d0ae9b6795ac46956d7f3771c2e6e69ad8cf80e" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 22 16:05:48 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 22 16:05:48 2026 +0200" }, "message": "Moved socket timeout integration tests to \u0027time-out\u0027 to be executed manually during release preparation due to those tests failing intermittently in CI\n" }, { "commit": "1d0ae9b6795ac46956d7f3771c2e6e69ad8cf80e", "tree": "05ae1fecf49d59aec326dcda1ea7aa2f4210ae46", "parents": [ "acb0cd33fd77d1f4164c4848ae607000b557ac8c" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 22 12:13:42 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 22 12:13:42 2026 +0200" }, "message": "Upgraded HttpClient version to 5.7-beta2-SNAPSHOT" }, { "commit": "acb0cd33fd77d1f4164c4848ae607000b557ac8c", "tree": "17b11688bca3aa7ac1896f1dddc01da0f72fd75e", "parents": [ "65f4ccdccf7edbbd03f4c6b1ce37d375efaac14c" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sun Oct 18 08:15:38 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sun Oct 18 08:16:09 2026 +0200" }, "message": "Add RFC 9211 to the list of supported specifications\n" }, { "commit": "65f4ccdccf7edbbd03f4c6b1ce37d375efaac14c", "tree": "f248a8e59902ad18adc22c99c69a7319e3b144aa", "parents": [ "e413d1d55c8b101dc877ce0e71e32dcf8d6bc71b" ], "author": { "name": "Ryan Schmitt", "email": "rschmitt@apache.org", "time": "Fri Oct 16 12:49:02 2026 -0700" }, "committer": { "name": "Ryan Schmitt", "email": "rschmitt@apache.org", "time": "Fri Oct 16 12:52:38 2026 -0700" }, "message": "Explicitly bind to `127.0.0.1` in tests\n" }, { "commit": "e413d1d55c8b101dc877ce0e71e32dcf8d6bc71b", "tree": "6b7d2dcab9758a3f257b03c16728bcaf269883d4", "parents": [ "600e51f00260762d1bdcc99125158102f56810ac" ], "author": { "name": "Ryan Schmitt", "email": "rschmitt@apache.org", "time": "Tue Oct 13 13:26:08 2026 -0700" }, "committer": { "name": "Ryan Schmitt", "email": "rschmitt@pobox.com", "time": "Fri Oct 16 09:56:50 2026 -0700" }, "message": "Fix spurious TCP resets when initiating TLS connection closure\n\nWhen an HTTP/1.1 response contains `Connection: close`, the async client\nbegins a graceful TLS shutdown. This causes `SSLIOSession.isOpen()` to\nimmediately start returning `false`, so at the completion of the HTTP\nexchange when `AsyncProtocolExec` calls `isEndpointConnected()`, the\n`InternalConnectionEndpoint.isConnected()` method sees that the pool\nentry\u0027s underlying connection is reporting `!isOpen()` and calls\n`poolEntry.discardConnection(CloseMode.IMMEDIATE)`, which sends a TCP\nreset to the server.\n\nThis commit changes that `discardConnection` call site to use\n`CloseMode.GRACEFUL`, and also provides a reproducer and integration\ntest demonstrating the problem.\n" }, { "commit": "600e51f00260762d1bdcc99125158102f56810ac", "tree": "ffb22ef1b0b794f542253bc82abca9a43a1be201", "parents": [ "482820fe96427518bba1deb39917c00556d973ee" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 17:55:00 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 17:55:00 2026 -0400" }, "message": "Review release notes for US English grammar and spelling.\n" }, { "commit": "482820fe96427518bba1deb39917c00556d973ee", "tree": "652d673d8d26e44f324d0f6105ee05c01d6bec46", "parents": [ "318bd312e84984c21ec44365a6ebd32b263b5c4a" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 15 12:09:27 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 15 12:12:47 2026 +0200" }, "message": "Updated release notes for HttpClient 5.7 beta-1 release\n" }, { "commit": "318bd312e84984c21ec44365a6ebd32b263b5c4a", "tree": "69a17f1bd261ea57f16845a941c2c3850b471760", "parents": [ "9411b3df32d6c4521fdf5e4fe29f3746709a7e52" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 16:27:22 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 16:27:22 2026 +0200" }, "message": "Expire idle connections based on connection or request configuration and then evict them as expired. Deprecated #evictIdleConnections should not be used\n" }, { "commit": "9411b3df32d6c4521fdf5e4fe29f3746709a7e52", "tree": "f457ef8de28e032e2c9dffd64c8b4af7813f3420", "parents": [ "4456b34c78ad1dacd08a2e3e2da94f24ecc49642" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 14:46:52 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 14:49:40 2026 +0200" }, "message": "Fixed Jackson deprecations\n" }, { "commit": "4456b34c78ad1dacd08a2e3e2da94f24ecc49642", "tree": "e45921dc114cf3996ba751aa9135ad25bbe38f8a", "parents": [ "b3f6802eb8871c38840043455a6a323ac6405d08" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 14:37:20 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 14:39:52 2026 +0200" }, "message": "Always use maxResultLength constraint with EntityUtils#toByteArray and EntityUtils#toString\n" }, { "commit": "b3f6802eb8871c38840043455a6a323ac6405d08", "tree": "565cb8d2e34b761b153d82b5d3d609b8230ee5d3", "parents": [ "ddda9282384326210ff87f312984a040a55757a2" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Oct 09 14:13:44 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 13:54:14 2026 +0200" }, "message": "InternalH2ConnPool: support for ConnectionConfig connection life-cycle parameters (validateAfterInactivity, idleTimeout, timeToLive)\n" }, { "commit": "ddda9282384326210ff87f312984a040a55757a2", "tree": "f769c34225de8bbc9d11486aee7e56cb40eddc42", "parents": [ "5a52fee5a873a7ec7eb168190ad4932d48eb1fd1" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 13:34:06 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Oct 14 13:34:06 2026 +0200" }, "message": "Upgraded HttpCore to version 5.5-beta4\n" }, { "commit": "5a52fee5a873a7ec7eb168190ad4932d48eb1fd1", "tree": "d4cc19f3e0ab7dc7fada4d4de11edd78eb8d635b", "parents": [ "9f7a05a3d1d29d2e141e69304267518ac3ebf737" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Sun Oct 11 11:58:39 2026 +0530" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Oct 13 12:24:28 2026 +0200" }, "message": "require scram server nonce to extend the client nonce\n" }, { "commit": "9f7a05a3d1d29d2e141e69304267518ac3ebf737", "tree": "78eddde8e6dcaf6dc55424b73453544b7f180ae0", "parents": [ "18f2961e7804ee0a59322265aa1c8899baca784f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Oct 10 13:30:55 2026 +0000" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 15:44:02 2026 +0200" }, "message": "Bump the all group across 1 directory with 10 updates\n\nBumps the all group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.6.1` | `2.7.0` |\n| [com.kohlschutter.junixsocket:junixsocket-core](https://github.com/kohlschutter/junixsocket) | `2.10.1` | `2.11.1` |\n| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-11` | `1.5.7-22` |\n| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |\n| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |\n| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |\n| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |\n| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |\n| [io.micrometer:micrometer-tracing](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |\n| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |\n| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |\n| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.64.0` | `1.66.0` |\n| org.apache.maven:apache-maven | `3.9.14` | `3.10.0` |\n\n\n\nUpdates `org.conscrypt:conscrypt-openjdk-uber` from 2.6.1 to 2.7.0\n- [Release notes](https://github.com/google/conscrypt/releases)\n- [Commits](https://github.com/google/conscrypt/compare/2.6.1...2.7.0)\n\nUpdates `com.kohlschutter.junixsocket:junixsocket-core` from 2.10.1 to 2.11.1\n- [Release notes](https://github.com/kohlschutter/junixsocket/releases)\n- [Commits](https://github.com/kohlschutter/junixsocket/compare/junixsocket-2.10.1...junixsocket-2.11.1)\n\nUpdates `com.github.luben:zstd-jni` from 1.5.7-11 to 1.5.7-22\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-11...v1.5.7-22)\n\nUpdates `io.micrometer:micrometer-core` from 1.17.0 to 1.17.1\n- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)\n\nUpdates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1\n- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)\n\nUpdates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1\n- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)\n\nUpdates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1\n- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)\n\nUpdates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1\n- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)\n\nUpdates `io.micrometer:micrometer-tracing` from 1.7.0 to 1.7.1\n- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)\n\nUpdates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1\n- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)\n\nUpdates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1\n- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)\n\nUpdates `io.opentelemetry:opentelemetry-bom` from 1.64.0 to 1.66.0\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.64.0...v1.66.0)\n\nUpdates `org.apache.maven:apache-maven` from 3.9.14 to 3.10.0\n\n---\nupdated-dependencies:\n- dependency-name: org.conscrypt:conscrypt-openjdk-uber\n dependency-version: 2.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: com.kohlschutter.junixsocket:junixsocket-core\n dependency-version: 2.11.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: com.github.luben:zstd-jni\n dependency-version: 1.5.7-22\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-core\n dependency-version: 1.17.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-observation\n dependency-version: 1.17.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-registry-prometheus\n dependency-version: 1.17.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-observation\n dependency-version: 1.17.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-registry-prometheus\n dependency-version: 1.17.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing\n dependency-version: 1.7.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing-bridge-otel\n dependency-version: 1.7.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing-bridge-otel\n dependency-version: 1.7.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.66.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.apache.maven:apache-maven\n dependency-version: 3.10.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "18f2961e7804ee0a59322265aa1c8899baca784f", "tree": "6deb416f73865ffea91d06a2e613c3e0ec25c76d", "parents": [ "6681f287ddbce87d7db0afb6bca6e4338603a7e1" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 15:02:19 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 15:02:19 2026 +0200" }, "message": "Replaced System.out calls with logging in tests\n" }, { "commit": "6681f287ddbce87d7db0afb6bca6e4338603a7e1", "tree": "b99b894e9ee97b34abdbf2b69c4689969b66468b", "parents": [ "83af1261313578d7e61dad5f71c26f9f9b6164cc" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 14:54:15 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 14:54:15 2026 +0200" }, "message": "Upgraded maven-surefire-plugin to the version defined in HC Parent\n" }, { "commit": "83af1261313578d7e61dad5f71c26f9f9b6164cc", "tree": "a7eb40cbe0248f6f4cf0170c3065a0fb86fe3296", "parents": [ "e37a0e316132b83d0b68f517ac7d59a3553123e0" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 14:49:15 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Oct 10 14:49:15 2026 +0200" }, "message": "Upgraded Testcontainers to version 2.0.5\n" }, { "commit": "e37a0e316132b83d0b68f517ac7d59a3553123e0", "tree": "cabc064e87c23fb5ae96bd6f2dc07e4a3a0c14dd", "parents": [ "5a3138de57230d72463827393554ad9e6682c0ef" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 08 15:10:10 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Oct 08 15:38:53 2026 +0200" }, "message": "Use Mockito JUnit extension to wire tests with Mockito mocks\n" }, { "commit": "5a3138de57230d72463827393554ad9e6682c0ef", "tree": "d30168b2861abf688bcc60fad332a15d201e7923", "parents": [ "fd21b1b5a666728ccc83168b5e752407f127f98f" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Oct 06 14:10:35 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Oct 08 11:16:21 2026 +0200" }, "message": "SSE: Handle request header names case-insensitively\n" }, { "commit": "fd21b1b5a666728ccc83168b5e752407f127f98f", "tree": "825973313ed68829f38842b1731c2233cf83ef65", "parents": [ "07bed09c6e30c5afb29ee071254574552de8b6db" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Oct 06 13:54:17 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Oct 08 09:33:11 2026 +0200" }, "message": "SSE: Update Last-Event-ID independently of event dispatch\n" }, { "commit": "07bed09c6e30c5afb29ee071254574552de8b6db", "tree": "768379911c7405ed4ee38dc40536fca41df407b5", "parents": [ "4e5986977996c6e285f5e0ae2803850bbbb2d133" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Oct 06 12:19:40 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Oct 08 09:22:21 2026 +0200" }, "message": "SSE: Do not dispatch incomplete events at end of stream\n" }, { "commit": "4e5986977996c6e285f5e0ae2803850bbbb2d133", "tree": "b5fafdad903f11da242bdd7e2b7310fb09eb399b", "parents": [ "c8d231f1d6d6bcca3ceb6eb0673293397d0dac36" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 22 14:19:15 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Wed Oct 07 12:44:37 2026 +0200" }, "message": "HTTPCLIENT-2429: Improve support for custom transport layers\nExpose supported custom transport extension points for classic and async clients.\n" }, { "commit": "c8d231f1d6d6bcca3ceb6eb0673293397d0dac36", "tree": "cbed594e33691cb568c17698e6fbd91dff22b5c9", "parents": [ "2e1320c2f4b0b62e45204bd47435187fff359fa9" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Wed Oct 07 09:47:52 2026 +0530" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Wed Oct 07 11:07:07 2026 +0200" }, "message": "route the first non-BOM byte through the CR/LF handling in ByteSseEntityConsumer\n\nSigned-off-by: Javid Khan \u003cdxbjavid@gmail.com\u003e\n" }, { "commit": "2e1320c2f4b0b62e45204bd47435187fff359fa9", "tree": "72f3516133f519cf65a5fc187ced08e927446a2e", "parents": [ "036cdafd14b38983cd0c7da20e217a64557fcae6" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Tue Oct 06 01:13:33 2026 +0530" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Wed Oct 07 11:07:07 2026 +0200" }, "message": "treat a lone CR as an SSE line terminator\n" }, { "commit": "036cdafd14b38983cd0c7da20e217a64557fcae6", "tree": "070bba303e48678fea90c4a4485659021d883857", "parents": [ "90a7e77427f19fa20263b9fe4e05d2b117951239" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 13:23:34 2026 +0000" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Oct 04 16:49:19 2026 +0200" }, "message": "Bump actions/checkout from 5 to 7\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 5 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: \u00277\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "90a7e77427f19fa20263b9fe4e05d2b117951239", "tree": "906b1c17b97412e4d444f6f4f61f0575d3d6ab62", "parents": [ "8b64f599175165c91367a92b5e79640d5eda83c0" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Sep 27 15:51:13 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Oct 02 09:36:49 2026 +0200" }, "message": "Upgraded HC parent to version 15 / POM cleanup\n" }, { "commit": "8b64f599175165c91367a92b5e79640d5eda83c0", "tree": "6f1db528311e57c92b19630433a385ae669a8177", "parents": [ "b8e940682327e86e34c159e0683eee7ea2b15ab7" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Sep 28 17:59:50 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Sep 28 17:59:50 2026 +0200" }, "message": "Removed the initial implementation of #evictIdleConnections in H2AsyncClientBuilder as it can cause premature termination of connections with multiplexing message exchanges; added #evictExpiredConnections to proactively evict expired connections from the connection pool\n" }, { "commit": "b8e940682327e86e34c159e0683eee7ea2b15ab7", "tree": "86c5c892838d88199cac333d7315b63b3bbc2baf", "parents": [ "7d62d7587581205ea5d415367592a1eecb54134b" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Sep 28 13:11:42 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Sep 28 13:42:56 2026 +0200" }, "message": "Disabled the keep-alive strategy for HTTP/2 connections as it contradicts RFC 9113, section 8.2.2. \"Connection-Specific Header Fields\"; updated relevant javadocs\n" }, { "commit": "7d62d7587581205ea5d415367592a1eecb54134b", "tree": "4ddb4a407cd5783fae537de7af3016ffbe02a177", "parents": [ "a2f45e9223d1cf018e4cb202193a03b59b3feab7" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Sep 27 15:59:07 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Sep 27 15:59:07 2026 +0200" }, "message": "Disable javadoc missing tag warning\n" }, { "commit": "a2f45e9223d1cf018e4cb202193a03b59b3feab7", "tree": "11d1a9cc8e2fe13aa057cb6ca83d6302e8737f53", "parents": [ "3423165b87f513c51c9a3a0219eb167657a0bb88" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 26 12:14:39 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 26 12:18:42 2026 +0200" }, "message": "Async exchange handlers to support #outputAborted event\n" }, { "commit": "3423165b87f513c51c9a3a0219eb167657a0bb88", "tree": "327aa592da88ca6c47de295add32afc6cdf9f419", "parents": [ "0e9150389d8a466a1be7dd9e92d9d9c7e8bd1947" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 12 17:14:30 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 26 12:18:42 2026 +0200" }, "message": "Auth challenge parsing improvements\n" }, { "commit": "0e9150389d8a466a1be7dd9e92d9d9c7e8bd1947", "tree": "a478fca4a48b11b9498fc08fb99f9f4b2927d97b", "parents": [ "7cded0c43929e6e989ecb966c875646a5fd8a8e7" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 12 16:07:07 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Sep 24 12:17:10 2026 +0200" }, "message": "Upgraded HttpCore to version 5.5-beta3\n" }, { "commit": "7cded0c43929e6e989ecb966c875646a5fd8a8e7", "tree": "eadcb709a4f2f562432a664d440eddf3db8e304f", "parents": [ "20ea5c4781c2605e9976f57976e867dde2d5f347" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Sep 18 10:24:17 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Mon Sep 21 15:30:50 2026 +0200" }, "message": "HTTPCLIENT-2434 Deprecate idle connection eviction\n\nRecommend connection keep-alive management and expired connection eviction instead.\n" }, { "commit": "20ea5c4781c2605e9976f57976e867dde2d5f347", "tree": "0f00001fedd82c3d01e126f4741b9d8afec39485", "parents": [ "e8d667c9ce2a0f00ee4945b3ec48d37ab02a0f1c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Aug 01 13:22:23 2026 +0000" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Sep 21 14:38:40 2026 +0200" }, "message": "Bump actions/setup-java from 5 to 5.6.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/v5...v5.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 5.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "e8d667c9ce2a0f00ee4945b3ec48d37ab02a0f1c", "tree": "3fa854ecbf6977fae472cf349163c455b0f88c5c", "parents": [ "636993fbe9db26f9a1c4aab31480768e263d7197" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Oct 02 14:10:23 2025 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Mon Sep 21 14:02:38 2026 +0200" }, "message": "Add RFC 7639 ALPN header codec; emit ALPN on CONNECT tunnels\n\nEncode protocol IDs with core\u0027s PercentCodec.HTTP_TOKEN (canonical RFC 7230 tchar form, uppercase hex) and decode strictly, rejecting malformed percent-encoding with ProtocolException.\n\nThe advertised protocol set is derived from the target\u0027s HttpVersionPolicy. The connection manager resolves the effective TlsConfig and publishes the policy on HttpClientContext before the connection is established; ConnectExec and AsyncConnectExec read it back and, on secure CONNECT tunnels, advertise the same protocols the tunnel\u0027s TLS layer will offer, so the header cannot diverge from the protocol negotiated inside the tunnel. Interceptors fall back to NEGOTIATE when no policy is present on the context.\n" }, { "commit": "636993fbe9db26f9a1c4aab31480768e263d7197", "tree": "fdc7a10e7b13c2867ab5de106f25260f75d1acc1", "parents": [ "e750f52dd9beedb34d039a2212cb5c05b6183640" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Sep 19 11:55:19 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Mon Sep 21 13:45:09 2026 +0200" }, "message": "Preserve idle timeout when copying connection configuration\n" }, { "commit": "e750f52dd9beedb34d039a2212cb5c05b6183640", "tree": "7d5ef8052b31e5e2f9a15c4d7068eb12108af0a9", "parents": [ "3849cf963f02dcff6627269782f674e88cd9053f" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Sep 19 11:17:12 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Sep 20 16:46:03 2026 +0200" }, "message": "Simplifcation of the message exchange handling logic in the main async exec interceptors\n" }, { "commit": "3849cf963f02dcff6627269782f674e88cd9053f", "tree": "7f21ebedfd1077e231ef62fde688cb3a2a765330", "parents": [ "94be1b372437b39be7b965165295386ad634fe4b" ], "author": { "name": "Matthias Kurz", "email": "m.kurz@irregular.at", "time": "Thu Sep 17 13:54:10 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Sep 18 16:47:07 2026 +0200" }, "message": "HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay\n\nWait for both sides of an HTTP/2 exchange to terminate before completing it, including graceful request termination after RST_STREAM(NO_ERROR).\n\nCover authentication replay with a large file and with a body-less 401 followed by a graceful stream reset.\n" }, { "commit": "94be1b372437b39be7b965165295386ad634fe4b", "tree": "86c41ec2d270be75949d10e13341288cf2e86763", "parents": [ "6579979823c06ba3716ac8398353fc613bb4e42d" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Sep 18 11:20:18 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Sep 18 11:52:52 2026 +0200" }, "message": "Improved connection expiry and eviction example\n" }, { "commit": "6579979823c06ba3716ac8398353fc613bb4e42d", "tree": "0c89422eb65df67be1c3caac32574b9a2d7404c4", "parents": [ "c7c49edd11167ad51342f87005586d3b3509ea67" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Sep 17 15:53:20 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Sep 17 15:53:20 2026 +0200" }, "message": "Moved tls handshake timeout integration tests to \u0027time-out\u0027 to be executed manually during release preparation due to those tests failing intermittently in CI\n" }, { "commit": "c7c49edd11167ad51342f87005586d3b3509ea67", "tree": "0298c049d6806ede0dcd0959ea9cf2c090f995fc", "parents": [ "be07c77297576b08bc01bb93789eca6f5f9bf850" ], "author": { "name": "Victor Alekseev", "email": "krocodl@gmail.com", "time": "Wed Sep 16 18:13:50 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Sep 16 18:18:40 2026 +0200" }, "message": "HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() when disconnectEndpoint() throws (#883)\n" }, { "commit": "be07c77297576b08bc01bb93789eca6f5f9bf850", "tree": "8c296891898d586742e2fb4ad2be6b458b8efca8", "parents": [ "dd74a8375dc3c02b08c606af5535154a8a043d3b" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 22 08:45:29 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Wed Aug 26 19:22:25 2026 +0200" }, "message": "Use Brotli4jLoader.isAvailable() instead of relying on class presence.\n" }, { "commit": "dd74a8375dc3c02b08c606af5535154a8a043d3b", "tree": "36a5a474f2b111d0a3708447301a340e818c5881", "parents": [ "86c313b2876a8796ab696a2aab546ba4fe6ac227" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Mon Aug 24 14:13:18 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 10:43:18 2026 +0200" }, "message": "decode punycode public suffixes in PublicSuffixMatcher.verify (#876)" }, { "commit": "86c313b2876a8796ab696a2aab546ba4fe6ac227", "tree": "563c838a3338a5d203e4ceba551e19599ba47c6e", "parents": [ "a01e51d56e913f5308248269824d1eeba61958d7" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Aug 21 08:47:27 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 22 08:45:44 2026 +0200" }, "message": "Fix Brotli async client example\n" }, { "commit": "a01e51d56e913f5308248269824d1eeba61958d7", "tree": "59fdcc34541706b0c3840e2240cbf8d908bd8f1a", "parents": [ "0bd48955f577f45a0b483de0ba725348c137842a" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Aug 21 08:40:20 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 22 08:45:44 2026 +0200" }, "message": "Fix Brotli decompression hang with large input buffers\n" }, { "commit": "0bd48955f577f45a0b483de0ba725348c137842a", "tree": "33080333e250800e18440a98bc1ecaf307db1437", "parents": [ "83386f219fb4c10e9d6c506ae491c53b9a7afc63" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Aug 18 18:33:46 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Aug 21 07:15:21 2026 +0200" }, "message": "Add a model and parser for the RFC 9209 Proxy-Status response field\n\nAdds a typed model of a single Proxy-Status member together with the standardized proxy error\nvalues, and a parser that reads the Proxy-Status response field according to the RFC 9209 and RFC\n8941 Structured Fields grammar. The model is immutable and preserves the Structured Fields value\ntypes; the parser validates the standardized and error-specific parameter types and ignores\nunrelated extension parameters.\n\nThe code lives in the client for now and provides the field model and parsing only; it is not\nintegrated with retries, exceptions, execution policy or telemetry.\n" }, { "commit": "83386f219fb4c10e9d6c506ae491c53b9a7afc63", "tree": "e0661995f7213107e9fd28f1e21a69f9cecffd41", "parents": [ "6ed50d9fba44c0608a9433fecd8a81e5cac56b26" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Aug 11 20:20:50 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Aug 18 18:27:30 2026 +0200" }, "message": "RFC 9211: optional Cache-Status response header\n\nAdds optional support for the RFC 9211 Cache-Status response header. When enabled through\nCacheConfig the caching executors record how each exchange was handled in a per-exchange CacheStatus,\nand CacheStatusHeaderGenerator serialises it into the Cache-Status header.\n\nCacheStatus is the single source of truth for the disposition of an exchange. The coarse\nCacheResponseStatus exposed on HttpCacheContext is now derived from it on the fly instead of being\nstored as a separate attribute, so the two can no longer drift apart. A locally generated response\nand a stale response served by the module under stale-while-revalidate or stale-if-error map to a\nmodule response, an internal error that falls back to the origin maps to a failure, a successful\nrevalidation of a stored entry maps to validated, a response served from a stored entry to a hit,\nand any other forwarded response to a miss.\n" }, { "commit": "6ed50d9fba44c0608a9433fecd8a81e5cac56b26", "tree": "693ee47d1375b5c944b985811d0f1ccf04fef42d", "parents": [ "8b901f88de587e17d742c502ff253e318f49d285" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Mon Aug 17 00:40:08 2026 +0530" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Aug 17 19:46:25 2026 +0200" }, "message": "treat malformed delta-seconds as absent in deltaSeconds\n" }, { "commit": "8b901f88de587e17d742c502ff253e318f49d285", "tree": "040de7e178ab1e9f01104a688164065a7d0b8bed", "parents": [ "3b2aeb10f6998bf4fc1d91608a88cadad04c13f1" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 16 15:52:30 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 16 15:53:02 2026 +0200" }, "message": "Moved timeout and stale connection related integration tests into separate groups to be executed manually during release preparation due to those tests failing intermittently in CI\n" }, { "commit": "3b2aeb10f6998bf4fc1d91608a88cadad04c13f1", "tree": "59175fff24219f1a844bddbe1227da3b8755532a", "parents": [ "9128f74cc3fef7f1591597b5c44c79abaf544b51" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 16 12:08:29 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 16 12:36:41 2026 +0200" }, "message": "Header parsing optimization in cookie, authentication and caching protocol code\n" }, { "commit": "9128f74cc3fef7f1591597b5c44c79abaf544b51", "tree": "6adcd93b7249c28340b6328552dfe336876817f7", "parents": [ "1ce37cb670ebe8ee0036cfc3e78b0522b9a58931" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Aug 14 10:37:52 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Aug 15 12:32:39 2026 +0200" }, "message": "Corrected report declarations of new project modules\n" }, { "commit": "1ce37cb670ebe8ee0036cfc3e78b0522b9a58931", "tree": "23cd8e988678e1c73a3ae226befd7ace2bb492a2", "parents": [ "ff526805eeebd56a0470805de88df2ce5a4c2b4d" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Aug 13 20:09:07 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Aug 15 12:26:36 2026 +0200" }, "message": "Deprecate the never-cache-responses-with-query options and make them opt-in\n\nAssigning heuristic freshness to a response with a query component is no longer prohibited by the HTTP caching specification. ResponseCachingPolicy now consults the never-cache-query options only when they are explicitly enabled, so in the default configuration a response with a query component is cached like any other. isNeverCacheHTTP10ResponsesWithQuery, isNeverCacheHTTP11ResponsesWithQuery and their builder setters are deprecated, as is HTTP/1.0 response caching. An origin that does not want a response cached should send an explicit directive such as Cache-Control: no-cache.\n" }, { "commit": "ff526805eeebd56a0470805de88df2ce5a4c2b4d", "tree": "be230d4ae11f3c5fc9f39574270e212d2471966d", "parents": [ "038378f0a6a8a228d8b2cee45f857bb16a1bf9ff" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 15 11:31:26 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Aug 15 12:23:34 2026 +0200" }, "message": "Add WebSocket RFCs to the standards compliance list\n\nList RFC 6455 (WebSocket), RFC 7692 (permessage-deflate) and RFC 8441 (WebSockets over HTTP/2) covered by the httpclient5-websocket module.\n" }, { "commit": "038378f0a6a8a228d8b2cee45f857bb16a1bf9ff", "tree": "61d093db1b9c612fa03f3b1e4245c5fa82ed292a", "parents": [ "cb0062c97b85910f0108fe536bf1f4ec23ba19a2" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Aug 13 11:40:25 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Aug 15 12:23:34 2026 +0200" }, "message": "Verify the server authentication (rspauth) provided in the Digest Authentication-Info response per RFC 7616\n\nThe client recomputes rspauth from the session state of the last request and compares it to the value returned by the server in constant time, so mutual authentication no longer depends solely on the request being accepted. For qop\u003dauth the cnonce and nc echoed by the server are required and must match the values used for that request, and an Authentication-Info that states qop\u003dauth must carry rspauth, cnonce and nc. Verification is confined to qop\u003dauth; the rspauth of qop\u003dauth-int hashes the response body, which is not available to the scheme. An Authentication-Info without rspauth remains acceptable unless the server states qop\u003dauth.\n\nAuthentication-Info is a list field that a server may split across multiple field lines; AuthenticationHandler now combines the parameters from all of them into a single challenge so the scheme sees the complete set rather than only the last line.\n" }, { "commit": "cb0062c97b85910f0108fe536bf1f4ec23ba19a2", "tree": "75c72d8fc5987995328c8b3c7909262d1f69859d", "parents": [ "976586763b3300b79654f0e44622bbb93b94cbb4" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Aug 14 11:42:43 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Aug 14 11:43:12 2026 +0200" }, "message": "Removed invalid request version check from ResponseCachingPolicy\n" }, { "commit": "976586763b3300b79654f0e44622bbb93b94cbb4", "tree": "cc91e6dff4299c4009248891eb5512f9c817711a", "parents": [ "dbb9e8627f9e21c9e2c5fac5b19db1b9645e010c" ], "author": { "name": "Jeremie Bolduc", "email": "16137441+Jouramie@users.noreply.github.com", "time": "Thu Aug 13 14:36:30 2026 -0400" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Aug 14 11:11:01 2026 +0200" }, "message": "Fix resource leaking on error in AsyncCachingExec\n" }, { "commit": "dbb9e8627f9e21c9e2c5fac5b19db1b9645e010c", "tree": "da94044834a6eb0aaec5bffa0fb376f0e4eb1e09", "parents": [ "a890ec765d970cce3d7d2308ecacc1b16158f9f0" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Aug 13 11:13:55 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Aug 13 11:13:55 2026 +0200" }, "message": "Upgraded HttpClient version to 5.7-alpha2-SNAPSHOT" }, { "commit": "a890ec765d970cce3d7d2308ecacc1b16158f9f0", "tree": "e94a8852dfedfad20cc7605997ec629c7b78f0cd", "parents": [ "4dae8da4a365f639e42fea84822285f345be7755" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Aug 06 10:11:55 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Aug 06 10:25:17 2026 +0200" }, "message": "Corrects application of SSL parameters in the async TLS upgrade method\n" }, { "commit": "4dae8da4a365f639e42fea84822285f345be7755", "tree": "44fe3e583ba7ded99faf936ebaebf31e4d824923", "parents": [ "c28479e73d0aaaea70249e97c43a899e45564e31" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 02 15:39:27 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 02 15:39:27 2026 +0200" }, "message": "Javadoc fixes\n" }, { "commit": "c28479e73d0aaaea70249e97c43a899e45564e31", "tree": "bcd5e293e2d912eafc8a2f73bfd33ee25d1b6401", "parents": [ "e43c2901136b77be6ae02051183aab5fbd650eb2" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 02 14:23:31 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Aug 02 14:37:34 2026 +0200" }, "message": "Integration tests failing intermittently in the CI environment moved to \u0027slow\u0027 group\n" }, { "commit": "e43c2901136b77be6ae02051183aab5fbd650eb2", "tree": "f11ba495b53532b6651c3fc56d96a74ae09d338a", "parents": [ "e23b8e77568d4dca516d81d36be6c7c53bc1c848" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 01 09:29:36 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sun Aug 02 11:59:44 2026 +0200" }, "message": "Mark the SSE and WebSocket modules as experimental\n\nAdded an experimental note to the top-level package documentation of the httpclient5-sse and\nhttpclient5-websocket modules. Both modules expose a large API surface that is not yet stable;\nthe note states that their public API may change in an incompatible way, or be removed, in a\nfuture release. This is consistent with the japicmp binary and source compatibility checks\nalready being skipped for both modules throughout the 5.7 release series.\n" }, { "commit": "e23b8e77568d4dca516d81d36be6c7c53bc1c848", "tree": "0c4f06ca7b2d9fb583d6669ac01daac79c4d981f", "parents": [ "3b4ff29208b307f141a1989cbf038941d445a72e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Sat Aug 01 07:00:56 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Aug 01 07:00:56 2026 -0400" }, "message": "Revise RELEASE_NOTES for version 5.7\n\nUpdated notable changes and compatibility notes for version 5.7, including experimental features and improvements." }, { "commit": "3b4ff29208b307f141a1989cbf038941d445a72e", "tree": "73abf092d1348c5c4edcb0a76e4e35fbbfc7aef7", "parents": [ "64916ee6560b7e8b53548b47e171ee792e50eec9" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Aug 01 09:25:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Aug 01 09:25:31 2026 +0200" }, "message": "Add Experimental. to SSE and WebSocket" }, { "commit": "64916ee6560b7e8b53548b47e171ee792e50eec9", "tree": "1647b6c1b104c9584a1fa8497eb07216deb96d6b", "parents": [ "ab543f1853f0f7233bd8fbdf8771e6ddea702f6d" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 31 19:00:43 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 31 19:00:43 2026 +0200" }, "message": "Updated release notes for HttpClient 5.7-alpha1\n" }, { "commit": "ab543f1853f0f7233bd8fbdf8771e6ddea702f6d", "tree": "4e01596277d6f70f74c47723513f38ae2bdc6fd9", "parents": [ "920be79d1573a79487a48b9c8d29fe6e2d9fee5d" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 31 16:34:04 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 31 16:35:41 2026 +0200" }, "message": "Enable multiplex message exchanges over active HTTP/2 connections\n" }, { "commit": "920be79d1573a79487a48b9c8d29fe6e2d9fee5d", "tree": "9b27c87e55d30f648e6679505476a609a44d7099", "parents": [ "23a70f93fa95da83e679ef825a529bed88506031" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sun Jul 12 14:50:02 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Jul 28 18:07:28 2026 +0200" }, "message": "Hardened WebSocket transport and permessage-deflate for RFC 6455/7692 conformance\n\nFixed the client permessage-deflate encoder, which stripped the flush trailer on every\nfragment and could truncate a SYNC_FLUSH, so a compressed message split across frames now\ndecodes, and an empty final fragment is encoded as a single 0x00 octet; the frame writer\nderives the masking key from SecureRandom. The client no longer offers client_max_window_bits,\nsince the JDK Deflater cannot honour a reduced window, and rejects a handshake response that\nechoes it. The session engine fails the connection on RSV1 set on a control frame, no longer\ndelivers a truncated message after a 1009 close, and surfaces a selection key cancelled during\nshutdown as an I/O error on write so the engine takes its close path instead of retaining the\nframe as back-pressure.\n\nExtension negotiation on the server is stricter. Offers are parsed from every\nSec-WebSocket-Extensions field and combined as RFC 6455 requires, so a client\u0027s fallback offer\nin a later field is still examined; a parameter repeated within an offer drops that offer; and\nthe permessage-deflate factory accepts only recognised parameters with well-formed values, the\nno-context-takeover parameters carrying no value and the window-bits parameters being exactly\n15, the only size the JDK Deflater supports. A given extension name is accepted only once, and\nan unacceptable offer is declined rather than failing the handshake.\n\nOn the HTTP/2 server the handler advertises a bounded inbound flow-control window and bounds\nthe outbound queue by a byte budget, splitting large writes into chunks and signalling the\nreactor after each so a write larger than the budget cannot deadlock; the frame reader rejects\na 64-bit length with the most significant bit set, the frame writer enforces the 125-byte\ncontrol frame limit and truncates the CLOSE reason, and the processor fails a data frame\nreceived in the middle of a fragmented message. The HTTP/2 client accepts any 2xx handshake\nresponse.\n\nBoth permessage-deflate implementations release their Deflater and Inflater when the session\nends. The extension chains close every codec they hold even if one of them fails, the\nnegotiation closes each extension exactly once, and the session engine coordinates the encoder\nand decoder close with try/finally so a failure in one still releases the other.\n" }, { "commit": "23a70f93fa95da83e679ef825a529bed88506031", "tree": "c3a668c441d5cc5786763b492c8c803b5e7d23af", "parents": [ "c84facd020dccbe5644a8a1b50e18d84bc88da87" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Tue Jul 28 12:23:19 2026 +0530" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 28 10:55:30 2026 +0200" }, "message": "reject control characters in bearer token in BearerScheme\n" }, { "commit": "c84facd020dccbe5644a8a1b50e18d84bc88da87", "tree": "71d797b786daa9f14bc16730e5129380f5c15afd", "parents": [ "b1c4b2086c59c87ed58e1a0790d49b34a9eb4ac7" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 28 10:34:57 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 28 10:34:57 2026 +0200" }, "message": "Removed racy assert\n" }, { "commit": "b1c4b2086c59c87ed58e1a0790d49b34a9eb4ac7", "tree": "48e386572ca73b718c78e9691d6b99a4cef39784", "parents": [ "38e5063b5bc3de494413581e27063a8c89cc224b" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Jul 27 10:21:23 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Jul 27 10:23:13 2026 +0200" }, "message": "Disabled reactive HEAD request integration tests failing intermittently with CI build server\n" }, { "commit": "38e5063b5bc3de494413581e27063a8c89cc224b", "tree": "c8206d358a8dec1683c276e5013c38fd9767ac62", "parents": [ "c4eb7e5a4fa095c334391138d0462c9674d99984" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Jul 27 10:20:36 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Mon Jul 27 10:23:09 2026 +0200" }, "message": "Enabled H2 response timeout integration tests\n" }, { "commit": "c4eb7e5a4fa095c334391138d0462c9674d99984", "tree": "d1451accc4cbfd8b8393d8b84f9970a05eef4321", "parents": [ "a4e525dd85fdbcb9e6f062180c34ff7b58a4fa48" ], "author": { "name": "hunghhdev", "email": "hunghh.dev@gmail.com", "time": "Sun Jul 26 23:53:14 2026 +0700" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Jul 26 18:53:14 2026 +0200" }, "message": "Extended HttpCacheEntry and related classes to store the enclosed request body (#859)" }, { "commit": "a4e525dd85fdbcb9e6f062180c34ff7b58a4fa48", "tree": "12dd3bd9607ff7771b5c221cdd5faec377ce5ce5", "parents": [ "88c62e7cfc680ad83096f0165c018272abd28c4b" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:47:59 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 26 18:28:57 2026 +0200" }, "message": "Upgraded Jakarta REST client module to java 17; upgraded jakarta.ws.rs-api to version 4.0.0\n" }, { "commit": "88c62e7cfc680ad83096f0165c018272abd28c4b", "tree": "42ac1591072fe422f9298cc1e1a92d9df5778496", "parents": [ "7cb189efb48388e5be99498bd6fa0e19008a6041" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Jul 23 19:32:26 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Jul 25 12:42:55 2026 +0200" }, "message": "HTTPCLIENT-2428: Scale reactor capacity in inflating AsyncDataConsumers to match decompressed output\n\nInflating consumers now request proportionally fewer compressed bytes than the downstream consumer\u0027s advertised (decompressed) capacity, so decompression no longer overshoots it; InflatingBrotliDataConsumer also stops overriding the downstream capacity with Integer.MAX_VALUE.\n" }, { "commit": "7cb189efb48388e5be99498bd6fa0e19008a6041", "tree": "a89912d3191ac2f324bcc22467fcf1b64afeb4f7", "parents": [ "9816640dd004ebf8e122c32f000ed4d413c2d7ab" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Jul 24 14:19:58 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Jul 25 12:42:40 2026 +0200" }, "message": "Exclude httpclient5-jakarta-rest-client from the reactor on toolchains below its target Java version\n\nReplaces the module\u0027s skip-on-java8 build-skip profile with a reactor profile activated by !hc.jakarta-rest-client.skip, with CI setting -Dhc.jakarta-rest-client.skip on the Java 8 row. Mirrors the httpcore5-jackson3 handling in HttpCore for cross-project consistency and scales to the module requiring Java 17 once upgraded to httpcore5-jackson3.\n" }, { "commit": "9816640dd004ebf8e122c32f000ed4d413c2d7ab", "tree": "a7c2e147eb04fc3ecabd45045a14e601bfb9426d", "parents": [ "ebac9512f555c4a355cad3f59ef2db69b597cc97" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 24 07:27:31 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 24 07:35:16 2026 +0200" }, "message": "Increased test timeout to reduce the chance of test failure in CI\n" }, { "commit": "ebac9512f555c4a355cad3f59ef2db69b597cc97", "tree": "596d05a5f99259593e3db3f4ad4e1af90fc040fa", "parents": [ "b1defb3113331aa11eece29d4504778e6a326304" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 21 10:32:34 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Jul 23 10:59:16 2026 +0200" }, "message": "ContentCompressionExec fails to close the underlying response stream in case of an unexpected runtime or protocol exception\n" }, { "commit": "b1defb3113331aa11eece29d4504778e6a326304", "tree": "e6fe2759fe5a8fb780dff371b1715db523522c2b", "parents": [ "a50d07a22655e1c1739e49f16a53ecd1e6c50fb8" ], "author": { "name": "hunghhdev", "email": "hunghh.dev@gmail.com", "time": "Tue Jul 21 17:56:05 2026 +0700" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 21 14:44:33 2026 +0200" }, "message": "HTTP cache support for the QUERY method (RFC 10008) (#852)\n\n* HTTP cache support for the QUERY method (RFC 10008)\n\n* Do not buffer QUERY request content larger than 25 KB; require the enclosed entity to be repeatable\n" }, { "commit": "a50d07a22655e1c1739e49f16a53ecd1e6c50fb8", "tree": "38dccc3cefabb3c16ea3591f0e00b73e69f83cd2", "parents": [ "2d077f2a30aa5729662837f153ad7c532aa36f9c" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Sat Jul 18 15:47:01 2026 +0530" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Jul 21 11:46:27 2026 +0200" }, "message": "reject negative 64-bit payload length in WebSocketFrameReader\n" }, { "commit": "2d077f2a30aa5729662837f153ad7c532aa36f9c", "tree": "796b103fc00d98a9136d42ea1a469716bda829d3", "parents": [ "ad3320908d5b2a629d2c3a54f90b423be00a41f1" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Jul 14 15:36:13 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Tue Jul 21 10:56:33 2026 +0200" }, "message": "Do not store a response when the request specifies Cache-Control: no-store\n\nCentralize the decision in ResponseCachingPolicy and thread the parsed RequestCacheControl through the classic and async executors.\n" }, { "commit": "ad3320908d5b2a629d2c3a54f90b423be00a41f1", "tree": "a71a7b062c3dc1d57040772ea4420be9e79d5f1e", "parents": [ "c5bce183828e51affbf481bddf00afb05652dd7d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Jul 19 10:37:22 2026 +0000" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 12:46:30 2026 +0200" }, "message": "Bump the all group across 1 directory with 16 updates\n\nBumps the all group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.apache.logging.log4j:log4j-slf4j-impl | `2.25.4` | `2.26.1` |\n| org.apache.logging.log4j:log4j-core | `2.25.4` | `2.26.1` |\n| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.5.2` | `2.6.1` |\n| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.14.3` | `5.14.4` |\n| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.14.3` | `5.14.4` |\n| commons-io:commons-io | `2.21.0` | `2.22.0` |\n| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-7` | `1.5.7-11` |\n| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.17.0` |\n| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.17.0` |\n| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.17.0` |\n| [io.micrometer:micrometer-tracing](https://github.com/micrometer-metrics/tracing) | `1.6.4` | `1.7.0` |\n| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing) | `1.6.4` | `1.7.0` |\n| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.60.1` | `1.64.0` |\n| [com.aayushatharva.brotli4j:brotli4j](https://github.com/hyperxpro/Brotli4j) | `1.22.0` | `1.23.0` |\n| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.2` | `3.6.3` |\n| [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) | `0.25.4` | `0.26.1` |\n\n\n\nUpdates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.4 to 2.26.1\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1\n\nUpdates `org.conscrypt:conscrypt-openjdk-uber` from 2.5.2 to 2.6.1\n- [Release notes](https://github.com/google/conscrypt/releases)\n- [Commits](https://github.com/google/conscrypt/compare/2.5.2...2.6.1)\n\nUpdates `org.junit:junit-bom` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\nUpdates `commons-io:commons-io` from 2.21.0 to 2.22.0\n\nUpdates `com.github.luben:zstd-jni` from 1.5.7-7 to 1.5.7-11\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-7...v1.5.7-11)\n\nUpdates `io.micrometer:micrometer-core` from 1.16.4 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.17.0)\n\nUpdates `io.micrometer:micrometer-observation` from 1.16.4 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.17.0)\n\nUpdates `io.micrometer:micrometer-registry-prometheus` from 1.16.4 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.17.0)\n\nUpdates `io.micrometer:micrometer-observation` from 1.16.4 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.17.0)\n\nUpdates `io.micrometer:micrometer-registry-prometheus` from 1.16.4 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.17.0)\n\nUpdates `io.micrometer:micrometer-tracing` from 1.6.4 to 1.7.0\n- [Release notes](https://github.com/micrometer-metrics/tracing/releases)\n- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.6.4...v1.7.0)\n\nUpdates `io.micrometer:micrometer-tracing-bridge-otel` from 1.6.4 to 1.7.0\n- [Release notes](https://github.com/micrometer-metrics/tracing/releases)\n- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.6.4...v1.7.0)\n\nUpdates `io.micrometer:micrometer-tracing-bridge-otel` from 1.6.4 to 1.7.0\n- [Release notes](https://github.com/micrometer-metrics/tracing/releases)\n- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.6.4...v1.7.0)\n\nUpdates `io.opentelemetry:opentelemetry-bom` from 1.60.1 to 1.64.0\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.60.1...v1.64.0)\n\nUpdates `com.aayushatharva.brotli4j:brotli4j` from 1.22.0 to 1.23.0\n- [Release notes](https://github.com/hyperxpro/Brotli4j/releases)\n- [Commits](https://github.com/hyperxpro/Brotli4j/compare/v1.22.0...v1.23.0)\n\nUpdates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.2 to 3.6.3\n- [Release notes](https://github.com/apache/maven-enforcer/releases)\n- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)\n\nUpdates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.25.4 to 0.26.1\n- [Release notes](https://github.com/siom79/japicmp/releases)\n- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)\n- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.25.4...japicmp-base-0.26.1)\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.conscrypt:conscrypt-openjdk-uber\n dependency-version: 2.6.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.junit:junit-bom\n dependency-version: 5.14.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n dependency-version: 5.14.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: commons-io:commons-io\n dependency-version: 2.22.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: com.github.luben:zstd-jni\n dependency-version: 1.5.7-11\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-core\n dependency-version: 1.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-observation\n dependency-version: 1.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-registry-prometheus\n dependency-version: 1.17.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-observation\n dependency-version: 1.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-registry-prometheus\n dependency-version: 1.17.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing\n dependency-version: 1.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing-bridge-otel\n dependency-version: 1.7.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.micrometer:micrometer-tracing-bridge-otel\n dependency-version: 1.7.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.64.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: com.aayushatharva.brotli4j:brotli4j\n dependency-version: 1.23.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin\n dependency-version: 3.6.3\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: all\n- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin\n dependency-version: 0.26.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: all\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n dependency-version: 5.14.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: all\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "c5bce183828e51affbf481bddf00afb05652dd7d", "tree": "40d7ac48f4c391db450e7f1b57f50338bfb2c764", "parents": [ "e7b2407c96fb2bc3c8f4e0552c96a2bd55ddb563" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:37:58 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:38:42 2026 +0200" }, "message": "Removed explicit depenedency on jackson-databind\n" }, { "commit": "e7b2407c96fb2bc3c8f4e0552c96a2bd55ddb563", "tree": "dadad76f82a3eaafcce0f3b8a450deb11c2f86c8", "parents": [ "a9f86cee5fb595a166e8af121c4cd8b542bc14bf" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:33:45 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:38:42 2026 +0200" }, "message": "Removed explicit plugin versions from project modules\n" }, { "commit": "a9f86cee5fb595a166e8af121c4cd8b542bc14bf", "tree": "06e650d46e62e96a43f1ac1670de963bb456d999", "parents": [ "66b541b8cd7da3f061da496500a22b9ac65a8916" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 02 16:19:55 2026 +0000" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 19 10:11:35 2026 +0200" }, "message": "Bump actions/dependency-review-action from 4 to 5\n\nBumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/dependency-review-action\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "66b541b8cd7da3f061da496500a22b9ac65a8916", "tree": "de43109847a090ef1d085a97ca5c0ce5119c7082", "parents": [ "1e18d54bb0fefbfd5c96d7f7fd7af3668d8e5df9" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 15:50:21 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sat Jul 18 09:02:14 2026 +0200" }, "message": "CacheKeyGenerator to support requests with an enclosed content body such as QUERY\n" }, { "commit": "1e18d54bb0fefbfd5c96d7f7fd7af3668d8e5df9", "tree": "3b17dc0c706737afa580f4f6f7c6f6e5f9b873ef", "parents": [ "43cb5c3c60c2fd3275ad8eab3d66a009449093c3" ], "author": { "name": "hunghh.dev", "email": "hunghh.dev@gmail.com", "time": "Thu Jul 16 22:40:05 2026 +0700" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 17 09:01:35 2026 +0200" }, "message": "Do not call the backend when an only-if-cached request cannot be served from cache (RFC 9111 5.2.1.7)\n" }, { "commit": "43cb5c3c60c2fd3275ad8eab3d66a009449093c3", "tree": "9cb5de0f4e92154313d294a09a7c5591212050ee", "parents": [ "7978d713719ec79673a0d51b50f25bdc793ad079" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Mon Jul 13 23:40:36 2026 +0530" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Jul 16 10:48:33 2026 +0200" }, "message": "compare scheme in redirect same-authority check\n" }, { "commit": "7978d713719ec79673a0d51b50f25bdc793ad079", "tree": "a5f5a8d57fc713ace489c3ab75bb21166dec7914", "parents": [ "b3676f3a78ac854451b19f29409cf62550f3c3e8" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Jul 16 09:14:51 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Thu Jul 16 09:14:51 2026 +0200" }, "message": "Corrected invalid comment in DefaultRedirectStrategy (no functional changes)\n" }, { "commit": "b3676f3a78ac854451b19f29409cf62550f3c3e8", "tree": "987162d48fc5041aad482423ac5443c2bf28c2fe", "parents": [ "3a46ebc02afa9e9530d1b289c9ac9c96e2aa7727" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 18:30:15 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 18:30:15 2026 +0200" }, "message": "HTTP cache protocol interceptors to route requests that cannot be correctly represented as SimpleHttpRequest directly to the request execution pipeline bypassing the caching layer\n" }, { "commit": "3a46ebc02afa9e9530d1b289c9ac9c96e2aa7727", "tree": "7e038f6e371f101813d893a8bed45e1294822bb9", "parents": [ "7f316c08dd447c88f4b151820523f884dac69db5" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Tue Jul 14 20:31:09 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 13:32:31 2026 +0200" }, "message": "HTTP cache protocol interceptors to use SimpleHttpRequest internally for cache operations; the use of self-contained request object should help simplify handling of requests with an enclosed entity such as QUERY\n" }, { "commit": "7f316c08dd447c88f4b151820523f884dac69db5", "tree": "ab168da9b33444322a866f85097b91df70b4dba4", "parents": [ "649c849ee431f8fc42515ea490d328bf2ab9cc21" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 12 13:34:59 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 13:25:56 2026 +0200" }, "message": "Moved cache request URI extraction and normalization methods to CacheSupport\n" }, { "commit": "649c849ee431f8fc42515ea490d328bf2ab9cc21", "tree": "25819a97cdce6693c45c28d120ca6b7e9ddfb632", "parents": [ "17079a128b9de9b43c7b96f650f36a7f714ef995" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Sun Jul 12 17:01:55 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 13:25:56 2026 +0200" }, "message": "Replaced deprecated method with an equivalent one from PathSegmentCodec\n" }, { "commit": "17079a128b9de9b43c7b96f650f36a7f714ef995", "tree": "5f783b8fa3f590b6285648d157c77691b09b624e", "parents": [ "62716cf44edead47a8ba82a71142e0e5e170c05e" ], "author": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 13:09:34 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 15 13:25:56 2026 +0200" }, "message": "Fixed push branch delcaration in maven.yml\n" }, { "commit": "62716cf44edead47a8ba82a71142e0e5e170c05e", "tree": "c92f38f2ee6c4de936f913943fd446b1d6d0f213", "parents": [ "da6f1b279d2795f72e81c6062386359927c96f3b" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Sat Jul 04 19:23:22 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Jul 10 13:33:44 2026 +0200" }, "message": "Added application/x-www-form-urlencoded support (request and response) to the Jakarta REST client backed by a collection of NameValuePair\n\nCorrects the @Consumes/@Produces content-type mapping to JAX-RS semantics (@Consumes \u003d request body, @Produces \u003d Accept).\n" }, { "commit": "da6f1b279d2795f72e81c6062386359927c96f3b", "tree": "1573278cdcb491a38fd5c8679ded4495825145e3", "parents": [ "06aac6df0b80c721e8025da15b4967f714409474" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Sun Jul 05 17:15:15 2026 +0530" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Wed Jul 08 11:28:38 2026 +0200" }, "message": "escape quotes and strip line breaks in rfc7578 multipart parameters\n" }, { "commit": "06aac6df0b80c721e8025da15b4967f714409474", "tree": "e1ef8e4ea3530aa87142d7e1a4855cfeba6a415d", "parents": [ "77641d68a7bd119abaf8a5d1ecac46626dfa4ec9" ], "author": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Thu Jul 02 09:38:01 2026 +0200" }, "committer": { "name": "Arturo Bernal", "email": "abernal@apache.org", "time": "Fri Jul 03 13:40:39 2026 +0200" }, "message": "HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content decoder\n" }, { "commit": "77641d68a7bd119abaf8a5d1ecac46626dfa4ec9", "tree": "d95de872c947fa37ece3ca17164179ceda3dd4ff", "parents": [ "0fde2d4ad446f600290dfbc060bd11c05775c3fd" ], "author": { "name": "Aurélien Pupier", "email": "apupier@ibm.com", "time": "Thu Jul 02 10:01:27 2026 +0200" }, "committer": { "name": "Oleg Kalnichevski", "email": "olegk@apache.org", "time": "Fri Jul 03 08:55:35 2026 +0200" }, "message": "Restrict trigger push branch for GitHub Workflow\n\nFeature branches rarely need their own CI runs: the code is already\ntested when a pull request is opened against a release branch. If the\npush trigger has no branch restriction and pull_request is also\nconfigured, every push to a branch with an open PR runs the workflow\ntwice: once for the push and once for the PR synchronisation.\n\nAlways give the push trigger an explicit list of branches: this stops\nbranches created from a release branch from inheriting its workflow\nruns.\n\nsee https://cwiki.apache.org/confluence/pages/viewpage.action?pageId\u003d430408443#GitHubActionsRecommendedPractices-Restrictthepushtriggertospecificbranches\n\nSigned-off-by: Aurélien Pupier \u003capupier@ibm.com\u003e" }, { "commit": "0fde2d4ad446f600290dfbc060bd11c05775c3fd", "tree": "5f4c90274f45c6e56aeff21fc64226703800d3e7", "parents": [ "585893d80953eca17a2fed7d035843f934c94c96" ], "author": { "name": "Mario Daniel Ruiz Saavedra", "email": "desiderantes93@gmail.com", "time": "Wed Jul 01 10:53:42 2026 -0300" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 15:53:42 2026 +0200" }, "message": "Add support for HTTP QUERY method (#840)" } ], "next": "585893d80953eca17a2fed7d035843f934c94c96" }