Changelog

This list is not intended to be all-encompassing - it will document major and breaking API changes with their rationale when appropriate:

v5.38.0.0 (uncut)

http4k-core : [Unlikely break] Split of RequestWithRoute into Request and RoutedMessage
http4k-realtime-core-* : Further rework on Sse and Ws to add functionalities missing (which are present in HTTP)

v5.37.1.1

http4k-format-* : [Fix 1225] Issue with Datastar module being required on the classpath. Causes NoClassDefFoundError.

v5.37.1.0

http4k-format-jackson : Fixed issue with Jackson pulling in a dependency that it didn’t need.

v5.37.0.0

http4k-* : Upgrade some dependency versions.
http4k-contract-* : Ability to model binary downloads in OpenAPI format. H/T @hektorKS
http4k-server-* : [Possible Break] The return type to sse.send() is now Sse instead of Unit
http4k-server-helidon : Add WebSocket support.
http4k-server-* : Fixes to SSE support for various servers.

v5.36.0.0

http4k-* : Upgrade some dependency versions.
http4k-realtime-core* : [Possible Break] SSE responses now contain a “handled” flag, so we can now fallback from SSE to HTTP if the route is unbound in SSE. SSE now also returns a 404 if the route is unbound.
http4k-server-helidon* : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
http4k-server-helidon* : [Possible Break] Throw exception if configured with Immediate stop mode as it’s not supported.
http4k-server-jetty* : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
http4k-server-jetty11* : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
http4k-server-netty* : [Possible Break] Throw exception if configured with Immediate stop mode as it’s not supported.
http4k-server-undertow* : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback

v5.35.5.0

http4k-* : Upgrade some dependency versions.
http4k-server-helidon* : Fixes to SSE support
http4k-server-helidon* : Throw exception if configured with Graceful stop mode as it’s not supported.
http4k-server-undertow* : Fixes to SSE support

v5.35.4.0

http4k-* : Upgrade some dependency versions.
http4k-server-helidon* : Add support for SSE. There are some limitations - see HelidonSseTest for details.
http4k-server-helidon* : Add support for SSE. There are some limitations - see HelidonSseTest for details.

v5.35.4.0

http4k-* : Upgrade some dependency versions.
http4k-server-helidon* : Add support for SSE. There are some limitations - see HeliconSseTest for details.
http4k-realtime-core* : Added Debugging for Websocket and SSE connections.
http4k-realtime-core* : Can now route SSE based on the method as well as the path.

v5.35.3.0

http4k-* : Upgrade some dependency versions.
http4k-gcp : [New module!] SDK support for GCP services.

v5.35.2.0

http4k-server-ktorcio : Upgrade to Ktor 3
http4k-server-ktornetty : Upgrade to Ktor 3
http4k-* : Upgrade some dependency versions.

v5.35.1.0

http4k-* : Upgrade some dependency versions.
http4k-* - [Fix again!] Missing dependencies in various modules
http4k-connect* - [Fix again!] Missing dependencies in various modules

v5.35.0.0

http4k-bom : Now includes all http4k-connect modules.

v5.34.1.0

http4k-* : Upgrade some dependency versions.

v5.34.0.0

http4k-core : [Unlikely break] Fix parsing of accept header. It may break direct usages of Accept class
http4k-core : Fix tracking of uri templates during in-memory request redirection
http4k-core : Make LocalCookie serialisable
http4k-testing-tracerbullet : Render other types of participant in PlantUML diagrams

v5.33.1.0

http4k-* : Upgrade some dependency versions.

v5.33.0.1

http4k-multipart* : [Fix #1188] MultiPartFormBody reads body into memory even when stream is available

v5.33.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 2.0.21
http4k-core : [Unlikely break] Adding start time to HTTP Transaction. Should be a simple fix if you are already creating your own for some reason. :) H/T @npryce
http4k-resilience4j : Add resilience4j timeout filter. H/T @ollieabbey
http4k-format-* : Adding ability to create BiDiMapping lens. H/T @potfur
http4k-server-apache - [Fix] Apache httpcomponents server throws when returning 204.

v5.32.4.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval Better diffing of failures in the IDE. @H/T @frednordin
http4k-core Gzip mixed compression mode H/T @IlyaNerd

v5.32.3.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval Support for binary comparisons using BinaryApprovalTest. @H/T @oharaandrew314

v5.32.2.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval : Fix withNameSuffix which wasn’t checking the content type when you overrode the name suffix.§

v5.32.1.0

http4k-core : Fix ordering of params on Body.webForm()
http4k-* : Tightened up nullable types and data class constructor visibility on various APIs

v5.32.0.0

http4k-* : Upgrade some dependency versions.
http4k-client-apache* : [Unlikely break]: Removed insecureApacheHttpClient() due to deprecated API.
http4k-webdriver* : [Unlikely break]: New Nullable types on WebDriver API led to tightening up our implementations.

v5.31.1.0

http4k-* : Upgrade some dependency versions.

v5.31.0.0

http4k-server-apache : [Possible Break] Upgrade httpcore to 5.3, which introduces stricter authority validation. This may break projects with custom version of ApacheServer.

v5.30.1.0

http4k-* : Upgrade some dependency versions.
http4k-client-jetty : [Fix] encoding of binary content in Jetty client. H/T @kwydler
http4k-client-* : All websocket implementations implement a unified WebsocketFactory. @H/T @oharaandrew314

v5.30.0.0

http4k-* : Upgrade some dependency versions.
http4k-multipart : [Fix] Further fixes to deletion of temporary files. Should fix memory leak. @H/T @oharaandrew314
http4k-server-jetty11 : [Fix] Received binary Websocket frames will no longer have their content coerced to text. @H/T @oharaandrew314
http4k-* : [Breaking] Make WsMessage mode explicit. @H/T @oharaandrew314

Migration Guide

Previously, a WsMessage was sent in either TEXT or BINARY mode based on whether the Body was a MemoryBody or StreamBody, respectively.

:warning: Warning: If you were using the primary constructor of WsMessage, you will need to explicitly provide a WsMessage.Mode to resolve the new compiler errors.

val textMessage = WsMessage(MemoryBody("hi"), WsMessage.Mode.Text)
val binaryMessage = WsMessage(StreamBody(imageStream), WsMessage.Mode.Binary)

:bulb: Note: If you were using the secondary WsMessage constructors, no changes are necessary.

val textMessage = WsMessage("hi") // Text like before
val binaryMessage = WsMessage(imageStream) // Binary like before

:bulb: Note: You now have full control over how content is sent.

// have a very long string?  Stream it!
val lotsOfText = WsMessage(StreamBody(imageStream), WsMessage.Mode.Text)

// have your binary buffered already?  Send it as is!
val bufferedBinary = WsMessage(MemoryBody(imageBytes), WsMessage.Mode.Binary)

v5.29.0.0

http4k-* : Upgrade some dependency versions including Kotlin to 2.0.20
http4k-security-oauth : [Breaking] OAuthProvider support for PKCE. This may break code because of the addition of an extra parameter in the OAuth construction. H/T @dkandalov
http4k-* : [New module] Azure SDK integration - use an http4k client with the official libraries
http4k-server-* : [Fix #1163] Request.version is always HTTP/1.1 for server requests, even when using HTTP/2.0

v5.28.1.0

http4k-* : Upgrade some dependency versions.
http4k-multipart : [Fix] Further fixes to deletion of temporary files. @H/T @oharaandrew314

v5.28.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Include Vary header on CORS responses. H/T @ollieabbey
http4k-multipart : [Fix Break] Multipart form files were all calling deleteOnExit() instead of being deleted when the Body is closed. Possible memory leak for long running processes. The fix MAY be a change of OS files-system usage if you are not closing your MultiPart form body. @H/T @oharaandrew314 for the report.

v5.27.0.0

http4k-* : Upgrade some dependency versions including Kotlin to 2.0.10
http4k-core New HTTP status codes. H/T @torfinnberset
http4k-core Added helper method for dealing with forms. H/T @tim-mortimer
http4k-core [Fix] Close backing DiskLocation when MultipartForm closed. H/T @oharaandrew314
http4k-testing-kotest Fix haveSetCookie and haveCookie to work when cookie isn’t present. H/T @bagguley

v5.26.1.0

http4k-* : Upgrade some dependency versions.
http4k-* : Fix transformer is lost when adding name suffix to Approver H/T @ilya.aliaksandrovich

v5.26.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Response caching extensions. H/T @ollieabbey
http4k-config : [New Module!] Extraction of typesafe configuration module from http4k-cloudnative.
http4k-cloudnative : [Breaking!] Repackaging of typesafe configuration module classes (org.http4k.cloudnative.env) to http4k-config (org.http4k.config). New imports are required.
http4k-contract : Adds ApiKeySecurity that identifies a consumer and makes it available for later use. H/T @dhs3000

v5.25.0.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-lambda* : [Breaking Fix] Incorrect lambda request context variable is passed - we now pass the incoming reqeust object instead of the converted http4k request. If you were using the LAMBDA_REQUEST_KEY, you can just use the request passed into the handler instead.

v5.24.1.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-lambda* : [Fix] AWS adapter throws on invalid URLs.
http4k-testing-webdriver : [Fix] Base path replacement logic for same-dir-path and dot-path URLs. H/T jweidler

v5.24.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Allow removal of all queries for a URI. H/T @dhs3000
http4k-format-kondor : Upgrade to new version of Kondor. H/T @uberto
http4k-testing-strikt [Break] The upgrade to the latest version drops Java <17 support. If you are still using Java 8, you will need to stick with the previous version of this module.

v5.23.0.0

http4k-* : Upgrade some dependency versions.
http4k-contract : [Approval test break] Addition of “nullable” field to every model property. This improves JSON output compatability with various tooling for generating types from the definitions.

v5.22.0.0

http4k-* : Upgrade some dependency versions.
http4k-format-dataframe : [Break] Move classes to alternative package to not clash with existing format objects.

v5.21.2.0

http4k-* : Upgrade some dependency versions.
http4k-format-dataframe : [New module] Support for KotlinX DataFrame.

v5.21.1.0

http4k-* : Upgrade some dependency versions.
http4k-multipart* : [Fix #1113] Disk-backed multipart form field data is now cleaned up when the body is closed, including the parent form directory.

v5.21.0.0

http4k-* : Upgrade some dependency versions including Kotlin to v2
http4k-testing-chaos : [Breaking] Changed Trigger to be a fun interface instead of a typealias. Should be no-op or a simple fix to the type.
http4k-core : [Possible Break] Renamed CachingFilters.Request/Responseto CachingFilters.CacheRequest/CacheResponse. If you have imports then they may break and need to be updated.

v5.20.0.0

http4k-* : Upgrade some dependency versions.
http4k-testing-chaos* : [Unlikely break]: remove Hamkrest dependency so that it does not appear randomly in your projects. If you were accidentally relying on this it will need to be re-added manually.

v5.19.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.24
http4k-core : Add support for the timesource typealias () -> Instant where a Clock is used. H/T @kwydler

v5.18.2.0

http4k-core : Add convenience methods to read bodies from HttpMessages as JSON/XML/CSV etc.. request.json<MyType>()

v5.18.1.0

http4k-core : Add convenience methods to set common headers to HTTP message.

v5.18.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : [Behaviour break] We now do not set the legacy Expires header in CachingFilters. Modern caches should use the Cache-Control header instead (max-age).

v5.17.0.0

http4k-* : Tweaks to make the K2 compiler happy
http4k : Added convenience methods to set the body of an HTTP message. The works for both standard body types and with automarshallers.
http4k-core : Fix request source in SunHttp. H/T @dkandalov
http4k-contract : Added top-level MetadataRetrieval to schema objects. H/T @BBB
http4k-format-* : [Unlikely break] rename with() functions on auto-marshallers to match content type, so you can now do req.json(myObj) and get the content type and body set in one go. Likewise for other content types

v5.16.2.0

http4k-* : Upgrade some dependency versions.

v5.16.1.0

http4k-* : Upgrade some dependency versions.
http4k-core: Add support for surrogate-key headers in EtagSupport. H/T @jason-annadani-springer

v5.16.0.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval : [Unlikely break] Rename typo in an ApprovalSource instance
http4k-testing-approval : Addition of optional suffix to the approval file name, and added ApprovalTransformer for varying the compared content from the InputStream
http4k-core : [Fix #1084] Route name without a beginning / works for everything except static resources. H/T @ArthurS1

v5.15.1.0

http4k-core : [Unlikely break] Change to Meta to remove default params
http4k-testing-approval : Add ability to add a suffix to the approval file name.

v5.15.0.0

http4k-core : [Unlikely break] Change to Meta to remove default params

v5.14.5.0

http4k-* : Upgrade some dependency versions.
http4k-core : Make Lenses support metadata passed through the LensBuilder construction methods. H/T @BBB, @ivanmoore @jack-bolles
http4k-testing-tracerbullet : Account for spans across traces with same spanId. H/T @IvanPavlov1995

v5.14.4.0

http4k-* : Upgrade some dependency versions.
http4k-testing-tracerbullet : Improve identification of actor for incoming traces.
http4k-client-helidon : Various fixes H/T @dkandalov

v5.14.2.0

http4k-* : Upgrade some dependency versions.
http4k-testing-tracerbullet : Improve identification of actor for incoming traces.
http4k-client-helidon : Various fixes H/T @dkandalov

v5.14.1.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Validator optimisation. H/T @dkandalov
http4k-testing-webdriver : Adding a space between method name and URI when naming spans H/T @ReinholdsB
http4k-testing-webdriver : Multipart forms in the webdriver, including sending files. H/T @gypsydave5
http4k-testing-webdriver : Fix bug in webdriver form submission + a method for relative Uri resolution. H/T @gypsydave5

v5.14.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.23
http4k-* : Static handlers serve an index.html file from a subdirectory. H/T @mbcltd

v5.13.9.0

http4k-* : Upgrade some dependency versions
http4k-contract : Implement Kondor Schema creator. H/T @tamj0rd2
http4k-cloudnative : Read environment properties from yaml resources. H/T @dzappold
http4k-webdriver : [Fix] Bug when submitting with inputs of type submit. H/T @gypsydave5
http4k-testing-approval : Allow adding a suffix to an approval test file name. H/T @becky-sequence

v5.13.8.0

http4k-* : Upgrade some dependency versions
http4k-format-kondor : Expose converterFor method. H/T @tamj0rd2

v5.13.7.0

http4k-* : Upgrade some dependency versions
http4k-contract : Allow user to provide schema creation implementation. H/T @tamj0rd2
http4k-core : [Fix #1053]: Add BiDiLensSpec defaulted with factory method
http4k-core : [Fix #1059]: Update kondor-json to 2.2.2. H/T @asadmanji

v5.13.6.1

http4k-core : FollowRedirects also sets port on redirect.

v5.13.6.0

http4k-* : Upgrade some dependency versions
http4k-serverless-lambda :[Fix #1057] Error when parsing AWS lambda event from S3 bucket
http4k-testing-webdriver :[Fix #1050] Http4kWebDriver does not work on Windows due to path issues. H/T @cmh-dev
http4k-core :[Fix #1055] Host header should contain host with port. H/T @obecker

v5.13.5.0

http4k-client-core : Ensure consistent content-length behaviour across clients
http4k-client-apache : Ensure consistent content-length behaviour across clients
http4k-client-apache4 : Ensure consistent content-length behaviour across clients
http4k-client-fuel : Ensure consistent content-length behaviour across clients
http4k-client-jetty : Ensure consistent content-length behaviour across clients

v5.13.4.1

http4k-* : Fix broken POM dependencies.

v5.13.4.0

http4k-* : Upgrade some dependency versions
http4k-contract : Support for data4k progressive data models with field metadata via delegate properties

v5.13.3.0

http4k-* : Upgrade some dependency versions
http4k-cloudnative* : Ability to override separator in Environment.

v5.13.2.0

http4k-* : Upgrade some dependency versions
http4k-contract* : [Fix] Enums do not pick up custom prefixes in model naming. H/T @ashcor for the tip-off!
http4k-opentelemetry* : [Fix] Fix to set HTTP_REQUEST_BODY_SIZE attribute in OpenTelemetryTracing. H/T @dkandalov
http4k-contract* : Added Canonical model-namer.

v5.13.1.0

http4k-* : Upgrade some dependency versions
http4k-client-helidon : [Fix #1037] Improve support for query parameters. H/T @franckrasolo

v5.13.0.1

http4k-testing-tracerbullet : [Fix] Mermaid sequence diagram generation was constantly changing by default editorconfig files and people committing with different IDE settings
http4k-server-jetty : [Fix #1023] Header values in quotes lose their quotes. H/T @efasel, @dhs3000

v5.13.0.0

http4k-format-jade4j : [Breaking] This module has been renamed due to the library Jade4J becoming Pug4J. Migration should be a no-op apart from switching the imported module, and renaming your templates from .jade to .pug. Please see Pug4j docs for anything else.
http4k-format-pug4j : [New module] Replacement for Jade4j

v5.12.2.1

http4k-webhooks : Move VerifyWebhookSignature filter to ServerFilters as it’s not for HTTP clients!

v5.12.2.0

http4k-* : Upgrade some dependency versions
http4k-core : [New module!] Support for the Standard Webhooks format
http4k-core [Fix #1022] For a request with matching if-none-match header the response lacks the etag header. H/T @efasel
http4k-core [Fix #1030] Maven POM for http4k-format-jackson-xml is invalid: jackson-dataformat-xml is missing a version

v5.12.1.0

http4k-* : Upgrade some dependency versions
http4k-core : Fix lens replacement of path parameter when there is a regular expression in the path segment
http4k-format-jackson : Added lens support for deserialising data4k containers directly from HTTP message bodies (via Body.json(::JsonNodeDataContainer)).toLens()

v5.12.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.22, and Jetty 12 (see below).
http4k-server-jetty - [Breaking] Upgrade to Jetty 12. This is a major rewrite of the Jetty engine and the API surface is incompatible with v11. If you are using vanilla Jetty backend then this is a NoOp replacement, otherwise fallback to using the new Jetty11 module and then plan migration accordingly. Massive H/T to H/T @FredNordin for the implementation upgrade.
http4k-server-jetty11 - [New Module!] Drop-in replacement module for custom Jetty11 users. Constructor is now called Jetty11() instead of Jetty(), so migration should be very simple. Other renames as required (using 11) to avoid API clashes in the http4k codebase.
http4k-aws : [Breaking] Tweaks to the signature of AwsPreSignRequests. Use AwsRequestPreSigner instead. H/T @oharaandrew314

v5.11.1.0

http4k-aws : Pre-sign AWS requests with the new AwsPreSignRequests class. H/T @oharaandrew314
http4k-serverless-lambda : [Fix #1013] Support multi value query parameters in ApiGatewayV2LambdaFunction ( http4k-serverless/lambda)

v5.11.0.0

http4k-* : Upgrade some dependency versions
http4k-core : [Unlikely Break: Fix #1011] Jackson does not honour serialisation of Enums when they are used as Map keys. The fix MAY break JSON serialisation (which actually is a bug as the expected behaviour is for the Enums to use the predefined mapping).

v5.10.7.0

http4k-* : Upgrade some dependency versions
http4k-core : [Fix #1009] Extracting access token from non-standard AccessToken response fails

v5.10.6.0

http4k-* : Upgrade some dependency versions
http4k-core : Make RouterDescription print-friendly

v5.10.5.0

http4k-* : Upgrade some dependency versions
http4k-serverless-lambda : Add support for custom EventBridgeEvent format

v5.10.4.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.21

v5.10.3.0

http4k-* : Upgrade some dependency versions
http4k-contract [Fix #1002]: Ability to use RequestContexts for providing a User Principal with Security.

v5.10.2.0

http4k-* : Upgrade some dependency versions
http4k-core- : [Fix] FollowRedirects now remove host header
http4k-testing-webdriver- : Ability to inject clock into the Webdriver

v5.10.1.0

http4k-testing-webdriver* : Allow the originalUri method of the OAuthRedirectionFilter to be configured when constructing an OAuthProvider H/T @mbcltd
http4k-format-* : Add alternative syntax for Automarshalling injection/extraction of bodies into and out of HttpMessages

v5.10.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.20
http4k-testing-webdriver* : Host header is populated in Http4kWebDriver H/T @mbcltd

v5.9.0.0

http4k-* : Upgrade some dependency versions.
http4k-server-helidon : [Breaking] Upgrade to stable v4 of Helidon, API changes.
http4k-client-helidon : [Breaking] Upgrade to stable v4 of Helidon, API changes.
http4k-* : [Breaking - dev only] http4k is now built with Java 21, although Java 8 is still targeted.

v5.8.6.0

http4k-* : Upgrade some dependency versions.
http4k-core : New filter to validate zipkin headers. H/T @time4tea

v5.8.5.1

http4k-* : Fix maven dependencies marked as optional in various http4k modules

v5.8.5.0

http4k-* : Upgrade some dependency versions, including CVE fix for Jetty.
http4k-core : Rename Events.then() with Events.and() for clarity.

v5.8.4.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-lambda : Add support to multiple query/header values with the same key

v5.8.3.0

http4k-* : Upgrade some dependency versions.
http4k-incubator* : Added HTMX emulation on Http4kWebDriver H/T @mbcltd

v5.8.2.0

http4k-* : Upgrade some dependency versions.
http4k-core* : Added extension function ExecutionService.withRequestTracing() to propagate Zipkin traces across threads

v5.8.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : BiDiLenses now implement LensInjectorExtractor

v5.8.0.0

http4k-core : BiDiLenses now implement LensInjectorExtractor
http4k-contract : [Unlikely break] NoRenderer now returns a 404 instead of an empty JSON document.

v5.7.5.0

http4k-* : Upgrade some dependency versions.
http4k-aws : Add support for AwsSdkAsyncClient. H/T @oharaandrew314

v5.7.4.0

http4k-* : Upgrade some dependency versions
http4k-testing-playwright : [New Module] Easily browser-test your http4k apps with this Playwright JUnit extension! H/T @dmcg for the inspiration.

v5.7.3.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.10
http4k-htmx : Added hyperscript.js webjar to the distribution.

v5.7.2.0

http4k-* : Upgrade some dependency versions
http4k-htmx : [New Module] Basic support for htmx development, including Webjar and custom lens types
http4k-testing-webdriver : Improve support for radio buttons and radio groups in the http4k-testing-webdriver. H/T @mbcltd

v5.7.1.0

http4k-* : Upgrade some dependency versions
http4k-contract* : [Fix #964] ContractRoute - inconsistent behavior on route matching. H/T @potfur for the investigation.

v5.7.0.0

http4k-* : Upgrade some dependency versions
http4k-server-undertow : [Unlikely break] - Reverse removal of the connectRequest from the SSE interface. This should undo the break caused by the recent rewrite.
http4k-server-jetty : [Unlikely break] - Reverse removal of the connectRequest from the SSE interface. This should undo the break caused by the recent rewrite.

v5.6.5.0

http4k-* : Upgrade some dependency versions
http4k-testing-approval : Whitespace is now trimmed from end of approval file content. Improves compatibility with IntelliJ (as final line endings might be added automatically)
http4k-testing-webdriver : [Fix #963] Submitting empty textarea form element in the webdriver causes a validation error

v5.6.4.0

http4k-* : Upgrade some dependency versions
http4k-server-apache4: Upgrade compromised commons-codec version. H/T @oharaandrew314
http4k-template-jte : [New module] JTE templating support

v5.6.3.0

http4k-security-oauth :Add ability to override response mode in OAuthProvider.

v5.6.2.1

http4k-core : [Fix] Extend URI now supports fragment parameters

v5.6.2.0

http4k-* : Upgrade some dependency versions
http4k-security-oauth : [Fix] In-memory request tracking for FakeOAuthServer now supports full AuthRequest.

v5.7.2.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-core : Add some filters for Serverless functions.

v5.6.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added nonBlank() to set of standard BiDiMappings. H/T @dmcg
http4k-core : [Unlikely break: Fix #956] Lenses don’t really work for optional fields in HTML form parsing. Form-fields are now filtered for values which are not blank. This means that you may need to change form lenses to be optional and default to an empty string if they are missing.

v5.5.0.0

http4k-* : Upgrade some dependency versions.
http4k-cloudnative - Add support for enums in EnvironmentKey
http4k-testing-tracerbullet : [Breaking] Fixed SequenceDiagrams for Mermaid to be formatted correctly. This may break approval files for any tests.

v5.4.1.0

http4k-* : Upgrade some dependency versions.
http4k-client-helidon : API changes from Helidon alpha to M1
http4k-server-helidon : API changes from Helidon alpha to M1
http4k-contract : [Fix #750] JacksonFieldMetadataRetrievalStrategy is incompatible with kotlinx.serialization @Serializable classes. H/T @krissrex
http4k-realtime-core : [Fix #951] Add filters to initialise request context for SSE and WS.
http4k-realtime-core : [Fix #885] Accept websocket subprotocols. Note that not all servers are currently supported
http4k-server-jetty : [Fix #885] Support subprotocols for Websockets

v5.4.0.0

http4k-* : Upgrade some dependency versions.
http4k-aws: [Fix #656] AWS request signing issue for URLs with special characters. H/T @krissrex
http4k-aws: [Fix #947] AWS request signing issue for duplicated headers and header values with multiple spaces. H/T @krissrex
http4k-format-kondor-json: [Unlikely Break] Upgrade kondor-json to 2.0.0. H/T @FredNordin

v5.3.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.9.0.
http4k-core : Surface root error messages in Body lenses when failure occurs on deserialisation.
http4k-template-thymeleaf : [Unlikely Break] Use HTML rendering mode and .html suffix by default for Thymeleaf templates. H/T @mikaelstaldal

v5.2.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : [Fix #939] Override all Request and Response mutators for routed messages. H/T @kwydler

v5.2.0.0

http4k-contract-jsonschema : [New module] Extracted this so we can reuse in non-OpenAPI scenarios
http4k-contract : [Deprecation] Repackaging of JSON schema classes. Should only affect users if they have explicitly used/extended the standard behaviour.

v5.1.2.1

http4k-serverless-lambda* : [Fix #936] AWS SQS null deserialization issues

v5.1.2.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth* : Remove dependency on Kotlin-reflect by adding custom adapters. H/T

v5.1.1.1

http4k-serverless-lambda* : [Fix #933] AWS SQS deserialization issue when md5OfMessageAttributes is null. H/T @oharaandrew314

v5.1.1.0

http4k-realtime-core* : Readd test client methods for SSE and WS

v5.1.0.0

http4k-server-realtime-core* : [Breaking - Fix #931] Change Websocket and SSE interfaces to return WsResponse and SseResponse objects. This makes it easier to set response headers and control if a connection is made from the incoming request as it is no-longer hidden (it is exposed at the top level instead of being hidden in the SSE and Websocket objects). It also means that the interfaces for the protocols follow the same pattern.
http4k-server-jetty* : As above
http4k-server-undertow* : As above
http4k-core* : [Fix #930] Update content-length header after GZipping it. H/T @bjornbugge

v5.0.0.0

http4k-* : Upgrade some dependency versions.
http4k-* : [Breaking] Remove all previous deprecations from all modules for v4. To upgrade cleanly, first upgrade to v4.48.0.0 and then re-upgrade to v5.0.0.0. This will ensure that you only have to deal with Deprecations between the major versions.
http4k-templates-dust: [Breaking] Nashorn is finally removed, so we are dropping support for this module. If you are on-pre Java 19 you can continue to use the old module version with no breaking changes.
http4k-*: [Breaking] http4k is now built with Java 20. We are still compiling for older Java versions. New major versions will now be incoming with every major JDK release in order to track new and retired JVM features (6 month cycle).
http4k-server-jetty: New Server Backend JettyLoom, based on Loom VirtualThreads. Requires Java 21 to use. Standard Jetty remains usable with any Java version.
http4k-core: New Server Backend SunHttpLoom, based on Loom VirtualThreads. Requires Java 21 to use. Standard SunHttp remains usable with any Java version.
http4k-server-helidon: [New Module] Helidon is a Loom-first rewrite of the popular server. Requires Java >= 19 to use.
http4k-server-websocket: [New Module] A lightweight Websocket server built on TooTallNate/Java-Websocket. H/T @oharaandrew314
http4k-client-helidon: [New Module] An HTTP client build from the ground up to take advantage of project Loom. Requires Java >= 19 to use.
http4k-format-kondor-json: [New Module] Support for KondorJson , the reflection-free JSON library.
http4k-testing-tracerbullet: [New Module] TracerBullet allows you to hook into the http4k Events implementation to visually document your applications through testing. See example in reference guide.
http4k-contract: Allow RouteMetaDsl to be marked as hidden H/T @oharaandrew314

v4.48.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.8.22.

v4.47.2.0

http4k-* : Upgrade some dependency versions.
http4k-incubator Further simplifications of tracing algorithm

v4.47.1.0

http4k-core Make it easy to propagate or update trace spans in ZipkinStorage
http4k-incubator Further simplifications of tracing algorithm

v4.46.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added status lookup by code. H/T @jhult
http4k-core : [Unlikely break] Client request tracing now sets and resets the ThreadLocal containing the current Zipkin traces. Possible break if you were relying on Zipkin state in a downstream handler. This change will allow better in-memory testing as traces will be reported correctly inside the context of the filter.
http4k-incubator : [Break] Changes to improve how we create Tracing trees, and this the signature of the Tracer to take EventNode which is a tree node.

v4.45.0.0

http4k-* : Upgrade some dependency versions.
http4k-core: [Breaking] Fix #912 - CatchLensFailure filter now can pass the Request object into the receiver. H/T @mikaelstaldal
http4k-server-format-moshi: Add support for Sets
http4k-security-oauth: [Breaking] AccessTokens create method took an unnecessary duplicate parameter. To fix, just remove the authorizationCode parameter from your implementations and use the code from the tokenRequest

v4.44.1.0

http4k-* : Upgrade some dependency versions.
http4k-core: SameSite cookie is now lax when it comes to casing.

v4.44.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : [Breaking] Allow setting of compression level on GZip filter in both Streaming and Memory mode. To fix, simply change from GzipCompressionMode.Memory/Streaming to GzipCompressionMode.Memory()/Streaming()

v4.43.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : [Fix] #901. Improve performance of GZip in streaming mode.

v4.43.0.0

http4k-* : Upgrade some dependency versions.
http4k-server-undertow : Upgrade websocket requests based on other common headers. H/T @endofhome
http4k-security-oauth : [Breaking] Make full callback URI available as part AuthorizationCodeMissing error. Fixes #895
http4k-core : Static resources now return directives as well as content type on served assets.

v4.42.1.0

http4k-* : Upgrade some dependency versions.

v4.42.0.0

http4k-* : Upgrade some dependency versions.
http4k-testing-kotest : [Possible break] Fix of this Kotest issue in new dependency release might lead to some surprising changes in behaviour of matchers for comparing JSON nodes

v4.41.4.0

http4k-* : Upgrade some dependency versions.
http4k-contract-ui-redoc: [New Module] Serve Redoc with the redocUiWebjar function.
http4k-contract: [New Feature] Serve Redoc with the redocUiLite function.
http4k-contract-ui-swagger: [Fix] #880. swaggerUiWebjar now works properly with a non-root path. Plus performance improvements.

v4.41.3.0

http4k-incubator TracerBullet diagrams have more options for reporting errors.

v4.41.2.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.8.20.
http4k-incubator TracerBullet diagrams have added colours.

v4.41.1.1

http4k-contract-ui-swagger Fix dependency from provided -> api

v4.41.1.0

http4k-* : Upgrade some dependency versions.
http4k-opentelemetry* :Fix #867. OpenTelemetry tracing uses bad default span naming. H/T @krissrex for the report.
http4k-contract-ui-swagger : [New Module] Serve a customized Swagger UI via a bundled WebJar with the new swaggerUiWebjar function. H/T @oharaandrew314
http4k-contract : Deprecate swaggerUI in favor of new swaggerUiLite function, which uses a new config format. H/T @oharaandrew314

v4.41.0.0

http4k-core* : [Unlikely break] Fix creation of UriTemplate when it starts/ends with multiple slashes. This shouldn’t cause any problems that we know about, but we are bumping the breaking version number just in case.

v4.40.2.0

http4k-* : Upgrade some dependency versions.
http4k-client-apache* : Fix #866 - ApacheClient does not handle SocketException.

v4.40.1.0

http4k-* : Upgrade some dependency versions.
http4k-incubator : TracerBullet now renders results of tests by default. Use RenderingMode to switch off this default behaviour.

v4.40.0.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi-yaml : [Possible clash/break] Upgrade to v2.0 of SnakeYaml (CVE fixes etc) may break dependencies which previously used v1.3X.X. It is safe to pin your SnakeYaml version to 1.3X.X if there is a clash with other libraries in your stack.

v4.39.0.0

http4k-contract : [Breaking] Support for HTTP webhooks and callbacks in OpenApi3 models. Note that the Swagger UIs do not support OA 3.1.0 yet so we have limited the OA version number to 3.0.0.

v4.38.0.1

http4k-core : [Fix] Header parsing to split correctly.

v4.38.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.8.10.
http4k-core : [Unlikely break] Header values now trim leading space (as per RFC)
http4k-incubator: Added D2 support for tracing diagrams.
http4k-testing-approval: Make tests line-ending-agnostic. H/T @oharaandrew314
http4k-format-* : Various tweaks to modules to standardise behaviour. H/T @oharaandrew314

v4.37.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.8.0.
http4k-core : [Fix] #846 - Status.hashCode is inconsistent with Status.equals.
http4k-contract : Add new endpoint security type: OpenIdConnectSecurity. H/T @oharaandrew314
http4k-contract : swaggerUi now supports Oauth2 redirects. H/T @oharaandrew314

v4.36.0.0

http4k-* : Upgrade some dependency versions.
http4k-multipart : Add lensing of Multipart form fields using JSON and Automarshalling
http4k-server-jetty : Add support for serving SSE. H/T @FredNordin
http4k-contract : [Breaking Fix] Fix #842 - Map OpenAPI implementation adds all properties as required H/T @BBB

v4.35.4.0

http4k-* : Upgrade some dependency versions.
http4k-core : Allow access-control-max-age header to be set from cors policy. H/T @moddular
http4k-contract : [Fix] Or security renderer was not rendering properly when the component parts are themselves composite securities.

v4.35.3.0

http4k-* : Upgrade some dependency versions.
http4k-incubator: Trace diagram improvements for PUML, Mermaid and Markdown.

v4.35.2.0

http4k-incubator : More diagram tweaking.

v4.35.1.0

http4k-incubator : Tweak of some diagramming.

v4.35.0.0

http4k-* : Upgrade some dependency versions.
http4k-failsafe : [New Module!] Failsafe is a lightweight, zero-dependency library for handling failures. H/T @FredNordin
http4k-incubator : [Breaking] Rewrite of infrastructure for generating tracing diagrams, including new interfaces and support for rendering to various formats. Initial support for PUML and Mermaid.

v4.34.4.0

http4k-* : Upgrade some dependency versions.
http4k-server-undertow : Remove extra dependencies which aren’t needed.
http4k-contract: fix Path value resolution it starts with same string as the prefix URL segment. H/T @tkint

v4.34.3.1

http4k-* : Fix #827 - Requests with unknown HTTP method result in uncaught exceptions

v4.34.3.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Support for arrays of enums in OA3.

v4.34.2.0

http4k-* : Upgrade some dependency versions.

v4.34.1.0

http4k-* : Upgrade some dependency versions.
http4k-template-rocker : [New module] Compile-time templating with Rocker!

v4.34.0.4

http4k-contract- : Fix errant import which broke multipart Openapi V3 spec.

v4.34.0.3

http4k-format-* : Remove Json extension method on MultipartFormField.Companion due to problem in JUnit. Re-re-fix.

v4.34.0.2

http4k-format-* : Remove Json extension method on MultipartFormField.Companion due to problem in JUnit. Refix.

v4.34.0.1

http4k-format-* : Remove Json extension method on MultipartFormField.Companion due to problem in JUnit.

v4.34.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.7.21.
http4k-format-* : Added auto() methods to arbitrary lenses (so Query, Header, FormField etc..)
http4k-core : [Unlikely break] reverseProxy() now takes the authority into account instead of just the hostname from the request. This should only impact you if you are doing reverse proxy operational on client side and using localhost without a port as a proxy. To fix - simply add the port to your proxying setup and all should be good.
http4k-contract* : Fix: Remove duplicate content type header.

v4.33.3.0

http4k-* : Upgrade some dependency versions.
http4k-server-ktor* : Fix: Remove duplicate content type header.

v4.33.2.1

http4k-contract : Fix OpenApi rendering for enums when there isn’t reflection.

v4.33.2.0

http4k-* : Upgrade some dependency versions.
http4k-resilience4j-jetty : Fix #804 - CircuitBreaker counts error twice, once as an error and once as a success
http4k-client-okhttp : Added websocket client. H/T @FredNordin.
http4k-format-argo : Fix problem with duplicate keys when creating objects.
http4k-security-oauth : Ability to add scopes to the OAuth refresh token. H/T @p10r

v4.33.1.0

http4k-* : Upgrade some dependency versions.
http4k-client-jetty : Added websocket client. H/T @FredNordin.
http4k-format-moshi : Add facility to use lightweight metadata adapter instead of Kotlin reflect. H/T @oharaandrew314

v4.33.0.0

http4k-* : Upgrade some dependency versions, including CVE fix for Handlebars.
http4k-multipart: [Breaking] Add DiskLocation and the ability to keep uploaded files permanently stored on disk. H/T @jippeholwerda

v4.32.4.0

http4k-* : Upgrade some dependency versions.
http4k-core : Move Jakarta Servlet code from Jetty as is now shared.
http4k-contract : Add UserCredentialsOAuthSecurity. This allows the OpenApi spec to define a Resource Owner Password Credentials grant. It also includes a shortcut to load the principal into a RequestContextLens. H/T @oharaandrew314
http4k-core: Add StringBiDiMappings.csv to map between string and list, with a configurable delimiter and element mapping. H/T @oharaandrew314
http4k-multipart: [Breaking] Add DiskLocation and the ability to keep uploaded files permanently stored on disk. H/T @jippeholwerda

v4.32.3.0

http4k-* : Upgrade some dependency versions including CVE fix for Undertow backend.

v4.32.2.0

http4k-core : Add StringBidDiMapping.basicCredentials to easily convert between Credentials and basic auth. H/T oharaandrew314
http4k-core: Add Header.AUTHORIZATION_BASIC lens to easily get and set basic Credentials for a message. H/T oharaandrew314
http4k-contract: BasicAuthSecurity now supports a RequestContextLens to store the principal. H/T oharaandrew314

v4.32.1.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi* : Added ability to make Automarshallers strict.

v4.32.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.7.20.
http4k-testing-webdriver : [Unlikely Break] Upgrade has removed deprecated method.

v4.31.0.0

http4k-core : [Unlikely Break] Added ZipkinTraceStorage, defaulting to ThreadLocal implementation. This allows centralised storage of trace information in non-standard threading environments (eg. coroutines).

v4.30.10.0

http4k-* : Upgrade some dependency versions.
http4k-core : YAML is now a recognised content type.

v4.30.9.0

http4k-cloudevents : Add custom lenses to retrieve data from a cloud event and an extension function to set it.

v4.30.8.0

http4k-cloudevents : Add Jackson.cloudEventsFormat() so we can use custom formats in cloud events lenses

v4.30.7.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix #779: SunHttp does not blow up if you add a ll value.

v4.30.6.0

http4k-* : Upgrade some dependency versions.

v4.30.5.0

http4k-* : Upgrade some dependency versions.
http4k-client-websocket: Fix #775 - WebsocketClient.nonBlocking cannot receive messages in binary mode. H/T oharaandrew314

v4.30.4.0

http4k-* : Upgrade some dependency versions.

v4.30.3.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth : RefreshingOAuthToken does not blow up when no expiry returned by server.

v4.30.2.1

http4k-format-moshi-yaml : [Fix] Re-fix YAML defaults for over greedy boolean values (regression caused by upgrade to SnakeYaml).

v4.30.2.0

http4k-security-oauth : Make FakeOAuthServer more configurable, and removed the need for passing in an auth-code generator.

v4.30.0.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth : [Unlikely Break] Converted AccessToken to be an interface, and internalised a lens which shouldn’t have been used by anyone. To fix uses of accessTokenResponseBody, replace with Body.auto<AccessTokenResponse>().toLens(), importing from OAuthServerMoshi.

v4.29.1.0

http4k-* : Upgrade some dependency versions.

v4.29.0.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth : [Unlikely Break] Slight changes to CSRF generator interface. Should be easy to fix.

v4.28.2.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth : Internal refactoring

v4.28.1.0

http4k-* : Upgrade some dependency versions.
http4k-client-okhttp : Handle previously escapable HTTP client timeout case.
http4k-contract : Added Swagger UI helper route. H/T @oharaandrew314

v4.28.0.0

http4k-* : Upgrade some dependency versions, including CVE fix for Undertow backend.
http4k-contract : [Unlikely break] Remove direct dependency on kotlin-reflect JAR, as it is brought in my http4k-format-jackson anyway. This builds ok but we have bumped the version number just to be sure. H/T @oharaandrew314 for the inspiration.
http4k-format-core : Add ContentNegotiator and auto versions to be plugged into http4k-format-* modules. H/T @oharaandrew314
http4k-core: Add cors exposed headers property. H/T @oharaandrew314

v4.27.4.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi* : Upgrade Moshi to introduce a JSON node model, thus converting Moshi to be an AutoMarshallingJson. This should open the door to us eventually allowing Moshi to be used in http4k-contracts (and OpenAPI). Massive H/T to @oharaandrew314 for the work that went into this.

v4.27.3.0

http4k-contract : OpenApi3 Operation Ids now replace ‘-’ with ‘_’, as ‘-’ interfere with generation of OpenAPI clients.

v4.27.2.0

http4k-* : Upgrade some dependency versions.
http4k-graphql : Add GraphQL explorer for http4k-graphql. H/T @arnabkd
http4k-realtime-core : Add helper for test Websocket. H/T @oharaandrew314
http4k-resilience4j* : Fix #745: ResilienceFilters.CircuitBreak counts an error twice: once as successful, once as error.

v4.27.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added support for Web Linking header standard
http4k-multipart: Fix multipart upload failure if charset is included in content type. H/T @wickwirew
http4k-server-jetty: Remove usage of deprecated status description API. H/T @@makowalski + @mandyvuong

v4.27.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.7.0

v4.26.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : [Unlikely break] Remove dependency on kotlin stdlib JDK 8 as we don’t need it to compile. If this causes a problem, simply re-add api(Kotlin.stdlib.jdk8) to your project dependency list.
http4k-* : Fix #744 - Provided dependencies included as runtime in http4k versions > 4.19.1.0.

v4.25.16.2

http4k-core : Fix query parameter parsing when value contained =. H/T @overfullstack
http4k-security-digest : Fix digest challenge parsing when nonce contained =. H/T @oharaandrew314

v4.25.16.1

http4k-contract : [Revert fix] - File field is described as “string” instead of “file” in OA3 specification.

v4.25.16.0

http4k-* : Upgrade some dependency versions.
http4k-core : Deprecate eTag filter in favour of ETagSupport.
http4k-contract : [Fix] - File field is described as “string” instead of “file” in OA3 specification.

v4.25.15.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix #738 - Calculating eTag ate body.
http4k-core : Caching filters now replace headers instead of adding them.
http4k-server-jetty : Change constructor to use supported shutdown mode. H/T @jshiell

v4.25.14.0

http4k-* : Upgrade some dependency versions.
http4k-core : Refreshing Credentials Provider now does not block if there is more than half of the expiring time left.
http4k-core : Fix #735 - use whole message body for etag hash. H/T @aSemy
http4k-metrics-micrometer - Enable publishPercentileHistogram for Micrometer request timer H/T @jakubjanecek

v4.25.13.0

http4k-server-*: Add support for graceful shutdown (available to most server implementations) H/T @nlochschmidt
http4k-core: Simplify hex decoding H/T @dzappold

v4.25.12.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi-yaml-*: Replace default YAML boolean resolver to be less greedy.

v4.25.11.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.6.21.
http4k-core: Fix #728 - No way to set the request timeout when using the JavaHttpClient. H/T @gmulders
http4k-oauth-security: Add missing Moshi adapter

v4.25.10.1

http4k-core: Fix ServerFilters.BasicAuth handling of passwords containing colons H/T @robd

v4.25.10.0

http4k-* : Upgrade some dependency versions.
http4k-core : Expand out values4k lens option
http4k-core : Allow cookie values to be returned unquoted H/T @2x2xplz
http4k-format-* : Throw a lens failure if a valid locale was not parsed H/T @oharaandrew314
http4k-opentelemetry : Fix #726 - OpenTelemetry: t.localizedMessage can’t be null

v4.25.9.0

http4k-* : Upgrade some dependency versions, including Ktor to v2.0.0
http4k-format-jackson-csv* : [New module] H/T @oharaandrew314 for the contribution.
http4k-core: New standard mappings for Time primitives. H/T @oharaandrew314

v4.25.8.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.6.20.
http4k-core: Enable overridable behaviour for CatchAll filter. H/T @dcmg
http4k-multipart: Add disk cache path to MultipartFormBody.from() parameters. H/T @rny

v4.25.7.0

http4k-client-fuel: [New module] An http4k client based on Fuel with both sync and async support.

v4.25.6.0

http4k-* : Upgrade some dependency versions, including Jackson to overcome CVE-2020-36518.

v4.25.5.2

http4k-contract: Don’t output required fields into OpenAPI if there are none.

v4.25.5.1

http4k-contract: Small tweak to internal API

v4.25.5.0

http4k-contract: Add format OpenApi hints to Arrays and Maps

v4.25.4.1

http4k-contract: Remove println from AutoJsonToJsonSchema. Doh!

v4.25.4.0

http4k-format-*: Correctly identify integer and number JSON types. This has a knock on effect in OpenApi specifications.

v4.25.3.0

http4k-serverless-tencent : Downgrade events library as is insecure.

v4.25.2.0

http4k-* : Upgrade some dependency versions.
http4k-contract: Values4k metadata population for OpenApi3 specifications (via Values4kFieldMetadataRetrievalStrategy).

v4.25.1.0

http4k-* : Upgrade some dependency versions.
http4k-contract: Values4k metadata population for OpenApi3 specifications (via Values4kFieldMetadataRetrievalStrategy).

v4.25.0.0

http4k-* : Upgrade some dependency versions.
http4k-security-oauth [Breaking]: Rename OauthCallbackError to OAuthCallbackError

v4.24.0.0

http4k-* : Upgrade some dependency versions.
http4k-testing-webdriver* : [Breaking] Upgrade of webdriver to V4 has changed the APIS. The custom By implementation is no longer required so you can use the inbuilt Selenium version instead. The disabledCssSelector By implementation has been removed, although you can simply replicate this using the existing CSS selector model.

v4.23.0.0

http4k-* : Upgrade some dependency versions.
http4k-contract: Support OA3 meta fields on properties if they are populated by a custom annotation.
http4k-graphql : [Possible breaks] Due to upgrade of underlying graphql lib.

v4.22.0.1

http4k-security-oauth: Fix error messages for oauth callback failures

v4.22.0.0

http4k-security-oauth [Breaking]: apiBase path is now preserved when building auth and token uris
http4k-security-oauth [Breaking]: provide reason when an oauth callback fails
http4k-security-oauth [Breaking]: allow id token consumer to fail authentication flow

v4.21.1.1

http4k-contract: OpenApi3 - Expose new prefix-overriding in OpenApi definitions.

v4.21.1.0

http4k-* : Upgrade some dependency versions.
http4k-contract: OpenApi3 - Ability to provide prefixes for all models in a tree. This allows you to have multiple versions of a single model in the specification (at the cost of duplicated schema models).

v4.21.0.0

http4k-* : Upgrade some dependency versions.
http4k-core: [Breaking] All metrics now include path when labelled and routed. For consistency, . in path names are now convert to underscores as well. Regexes are also removed from paths on both client and server. H/T @hektorKS
http4k-testing-strikt: Fix #709 - Strikt assertion builder for Uri.path H/T @michaelbannister

v4.20.2.0

http4k-contract: OpenApi3 - Don’t add required field if no fields are required!

v4.20.1.0

http4k-contract: Fix #706: Form “multi” lens’s do not render an items field in contracts.
http4k-testing-chaos: ChaoticHttpHandler disables Chaos API when reflection not available.

v4.20.0.0

http4k-core: Fix #704: Filters are recreated on every request/ H/T @hektorKS
http4k-core: Fix #702: TrafficFilters.ReplayFrom doesn’t correctly read from Replay.
http4k-server-netty: Fix #703: Netty: null cannot be cast to non-null type java.net.InetSocketAddress
http4k-client-apache-async: Remove usage of deprecated API
http4k-client-jetty: Remove usage of deprecated API
http4k-testing-webdriver: Remove usage of deprecated (internal) API
http4k-* : Upgrade some dependency versions.

v4.19.5.0

http4k-client-websocket : Apply a timeout when creating a blocking client websocket connection

v4.19.4.0

http4k-* : Upgrade some dependency versions.

v4.19.3.0

http4k-* : Upgrade some dependency versions.
http4k-opentelemetry : Fixes #697: Upgraded OpenTelemetry version to 1.11.0 H/T @jenarros

v4.19.2.0

http4k-server-jetty : Replace conscrypt with internal java for ALPN server

v4.19.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added ContentDispositionAttachment server filter. H/T @jenarros
http4k-core : Fix path conversion for static routing handlers with trailing. H/T @jenarros
http4k-contract : Support non-JSON schema types in request definitions.

v4.19.0.0

http4k-core : [Potential Break] Fix #693 Cookie implementation uses LocalDateTime val which is implicitly turned into GMT time for cookie. Break is that Cookies now run from Instant instead of LocalDateTime. Thanks to @maedjyuk-ghoti for alerting us to chase down this 5y+ standing bug!
http4k-security-oauth : Fixes to the InsecureCookieBasedOAuthPersistence to make it more user-friendly.
http4k-server-netty : Keep-alive for Netty when not streaming. H/T @jakubjanecek for the contrib!

v4.18.0.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fixed URLPathSegment encoding/decoding based on RFC 3986. H/T @jenarros for the thoughtful and through contribution!

v4.17.9.0

http4k-core : Added mapping for enum() in lenses.

v4.17.8.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Fix #687 - OpenApiV3 object serialization. H/T @lawkai

v4.17.7.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi-yaml : Fix for serialising Maps with null values (the key should still be rendered!)
http4k-format-moshi-yaml : Remove accidental stack trace dump.

v4.17.6.0

http4k-* : Upgrade some dependency versions.
http4k-format-moshi-yaml : [New module] YAML marshalling with zero-reflection is now possible due to a combination of Moshi and SnakeYaml
http4k-core : Fix to HttpEvent to use correct value in xUriTemplate instead of full path.
http4k-format-jackson-xml : Add autoBody for ConfigurableJacksonXml. H/T @oharaandrew314

v4.17.5.0

http4k-* : Upgrade some dependency versions, including ForkHandles to 2.0.0.0.
http4k-core : Fix to HttpEvent to use correct value in xUriTemplate instead of full path.

v4.17.4.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.6.10
http4k-incubator : Playing with TracerBullets… a generic interface for building TraceTrees from lists of MetadataEvents.

v4.17.3.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval : Fix #679. Approval tests delete actual when passing.

v4.17.2.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Added Servers to OpenApi renderer. H/T @zsambek and @MarcusDunn for making it happen.

v4.17.1.0

http4k-core : Make timeouts configurable for Java8HttpClient.

v4.17.0.0

http4k-* : [Careful] Upgrade some dependency versions, including Kotlin to 1.6.0.
http4k-* : [Breaking] Removal of all previously deprecated methods and types. To ensure you get the smoothest experience, please upgrade to v4.16.3.0 first, deal with the replacements and then upgrade to 4.17.0.0

v4.16.3.0

http4k-* : Upgrade some dependency versions.
http4k-testing-approval : Check the content type after the content is checked.

v4.16.2.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Support for top-level enums in schema.
http4k-contract : Support for enums in Header/Query/Paths. Finally!

v4.16.1.0

http4k-* : Upgrade some dependency versions.
http4k-* : Upgrade build process to Kotlin. H/T @franckrasolo

v4.16.0.0

http4k-contract : [Breaking] Added API-level tags to the contract rendering.
http4k-serverless-lambda : Fix encoding of body to work with gzip filter

v4.15.0.0

http4k-contract : [Break] BearerAuthSecurity is now more typesafe when taking a lens.

v4.14.1.4

http4k-serverless-lambda : More fixing of deserialisation of SNS events.

v4.14.1.3

http4k-serverless-lambda : Fix deserialisation of SNS events.

v4.14.1.2

http4k-contract : Fix #667 - Jackson annotations being missed in FieldRetrieval.
http4k-undertow : Server now handles HTTP requests gracefully when there is no HTTP handler set.

v4.14.1.1

http4k-core : ChaoticHttpHandler is now event better behaved when chaos is not enabled and respects routing templates when applying.
http4k-core : Fix #665 - OpenAPI json is incorrect when multi string query lens with defaulted values is used. H/T @suyash192

v4.14.1.0

http4k-core : ChaoticHttpHandler is now better behaved when chaos is not enabled.

v4.14.0.0

http4k-core : Tidying up HttpEvents
http4k-graphql : [Break] Handle null variables in calls.

v4.13.4.0

http4k-core : Added convenience HttpEvents

v4.13.3.0

http4k-core : ServerFilter request tracing now reinstates previous trace on exit instead of clearing it.

v4.13.2.0

http4k-core : Make MetadataEvent a data class.

v4.13.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Rename AsyncHttpClient to AsyncHttpHandler (deprecation).
http4k-contract : Fix #664 - Introduce OpenAPIJackson to not serialize nulls by default into OpenAPI specs. If you use your own Jackson instance, you can replicate this behaviour by using .setSerializationInclusion(NON_NULL) on your custom ObjectMapper implementation.

v4.13.0.0

http4k-core : Reverse Proxy available in both routing and non-routing version. Use reverseProxy() or reverseProxyRouting() accordingly

v4.12.3.1

http4k-core : Reverse Proxy router now falls back to URI host when Host header missing.

v4.12.3.0

http4k-security-oauth : Nicer OAuth client filters.

v4.12.2.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Fix #657 Use jackson to serialize enum models for OpenApi.

v4.12.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix TrafficFilters.RecordTo eating body stream when used on a server.

v4.12.0.1

http4k-* : Fix #652 - AWS event format adapters have fields with wrong cases.

v4.12.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.5.30.
http4k-testing-chaos : [Break] Behaviour is now an abstract class instead of a typealias. Super simple to fix. :)

v4.11.0.1

http4k-graphql : Fix - Downgrade graphql-java and fix Graphql reference example. 4.11.0.0 contained an incompatible version of graphql-java for generate use. H/T @razvn for spotting and fixing. :)

v4.11.0.0

http4k-* : Upgrade some dependency versions.
http4k-format-jackson : Fix #646 - Boolean field can escape lens check without throwing MissingKotlinParameterException.
http4k-aws : Set the query parameter to empty string if it’s value is null, instead of “null”. H/T @raelg for the PR.
http4k-contract : [Possible (small) Break] Fix #644 - Lazy init contract without path params: Type mismatch. Contract routes with 0 parameters are now able to be constructed lazily - which has added (for consistency) a secondary to(fn: () -> HttpHandler) function to the construction DSL. This may cause overload ambiguity when routes are defined withtout the request input parameter. To fix, un-ambiguate you bindings! (eg. to { Response(OK) } becomes to { _ -> Response(OK) }). H/T @dbacinski for the investigation.

v4.10.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix #638 - Revert changes to make Uri incompatible with <J10. H/T @pwteneyck.

v4.10.0.1

Mistakenly released version with wrong number of digits. Re-release for clatiry

v4.10.0.0

http4k-* : Upgrade some dependency versions.
http4k-contract* : Spec Fix: OpenAPI2 cannot contain oneOf responses as is illegal in spec.
http4k-opentelemetry : [Unlikely Break] API changes and renames due to library API changes.

v4.9.10.0

http4k-* : Upgrade some dependency versions.
http4k-security-digest* : [New module] H/T @oharaandrew314 for the contribution!

v4.9.9.0

http4k-contract : Fix #626 - Non JSON bodies do not display examples.
http4k-* : Upgrade some dependency versions.

v4.9.8.0

http4k-testing-chaos* : Added ChaoticHttpHandler to allow easy creation of HttpHandlers which have a Kotlin API for creating chaos.
http4k-format-moshi* : Fix to support marshalling of exceptions and added IsAnInstanceOfAdapter to capture
http4k-* : Upgrade some dependency versions.

v4.9.7.0

http4k-* : Upgrade some dependency versions.

v4.9.6.0

http4k-* : Upgrade some dependency versions.
http4k-testing-strikt : [New module] Matchers for Strikt assertion library.
http4k-core : no longer exposing UriTemplate.trimSlashes() . H/T @PaulienVa

v4.9.5.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-lambda : Functions can now be matched on a pattern instead of an exact match.

v4.9.4.0

http4k-serverless-lambda-runtime : [New module] Sidestep the AWS Lambda Runtime with the super lightweight http4k version!

v4.9.3.1

http4k-format-moshi : Fix Moshi to use nullsafe value adapters.

v4.9.3.0

http4k-serverless-lambda : Move initialisation of Moshi into loading stage for AWS Lambda functions.

v4.9.2.0

http4k-contract : Fix #622. DELETE requests not rendered with Body in OpenApi
http4k-serverless-lambda : Remove requirement for dependency on AWS Events JAR.
http4k-* : Upgrade some dependency versions.

v4.9.1.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-* : Allow custom automarshallers to be used for marshalling events in FnLoader, FnHandler construction.
http4k-core : (re)fix Body behaviour for ByteBuffers shorter than the array they wrap. This was taken out due to: H/T (again) @npryce
http4k-server-jetty - Multi-frame websocket messages are handled in Jetty. H/T @endofhome

v4.9.0.2

http4k-aws : Fix AWS request signing when using stream body.

v4.9.0.1

http4k-core : Revert body buffer “fix”.

v4.9.0.0

http4k-serverless- : Reworking of Serverless infrastructure to support calling Serverless Functions using automarshalled event classes. New concepts of FnHandler and FnLoader (analogues to existing HttpHandler and AppLoader). Docs and examples coming soon!
http4k-serverless-lambda* : Support for FnHandlers, with super lightweight unmarshalling of event classes via Moshi. Conversion of all AWS functions to use RequestStreamHandlers under the covers instead of slow marshalling via Jackson. New FnHandlers should extend AwsLambdaEventFunction for events, or the existing ApiGateway*Function classes for HTTP functions. Automarshalling support for the following AWS event types, extensible by providing own Moshi adapter:
- DynamodbEvent
- KinesisEvent
- KinesisFirehoseEvent
- S3Event
- ScheduledEvent
- SNSEvent
- SQSEvent
http4k-serverless-alibaba : [Breaking] Support for FnHandlers. Old style HTTP Handlers should now extend AlibabaCloudHttpFunction. Event functions should extend AlibabaCloudEventFunction. Extensible automarshalling support for event types using Moshi.
http4k-serverless-gcf* : Support for FnHandlers. Old style HTTP Handlers should now extend GoogleCloudHttpFunction. Event functions should extend GoogleCloudEventFunction. Extensible automarshalling support for event types using Moshi.

v4.8.2.0

http4k-* : Upgrade some dependency versions. Remove excess dependency on alibaba libraries which depend on vulnerable libs.

v4.8.1.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix Body behaviour for ByteBuffers shorter than the array they wrap. H/T @npryce

v4.8.0.0

http4k-format-moshi : [Breaking] Add mappings for Map-type and List-like classes to use default serialisers. To get around this, create your own Moshi configuration, omitting the CollectionEdgeCasesAdapter
http4k-websocket-* : [Breaking] Added support for filters with WsFilter, which can be wrapped around a WsHandler or WsConsumer to decorate them with behaviour. This has involved changing WsHandler to always return a WsConsumer even if it doesn’t match - in the case of a non-match, the socket is closed immediately.
http4k-sse-* : [Breaking] Added support for filters with SseFilter, which can be wrapped around a SseHandler or SseConsumer to decorate them with behaviour. This has involved changing SseHandler to always return a SseConsumer even if it doesn’t match - in the case of a non-match, the socket is closed immediately.
http4k-* : Upgrade some dependency versions.
http4k-core : Repackaging of non-core classes for SSE/WebSockets into new http4k-realtime-core module. No action required unless these classes are needed without an implementation.
http4k-core : Repackaging of non-core classes for Serverless into new http4k-serverless-core module. No action required unless these classes are needed without an implementation.

v4.7.1.0

http4k-* : Upgrade some dependency versions.

v4.7.0.2

http4k-security-oauth : Added adapter for AccessTokenResponse, meaning you don’t need to import Kotlin Reflection JAR when using the OAuthServer

v4.7.0.0

http4k-core : Fix #606 - SPA routers do not respond to OPTIONS requests.
http4k-security-oauth : Replace Jackson with Moshi. This has had the effect of removing any reflection from the module (and thus saving 2.5Mb of Kotlin-Reflection dependency). If you still need Jackson, then you need to manually add it as a dependency as it was probably missing from your dependency list! :)
http4k-* : Upgrade some dependency versions.

v4.6.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.4.32 and Jetty to 11.
http4k-server-jetty : [Breaking] The upgrade to Jetty 11.0.X has resulted in some repackaged classes in the Jetty source, most notably the Servlet dependency is now based on jakarta.servlet.http.XXX classes instead of the standard javax.servlet package.
http4k-opentelemetry : [Breaking] API changes and renames due to library API changes.

v4.5.0.1

http4k-core : Fix SunHttp not complaining if the entire request body is not consumed.

v4.5.0.0

http4k-* : Upgrade some dependency versions
http4k-core : [Slight break] Hide identity of JavaHttpClient and made the . You should be using HttpHandler anyway… ;)
http4k-core : Fix #598 - Silent exception on 204 with SunHttp. H/T @ToastShaman
http4k-core : Fix #594 - Conditional filter. H/T @jainsahab

v4.4.2.0

http4k-* : Upgrade some dependency versions
http4k-format-* : Add support for reading inputstreams directly in all automarshaller implementations

v4.4.1.0

http4k-* : Upgrade some dependency versions
http4k-serverless-lambda : Introduce ApiGatewayRestLambdaFunction to be used with REST Api Gateways

v4.4.0.1

http4k-aws : Add x-amz-content-sha256 to SignedHeaders (required for on-premise s3). H/T @tkint

v4.4.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.4.31
http4k-opentelemetry : [Break] OpenTelemetry has hit V1.0, so integrated API changes into filters for collecting data.
http4k-format-core : [Break/Repackage] Format value() extension functions are now packaged properly.
http4k-server-jetty : We have been alerted to some runtime changes around how Jetty parses paths containing . or /. Workaround is to use HttpConfiguration.httpCompliance = HttpCompliance.RFC7230_LEGACY, but this is marked as legacy and will be deprecated sooner or later. See details at: https://github.com/eclipse/jetty.project/issues/6001#issuecomment-786611040
http4k-format-moshi : Moshi now supports AutoMarshallingEvents out of the box.

v4.3.5.4

http4k-* : Disable publishing of gradle module metadata files to Maven Central.

v4.3.5.3

http4k-* : Define groupId for all modules so release to Maven Central can use the value from root.

v4.3.5.2

http4k-* : Filter out irrelevant root artifact. Maven Central is very very annoying.

v4.3.5.1

http4k-* : Fix artefact signing for maven central.

v4.3.5.0

http4k-* : Upgrade some dependency versions
http4k-core : [New module] Add WebJars support. Activate WebJars with 1LOC!

v4.3.4.1

http4k-bom : Fix #588 - Maven Central version of BOM is empty

v4.3.4.0

http4k-contract : Support Array of parameters in OpenApi2/3 specs.
http4k-template-freemarker : Improvements to configuration of engine.
http4k-* : Upgrade some dependency versions

v4.3.3.0

http4k-core : Introduce RequestWithRoute and ResponseWithRoute to allow extending messages post-routing. H/T @jenarros

v4.3.2.2

http4k-core : Fix “and” logic when mixing handler + request routers.
http4k-core : Extend #580 fix to cover absolute paths.

v4.3.2.1

http4k-core : Fix #580 - ResourceLoader.Directory can load resources outside of root directory.
http4k-core : Added values4k extensions for Lenses.
http4k-cloudevents : Jackson is now bundled with the JAR.

v4.3.2.0

http4k-* : Upgrade some dependency versions
http4k-cloudevents : [New module] Support for CloudEvents using Jackson and pluggable event formats.

v4.3.0.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.4.30
http4k-core : Removing dependency on JCenter for all compile dependencies.
http4k-core : Add ETag filter. H/T @jshiell
http4k-core : Add more useful filters for request/respons

v4.2.0.0

http4k-server-undertow : Add WebSocket and SSE support to Undertow.
http4k-core : [Breaking] Related to above, WsHandler is now PolyHandler. The old type has been deprecated, but only API users who are implementing their own handlers may notice.

v4.1.2.1

(empty release for testing our automated release process)

v4.1.2.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added view support for WebSocket messages.

v4.1.1.2

http4k-core : Fix cookie parsing for systems using non-English locale. H/T @dzappold for spotting it.

v4.1.1.1

http4k-core : RequestTracing should add a new parent_id even if a previous one wasn’t previously set.

v4.1.1.0

http4k-* : Upgrade some dependency versions.

v4.1.0.0

http4k-core : [Breaking] Remove previously deprecated AutoJsonEvents which was mistakenly left in the 4.0.0.0 release.
http4k-core : Strip body of GET request in 303 (See Other) redirections in FollowRedirects. H/T @dgliosca
http4k-core : Fix behaviour of FollowRedirects for in-memory routed handlers.
http4k-* : Upgrade some dependency versions.

v4.0.0.0

New versioning scheme! See announcement for details.
http4k-* : Remove all previous deprecations from all modules. To upgrade cleanly, follow the simple instructions in the announcement
http4k-* : Upgrade some dependency versions.
http4k-testing-webdriver : [Breaking] Upgrade of APIs to match new v4 Selenium APIs. It is quite safe to continue to use previous versions of the http4k-testing-webdriver JAR if you are unable to upgrade immediately. The API is reasonably the same, but some of the imports have changed. The main one is that instead of importing org.openqa.selenium.By you should import org.http4k.webdriver.By, which is the new custom implementation.
http4k-core : Replace hostDemux() with reverseProxy().

v3.285.2

http4k-testing-servirtium : Fixed #553 - Servirtium storage fix for multi-line bodies.
http4k-security-oauth : Fixed #552 - AccessTokenFetcher initializes all AccessToken fields. H/T @@paraseba

v3.285.1

http4k-format-moshi : Undo change relating to reading Moshi body lenses from HTTP message streams.

v3.285.0

http4k-* : Upgrade some dependency versions, including Jetty to v10.
*http4k-server-jetty : [Unlikely API break] Caused by Jetty API change.
*http4k-core : Renamed AutoJsonEvents to AutoMarshallingEvents
*http4k-serverless-lambda : [Unlikely API break] Remove dependency on AWS Events JAR. We now use a Map<String, Any> instead. This will only affect you if you needed access to the raw ApiGateway events.

v3.284.0

http4k-* : Upgrade some dependency versions.
http4k-testing-servirtium : ServirtiumServer now only changes the base Url of proxied requests instead of the entire path.

v3.283.1

http4k-core : Fix handling of null status descriptions. H/T @Hakky54 for report and fix.
http4k-contract : Fix #536 (again) - Path encoding fixed using lens. H/T @usand for the report and sticking with it!

v3.283.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix #536 - Path encoding fixed using lens.
http4k-core : Support multiple, nested RequestContexts.
http4k-format-moshi : Add support for (de)serialising Unit.
http4k-security-oauth : Ability to provide custom RedirectionUriBuilder for non-JWT cases.
http4k-testing-chaos : Ability to name Chaos API in OpenApi document.
http4k-opentelemetry : Breaking (dependency change) Upgrade to new 0.12.0 of OpenTelemetry Java API has caused some API changes.
http4k-format-jackson : Breaking (dependency change) Upgrade to new version of Jackson. PropertyNamingStrategies will need to be replaced as old one could cause deadlock: https://github.com/FasterXML/jackson-databind/issues/2715
http4k-format-jackson-xml : Breaking We recommend that users of this lib DO NOT UPGRADE to this release due to open bug with nullable fields. See: https://github.com/FasterXML/jackson-dataformat-xml/issues/435 . There is a workaround which is to add default values into the nullable fields in your DTO classes. eg.

data class MyDto(val field: String? = null)

v3.282.0

http4k-serverless-* : Tidy implementations to be consistent.
http4k-testing-webdriver-* : Fixed radio buttons submitting even when not selected.

v3.281.0

http4k-* : Upgrade some dependency versions.
http4k-* : Rework build to use refreshSrcVersions. Massive thanks to @jmfayard
http4k-serverless-lambda* : Fix cookie handling in V2 Lambda adapter.

v3.280.0

http4k-* : Upgrade some dependency versions.
http4k-format-klaxon : New format module for the lightweight Kotlin JSON library.

v3.279.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.4.20
http4k-core : Adding routing description to RouterMatch. Simplify Routing logic to remove duplication.
http4k-core : [Breaking from Java] Improved API for Java clients for Request and Response. To fix, just replace Request.Companion.create() with Request.create()
http4k-format-* : Add ability to override content type for auto-marshalling for JSON .
http4k-aws-* : Fix AwsSdkClient to correctly pass body.

v3.278.0

http4k-security-oauth [Breaking]: extend OAuthPersisence.assignToken to receive an optional IdToken.

v3.277.0

http4k-* : Upgrade some dependency versions.
http4k-core : Fix routing when it doesn’t match both method and path.

v3.276.0

http4k-graphql : [New module] Adds integration with GraphQL-Java and the ability to serve/consume GQL using the standard routing patterns.

v3.275.0

http4k-core : Reimplemented core routing logic to be fully based on Routers. It is now possible to nest arbitrary levels of request matching in a mix-and-match way. And it’s ace. :)
http4k-* : Pulled out a set of core modules for the various module types (format, template). This has shrunk the core module by ~10% in size

v3.274.0

http4k-* : Upgrade some dependency versions.
http4k-format-kotlinx-serialization : Now supports Automarshalling. H/T @zsambek for the PR.
http4k-core : Added Markdown to static Mime-types. H/T @razvn for the PR.
http4k-security-oauth [Breaking]: Don’t store the original call that required authentication in the state as it runs the risk of being used in an open-redirector phishing attack, instead store it as a value in the oauth persistence and retrieved on successful requests H/T @tom

v3.273.0

http4k-* : Upgrade some dependency versions.
http4k-core [Small break]: Rework of ParameterMatch to consolidate with RouterMatch as they are kind of the same thing. ParameterMatch methods are now floating extensions instead, so just import them.
http4k-metrics-micrometer : Remove logging spam. H/T @NersesAM for tracking it down!

v3.272.0

http4k-* : Upgrade some dependency versions.
http4k-opentelemetry : New module for integrating with OpenTelemetry platforms.

v3.271.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-azure : New serverless module for Azure Functions!

v3.270.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-alibaba : New serverless module for Alibaba Function Compute!
http4k-serverless-tencent : New serverless module for Tencent Serverless Cloud Functions!

v3.269.0

http4k-contract : Fix #502 - OPTIONS requests not honoured for requests with body
http4k-contract : Support for JavaBeans in OpenAPI descriptions.

v3.268.0

http4k-core : Add Parameter Match routing, so you can match on presence of parameters in a request
http4k-testing-kotest: Re-add kotest matcher as is fixed in underlying kotest lib.

v3.267.0

http4k-* : Upgrade some dependency versions.

v3.266.0

http4k-* : Upgrade some dependency versions.
http4k-core : Add CustomBasicAuth and ProxyBasicAuth filters. H/T @raymanoz for the PR
http4k-core : Implemented OriginPolicy for CORS. H/T @kratostaine for the PR
http4k-server-netty : Websocket support added. H/T @carbotaniuman for the PR

v3.265.0

http4k-* : Upgrade some dependency versions.
[http4k-security-oauth] [Break (via repackaging of dependent JAR)] - Result4k changed published package structure. Changes made to accommodate new package dev.forkhandles.result4k instead of com.natpryce. To fix, simply find/replace the package names - everything else is identical.
http4k-serverless-lambda : Work around various inconsistencies between the APIGateway V1 and V2.
http4k-core : Lenses can now be restricted to inject/extract types. This has an effect on BodyLenses which can be tied to Request/Response.

v3.264.0

http4k-* : Upgrade some dependency versions.
http4k-serverless-lambda : Support for ApiGateway V1 & v2 and AppLoadBalancer requests. Just extend the correct class. Converted functions to use the official AWS RequestHandler interfaces (which means that you can refer to just the name of the class when deploying lambda instead of handle())

v3.263.0

http4k-* : Upgrade some dependency versions.
http4k-cloudnative : Add support for loading config files and YAML files into Environments.

v3.262.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.4.10
http4k-* : Take advantage of Kotlin Functional Interfaces, including for Filter. Breaking change to creation of Filters from Java code only as they can just be lambdas eg. Filter filter = next -> req -> next.invoke(request.header("foo", "bar"));
http4k-testing-kotest - Possible Break: DUE TO KOTLIN 1.4.10. Remove a haveBody matcher which uses Matcher<JsonNode> directly, because of a bug in Kotest: https://github.com/kotest/kotest/issues/1727
http4k-format-jackson - Possible Break: DUE TO KOTLIN 1.4.10. Inline classes do not deserialise properly. See: https://github.com/FasterXML/jackson-module-kotlin/issues/356

v3.261.0

http4k-* : Upgrade some dependency versions.
http4k-* : Remove some example code which was mistakenly added to some main src dirs. No impact on anything other than JAR size.
http4k-aws* : Add pluggable Amazon SDK client, allowing you to plug an HttpHandler into the Amazon SDK.

v3.260.0

http4k-* : Upgrade some dependency versions.
http4k-*, Unlikely break : Added some nicer naming and examples for when people are calling http4k via Java code.
http4k-core : Fixed SunHttp server backend not setting content length, and hence responses are always chunked.

v3.259.0

http4k-* : Upgrade some dependency versions.
http4k-server-netty : Fix #141 Http4k-netty performs really badly on all benchmarks. Massive H/T adam-arold!
http4k-server-ratpack : Tweak to SO_BACKLOG size (1000).

v3.258.0

http4k-testing-kotest : [New module] A set of matchers for use with the kotest library. H/T @nlochschmidt for the PR.
http4k-* : Upgrade some dependency versions.

v3.257.0

http4k-serverless-* : Making the Serverless APIs consistent between flavours by ensuring that all Serverless functions act by class extension and not reflection based approach. Deprecated old approach. Hopefully this is simpler.. :)

v3.256.1

http4k-core : Fix #470. Path.of cannot decode path parameter values containing %/

v3.256.0

http4k-security-oauth : Add ability to handle form encoded responses in OAuth responses.

v3.255.0

http4k-* : Upgrade some dependency versions.
http4k-*, Breaking (if you’re not using it right!) : - Fixed up Maven dependencies so that they are not exporting compileOnly libraries into POMs.
http4k-security-oauth : Remove “user” from default list of GitHub scopes as it gives you write access to the profile. New default is empty (just public data).
http4k-core : Improve defaults of SunHttp server. H/T @nlochschmidt for the PR.
http4k-contract : Add description to OpenApi schema fields using Jackson annotations. H/T @env0der for the PR.

v3.254.0

http4k-* : Upgrade some dependency versions.
http4k-core : Added hostDemux() routing for when you want to select an HttpHandler based on the Host header.

v3.253.0

http4k-core : Replaced implementation of JavaHttpClient with one from Java standard library. Should you not yet have access to the Java 11 SDK, we renamed the old implementation to Java8HttpClient. Note that some headers that are added by default by the old Java8 implementation will no longer be added.
http4k-core, Breaking : Change Body.binary() lens to use an InputStream instead of a raw Body. To fix, just provide the InputStream by calling Body.stream() or similar.
http4k-client-websocket, Unlikely break : Allow API users to pass in their own Draft object for custom protocols. If broken, simple fix is to just use named arguments in the construction call to the client.
http4k-* : Upgrade some dependency versions.

v3.252.0

http4k-server-apache, http4k-client-apache, http4k-client-apache-async, Breaking : Updated to Apache HTTP 5.X.X. H/T to @jshiell. Note that the underlying Apache APIs have changed in the v5 release. For the clients, this should only break if you have customised the underlying HTTP CloseableHttpClient that is passed to the constructor of the http4k client. If you have, we have you covered with….
http4k-server-apache4, http4k-client-apache4, http4k-client-apache4-async : New modules to maintain previous integration with Apache HTTP 4.X.X. Intended to reduce the impact on projects that are not ready to move to v5 yet. In these compatibility modules, renamed ApacheClient -> Apache4Client and ApacheAsyncClient to Apache4AsyncClient - which is the only change that should be required in end user code.
http4k-serverless-openwhisk : Fixes to support binary content types and overcome issues with the request/response format of the OW Java runtime.
http4k-core : Added some Filters for base64 encoding and decoding responses.
http4k-* : Upgrade some dependency versions.

v3.251.0

http4k-core : Added support for multiple “cookie” headers. H/T @jshiell
http4k-serverless-openwhisk : New serverless module!
http4k-serverless-*, Breaking : - Repackage some functions to org.http4k.serverless package. Just change the package names to fix.

v3.250.0

http4k-core : Add Request.source to provide extra information about the request origin (address/port/scheme). H/T @kam1sh and @jshiell for the contributions.
http4k-security-oauth : Add OAuth provider configuration for Facebook. H/T @knyttl for the PR.
http4k-server-netty : Implement KeepAlive. H/T @carbotaniuman for the PR.
http4k-bom : New Bill-Of-Materials module!
http4k-* : Upgrade some dependency versions.

v3.249.0

http4k-* : Upgrade some dependency versions.
http4k-server-netty : Add support for response streaming. H/T @carbotaniuman for the PR.
http4k-serverless-gcf : New serverless module! H/T @ssijak for the PR.

v3.248.0

http4k-server-ratpack : New backend module!
http4k-format-jackson-yaml : [New module]
http4k-* : Upgrade some dependency versions.
http4k-cloudnative : - Fix #418 - Fix separator propagation when adding values to an existing MapEnvironment. H/T @jshiell
http4k-contract : - Add support for securing the API description endpoint. H/T @goodhoko for the PR.
http4k-client-websocket : Added auto-reconnection support on blocking WsClient. H/T @alphaho for the PR.
http4k-format-* : Rename/deprecate asXYZString(Any) -> asFormatString(Any) in all modules

v3.247.0

http4k-server-ktornetty : New backend module! H/T @albertlatacz for the contribution!
http4k-* : Upgrade some dependency versions.
http4k-security-oauth : Fix #414 BasicAuth server filter to not throw an exception on invalid base64 input. H/T @Sebruck for the fix.

v3.246.0

http4k-* : Upgrade some dependency versions.
http4k-template-pebble : Fix #411 - Non-root pebble templates when using CachingClasspath from a compiled JAR. H/T @alyphen

v3.245.1

http4k-server-ktorcio : Fix #410 - KtorCIO does not stop properly.

v3.245.0

http4k-* : Upgrade some dependency versions.
http4k-core : Factored out Http4kServletAdapter to allow usage of the Servlet API outside of creating a Servlet instance.
http4k-*, Breaking (prevent API abuse) : Restricted generic with() method actual http4k types. Usage outside our API should not use this method.
http4k-contract : Fix #404 - Rework of some FieldRetrieval classes to remove duplication and to support PropertyNamingStrategies set at the global level

v3.244.0

http4k-* : Upgrade some dependency versions.
http4k-*, Breaking (if you’re not using it right!) : Fix #397 - Fixed up Maven dependencies so that they are not bringing in runtime libraries.
http4k-core : - Add enum StringBiDiMapping #395 - H/T @goodhoko

v3.243.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.3.72.
http4k-security-oauth : A strategy can now be passed into AuthRequestWithRequestAuthRequestExtractor to determine how to combine AuthRequest and RequestObject H/T @tom

v3.242.0

http4k-* : Upgrade some dependency versions.
http4k-testing-servirtium : Improve error diagnostics. H/T @vchekan for the PR.
http4k-*, Unlikely Break : Change Router to return RouterMatch instead of nullable HttpHandler. This allows us to support METHOD_NOT_ALLOWED (405) if we match a path but not a verb instead of just NOT_FOUND (404). This should break custom ro H/T @jshiell for the PR.

v3.241.0

http4k-security-oauth, Breaking : client_id along with the corresponding TokenRequest is passed into access and refresh token generators so additional validation can take place H/T @tom

v3.240.0

http4k-* : Upgrade Kotlin to 1.3.71.
http4k-testing-servirtium : Switch OkHttp client for Apache.
http4k-server-jetty : Made some classes non-internal so they can be easily reused for custom ServerConfig implementations.

v3.239.0

http4k-client-websocket, Breaking : Added extra onError handler when creating a non-blocking websocket.
http4k-* : Upgrade some dependency versions, including Kotlin to 1.3.70.

v3.238.0

http4k-security-oauth : Early work on supporting refresh tokens. H/T @tom

v3.237.0

http4k-core : Fix #377. Added replaceHeaders() method. Thanks to @bastman for the idea.
http4k-contract : Fix nullability of references in OpenApi3

v3.236.0

http4k-testing-servirtium : Don’t pass recording handler into non-test methods as a resolved parameter.

v3.235.0

http4k-testing-chaos, Break/Rename : ChaosEngine is now exposed when configuring API. Renamed withChaosEngine() to withChaosApi(), replaced toggle() and update() with enable()/disable()

v3.234.0

http4k-testing-chaos, Break : Tweaked API make it simpler to use the ChaosEngine via programmatically (as opposed to REST).
http4k-testing-servirtium, Tiny break : Tweaks to InteractionOptions to make working with Servirtium tests a bit nicer.

v3.233.0

http4k-testing-servirtium : Upgrade ServirtiumServer to use OkHttp instead of JavaHttpClient (due to streaming restrictions on MiTM).
http4k-testing-servirtium, Break : Rename Github to GitHub.

v3.232.0

http4k-format-kotlinx-serialization : New JSON module! H/T @joscha-alisch for the PR. :)
http4k-testing-servirtium : Work around Kotlin @JvmOverloads problem in ServirtiumServer.
http4k-* : Upgrade some dependency versions.

v3.231.0

http4k-testing-servirtium : Making API a bit more Java-compatible friendly. Ability to vary the Server implementation.
http4k-server-jetty : Fix #362 - Websocket disconnect early causes lateinit reference race condition. H/T @fintara for the report/fix.

v3.230.0

http4k-aws : Improved efficiency of building AWS credentials (replace String.format).
http4k-testing-servirtium : Making API a bit more Java-compatible friendly.
http4k-* : Upgrade some dependency versions.

v3.229.0

http4k-security-oauth : Allowing for custom authenticate methods when fetching access tokens H/T @tom

v3.228.0

http4k-testing-servirtium, Breaking : API is still in beta, so moving to a more composed approach which will increase reuse and allow for running Servirtium infra without a dependency on http4k or Junit. Added loading from GitHub. :)
http4k-security-oauth, Breaking : Audience on request object is now a list to support multiple audiences. H/T @tom
http4k-security-oauth : Nonce is now also passed through on RequestJwts, so it can be added to request jwts. H/T @tom

v3.227.0

http4k-core : Implmement #340. Support SameSite cookies. H/T @danielwellman for the contribution.
http4k-format-jackson : Made JacksonJsonPropertyAnnotated Kotlin 1.4 safe (call to superclass might return null). H/T @pyos for spotting this.

v3.226.0

http4k-testing-servirtium : Moved Servirtium code to new module - was previously [http4k-incubator].

v3.225.0

http4k-incubator : Rewrote Servirtium code to support manipulations.

v3.224.0

http4k-security-oauth : Fix issue where AuthRequestWithRequestAuthRequestExtractor doesn’t take into account scopes not being nullable correctly. H/T @tom

v3.223.0

http4k-security-oauth : Adding expiry to RequestObject. H/T @tom
http4k-security-oauth : Fixing issue where unknown fields cause extracting RequestObject from a jwt, fails due to unknown fields. H/T @tom

v3.222.0

http4k-security-oauth, Breaking : Error responses in the authorise endpoint now take into account values from the request parameter, this will require a validator for that jwt be implemented. H/T @tom
http4k-security-oauth, Breaking : State is now its own type, and not just a string, so it can be validated. H/T @tom
http4k-security-oauth, Breaking : redirectUri on AuthRequest is now nullable as it might come on a request jwt, this is validated to be always be present downstream. H/T @tom
http4k-security-oauth : Allow parsing of request jwt. H/T @tom
http4k-security-oauth : Adding RequestObject to AuthRequest. H/T @tom
http4k-security-oauth : Adding AuthRequestWithRequestAuthRequestExtractor that will extract the request from the jwt, assuming the validator is implemented which can be used instead of just using AuthRequestFromQueryParameters if support for parsing a request jwt is required. H/T @tom

v3.221.0

http4k-*, Unlikely break from Java only : Make all custom http4k exceptions extend RuntimeException. This helps with Java compatibility so things like LensFailure inside Java Lambdas don’t require catching (as they are caught/dealt with by other bits of http4k automatically)

v3.220.0

http4k-moshi, Behaviour break : Fix #353 Don’t fail by default on unknown properties. This is the expected default behaviour for all JSON implementations. H/T cnusp for the report.

v3.219.0

http4k-incubator : Next iteration of Servirtium JUnit extensions. Improved API to support multiple storage engines.

v3.218.0

http4k-incubator : Next iteration of Servirtium JUnit extensions. Correct indexing of interactions.
http4k-security-oauth : Authorisation rendering will now taking into account ‘response_mode’ of either query or fragment in responses and no longer just use the default fo the ‘response_type’. H/T @tom
http4k-security-oauth, Breaking : Error responses in the authorise endpoint will actually redirect back to ' redirect_uri’ assuming the validator correctly validates both the ‘client_id’ and ‘redirect_uri’ to be valid. H/T @tom

v3.217.0

http4k-* : Upgrade some dependency versions.
http4k-incubator : Next iteration of Servirtium JUnit extensions. Only check content which is in the contract when replaying.

v3.216.0

http4k-core, Breaking : Removed clashing Events then() from deprecated (meaning it cannot be used as there is also another then() in that package). Use the one in org.http4k.events instead.
http4k-security-oauth : Adding nonce to AuthorizationCodeDetails H/T @tom

v3.215.0

http4k-core : GZip client filters now send correct accept-encoding header. @jshiell
http4k-core : New AcceptGZip client filter allows handling of remote GZip without compressing client requests. @jshiell

v3.214.0

http4k-core : Fix #344 H/T Streaming GZip encoder loses data. @jshiell

v3.213.0

http4k-security-oauth : Fixing wrong AuthRequestExtractor passed to AuthRequestTrackingFilter. H/T @tom

v3.212.0

http4k-security-oauth : allowing additional properties to be stored on auth request, if using additional extractors H/T @tom

v3.211.0

http4k-core : Fixes for #338 - Gzip filters send content-encoding of gzip even when body is empty. H/T @jshiell
http4k-security-oauth, Break : OIDC callback urls using the ResponseType ‘code id_token’ will now have the parameters returned as a fragment not a query as per 3.3.2.5 of the OpenID Connect Core 1.0 spec H/T @tom
http4k-security-oauth, Break : Initial support of nonce in OIDC requests H/T @tom

v3.210.0

http4k-core : Support for GZipping response streams. H/T @jshiell
http4k-security-oauth : Adding expires_in to token endpoint response. H/T @tom

v3.209.0

http4k-* : Added Status to auto-marshalling JSON mappings.
http4k-security-oauth : Adding token_type to token endpoint response, and strip out nulls in response. H/T @tom

v3.208.0

http4k-* : Upgrade some dependency versions.
http4k-core : PR #333. Copy zipkin traces across threads. H/T @jshiell for the PR.
http4k-testing-approval : Close Readers when reading from them.
http4k-incubator : Next iteration of Servirtium JUnit extensions for recording and replaying.

v3.207.0

http4k-* : Upgrade some dependency versions
http4k-incubator : Added first cut of Servirtium classes for recording and replaying traffic. Needs validating in the wild
http4k-format-jackson : Fix #320. http4k-format-jackson incompatible with jackson-module-kotlin 2.10.1

v3.206.0

http4k-* : Upgrade some dependency versions.
http4k-contract : Fix #323. Doc generation does not work with multipart lenses.
http4k-format-jackson : Fix #313. Jackson serialization is not working properly with polymorphic types stored in a collection. H/T @alphaho for the PR :)
http4k-core, Break : Renamed value on ParamMeta to description.

v3.205.0

http4k-* : Upgrade some dependency versions, including Kotlin to 1.3.61
http4k-security-oauth : allowing setting scopes on AccessToken creation so they are set on the response. H/T @tom

v3.204.0

http4k-core, http4k-aws : - increase efficiency of Hex implementation for trace ids and HMAC. H/T @time4tea
http4k-cloudnative : Reimplemented Environment to be more efficient. H/T @time4tea for noticing this.

v3.203.0

http4k-security-oauth : On generating tokens allowing for the client id to be based on the result of validation rather than just the form parameters of the request. To support client assertions. H/T @tom

v3.202.0

http4k-security-oauth : Adding new errors to support issues with client assertions. H/T @tom

v3.201.0

http4k-security-oauth : Allowing a scope to be set on AccessToken. Allowing for more low level validation of Authorise and Token Requests, by implementing org.http4k.security.oauth.server.AuthoriseRequestValidator and org.http4k.security.oauth.server.accesstoken.AccessTokenRequestAuthentication respectively. H/T @tom

v3.200.0

http4k-contract : Support multiple request bodies in OpenApi v3

v3.199.1

http4k-format-jackson : Fix #313 Part 2 - Revert default behaviour for collections of polymorphic types, but is now overridable by using autoBody() instead of auto(). Reopened #313.

v3.199.0

http4k-format-jackson, Breaking : Fix #313 - ConfigurableJackson.autoBody implementation would not work with collections of polymorphic types. This fix has the effect of blowing up auto-json behaviour when classes are defined inside functions (causing nasty java.lang.reflect.GenericSignatureFormatError: Signature Parse error exceptions). To remedy, just move inlined classes outside of the functions that they are defined in. H/T @alphaho for the PR.
http4k-* : Update some dependency versions

v3.198.0

http4k-core, Breaking : Reworking of ContentType to support multiple directives. directive field is now directives, so just add the extra ’s’ to fix :)
http4k-security-oauth : Moar options on OAuthProviderConfig. H/T @tom

v3.197.0

http4k-* : Update some dependency versions, including Kotlin to 1.3.60.
http4k-core : Make Query value optional when setting on a Request.
http4k-core, Breaking : Fix #316. Optional Query lens handling is more accurate. See issue for details of change in behaviour.

v3.196.0

http4k-* : Update some dependency versions.
http4k-format-jackson, http4k-format-gson : Add support for auto marshalling Throwable in a sensible way.
http4k-cloudnative : Renamed badly named UpstreamRequestFailed to RemoteRequestFailed. Improved error handling.

v3.195.1

http4k-cloudnative : Fix adding value to overridden environment when using set(). H/T @jippeholwerda for the PR

v3.195.0

http4k-security-oauth : Tweak to handle Content-Type comparisons (with and without directive). H/T @jippeholwerda for the PR
http4k-multipart] - [Breaking : Added support for setting custom headers in Multipart form fields and files. This has removed the String as the default field type (it is now MultipartFormField. Calls to create lenses using MultipartFormField will now require MultipartFormField.string() instead.

v3.194.0

http4k-contract : Useful tweaks to the contracts API

v3.193.1

[http4k-cloudnative] Fix #304 - map get() does not respect fallback values in overridden environment.

v3.193.0

http4k-contract : Marking endpoints as deprecated in OpenApi3

v3.192.0

http4k-template-jade4j : [New module] H/T @RichyHBM for the contribution! :)

v3.191.0

http4k-contract : Better support for overriding of raw map definition id in JSON schema generation

v3.190.0

http4k-core : Added method to (immutably) modify status on Response. H/T @brandon-atkinson for the suggestion
http4k-core : Added composite object support to lens system, allowing creation of simple lenses which draw from several different values (of the same location only - e.g Query/EnvironmentKey)
http4k-contract : Support for overriding the entity definition id in JSON schema generation
http4k-* : Update some dependency versions.

v3.189.0

http4k-server-netty : Fix reported port in Netty. H/T @fantayeneh for the PR :)
http4k-security-oauth : Add validateScopes() to ClientValidator. H/T @tom

v3.188.0

http4k-contract : Support multiple-response models in OpenApi2 and 3. Note that this currently is unsupported in the OpenApi UI due to a bug (which doesn’t display the schema for the response correctly). However, the JSON schema is generated correctly in these cases.
http4k-* : Update some dependency versions.

v3.187.0

http4k-* : Update some dependency versions, and changes to various APIs involved (Jackson and Resilience4J)
http4k-core : - Add YearMonth support to standard JSON mappings
http4k-format-jackson, http4k-format-gson, Possible break : - Moved reified NODE.asA() method from JsonLibAutoMarshallingJson down onto the instances of the Json (ConfigurableJackson/ConfigurableGson). This is so that we can handle generified classes such as lists and maps correctly. (As per the problems fixed in 3.181.0)

v3.186.0

http4k-core : - Rollback a couple of places which were using Java9+ APIs (for no good reason).

v3.185.0

http4k-contract : Improvements to rendering enums as their own objects in JSON Schema.

v3.184.0

http4k-contract : Add Cookies options to contract DSL

v3.183.0

http4k-serverless-lambda : Add ability to access Lambda context. H/T @ivoanjo for the PR.
http4k-contract : Fix rendering of OrSecurity when there are more than 2 parts.

v3.182.0

http4k-core : Rename EventsFilter to EventFilter because sanity.
http4k-format-jackson, http4k-format-gson : Reintroduce autoBody() method

v3.181.0

http4k-core : Added base events implementations for StructuredLogging.
http4k-core, Repackage : Events classes are now in org.http4k.events.
http4k-core, Breaking : EventCategory is no longer a field of Event. To fix, just remove override from your Event classes.
http4k-format-jackson, http4k-format-gson : Fixed problem when attempting to deserialise generic Lists.

v3.180.0

http4k-* : Update various dependencies.
http4k-testing-hamcrest : Improve messages of Hamkrest matchers. H/T @albertlatacz
http4k-cloudnative : Fix #291 - Readiness check result when there are > 2 checks may not report the correct result. H/T @alfi
http4k-security-oauth, Possibly breaking : Making client_secret optional in AuthorizationCodeAccessTokenRequest to support non client_secret flows. H/T @tom

v3.179.1

http4k-client-okhttp : Include status description in Response object.

v3.179.0

http4k-contract : Added OpenApiExtension interface, which allows the definition of extensions that will modify the OpenApi specification JSON. H/T @rgladwell for the inspiration.
http4k-contract : Support composite security models using or() and and(). Once again, H/T @rgladwell :)

v3.178.0

http4k-security-oauth, Possibly breaking : Request is passed as a parameter to the ClientValidator. Just pass it in! :) H/T @tom
http4k-contract, Behaviour change : When specified, individual route security now replaces global security (this is as the security model in the OpenApi spec is specified) as opposed to both being applied.

v3.177.0

http4k-security-oauth, Possibly breaking : More support for OIDC, adding state to AuthorizationCodeDetails, and passing it into createForAccessToken on IdTokens. H/T @tom

v3.176.0

http4k-security-oauth : More support for OIDC. H/T @tom

v3.175.0

http4k-* : Update various dependencies, including Kotlin to 1.3.50.
http4k-security-oauth : Some support for OIDC. H/T @tom

v3.174.0

http4k-* : Update various dependencies, including Jackson for a CVE.

v3.173.0

http4k-core : Fix #273 - parentSpanId trace incorrectly populated when no previous traces
http4k-contract, Unlikely Break : Remodelled how Security is rendered, so it’s possible that this may break slightly for customer implementations
http4k-contract : Added support for Implicit OAuth flow, with suport for custom googleCloudEndpoints Security. H/T @rgladwell

v3.172.0

http4k-core : Added uni-directional serialization/deserialization options to JSON lib auto-conversion configuration.

v3.171.0

http4k-core, Break (mitigation) : Replaced default resource loader location for singlePageApp() to /public instead of root - this is for safety of NOT serving the root of the classpath by default.

v3.170.0

http4k-core : Add a warning when static() is used with no package path, thus exposing the contents of the classpath remotely.

v3.169.0

http4k-* : Update various dependencies.

v3.168.0

http4k-contract : Collect LensFailure causes into a single place when validating.

v3.167.0

http4k-contract, Possibly Break : Open out ErrorResponseRenderer interface to take LensFailure instead of the individual failures when rendering badResponse(). To fix, simply wrap the list of failures into a LensFailure.

v3.166.1

http4k-core : Tweak singlePageApp() routing handler, to correctly apply filters when fallback page is used.

v3.166.0

http4k-core : Added singlePageApp() routing handler, which matches both static content or falls back to the root path index file

v3.165.0

http4k-contract : Fix invalid OpenApi2 when root and base path match. H/T @rgladwell
http4k-contract : ContractRoute is now an HttpHandler, so no need to wrap contract routes in a contract {} to test them. H/T @rgladwell for the inspiration.
http4k-contract : Support Host/baseUri values in OpenApi2. H/T @rgladwell
http4k-contract : Optionally add description route to route list H/T @rgladwell

v3.164.0

http4k-* : Update various dependencies, including Kotlin to 1.3.41.
http4k-testing-approval : Upgrade of HTML library from above may have an effect on output of HTML approval tests.
http4k-contract : Support for more Jackson annotations in JSON Schema rendering. H/T @tom for the PR contributing this.

v3.163.0

http4k-testing-chaos : Add detail to Chaos OpenApi interface.

v3.162.0

http4k-testing-chaos : Add detail to Chaos OpenApi interface.

v3.161.0

http4k-cloudnative : Added Forbidden request exception to HandleUpstreamRequestFailed.

v3.160.1

http4k-testing-chaos : Countdown chaos trigger fixed.

v3.160.0

http4k-testing-chaos : Slight fix to avoid consuming stream body when setting chaos.

v3.159.0

http4k-* : Update various dependencies.
http4k-client-okhttp : Updated OkHttp to v4.0.0 (Kotlin edition).
http4k-contract : Tweak to JSON Schema rendering to handle recursive objects better.

v3.158.1

http4k-server-netty : Fix #260 - cannot set multiple response headers with same name
http4k-server-undertow : Fix #260 - cannot set multiple response headers with same name

v3.158.0

http4k-contract : POSSIBLE BEHAVIOUR CHANGE DUE TO BUG: Fix #259 - Contract blocks do not produce 400s if an external CatchAll is provided. This may have an effect on how errors are generated (a 400 is produced instead of the previous 500 from the CatchAll).

v3.157.1

http4k-security-oauth : Fix broken deprecation annotation.

v3.157.0

http4k-security-oauth : Default to JSON format response in Access Token response
http4k-security-oauth : Renamed a couple of classes (AccessTokenContainer -> AccessToken), and removed isValid method from AuthorizationCodes because it doesn’t make sense for this to be on the OAuthServer.

v3.156.0

http4k-* : Update Kotlin to 1.3.40
http4k-contract : Support OAuthSecurity renderer.

v3.155.2

http4k-* : Update various dependencies.
http4k-* : Dokka improvements. Does not mitigate #196 as we run the main build on OpenJdk11. H/T @ivoanjo

v3.155.1

DO NOT USE - broken

v3.155.0

DO NOT USE - broken

v3.154.1

http4k-multipart : Made the multipart header parser case-insensitive. H/T @tenniscp25

v3.154.0

http4k-contract : Add SchemaModelNamer to allow for custom JSON Schema model names.

v3.153.0

http4k-contract : OperationIds are generated without illegal characters {}.

v3.152.0

http4k-contract : Support non-string keys for “text convertible” values in maps for Auto-schema generation.

v3.151.0

http4k-contract : Fixed Auto-schema generation to detect and remove duplicate items from list schemas.

v3.150.0

http4k-security-oauth : Make authentication mechanism for grant types configurable.

v3.149.0

http4k-security-oauth : Initial support for client_credentials grant type.

v3.148.0

http4k-contract : Jackson property searching in OpenApi3 now searches superclasses.

v3.147.0

http4k-contract : Support custom JsonProperty annotation for OpenAPi3 generation
http4k-cloudnative : New exception type for unuathorised. H/T @tom

v3.146.0

http4k-contract : Fix #228 - Support Map-based fields in OpenApi 3 Auto-schema generation as additionalProperties. H/T @noahbetzen-wk for the idea.

v3.145.0

http4k-contract : Reimplement Auto-schema generation using reflection. Added test cases to use the OpenApi generator to create valid code-based OpenApi clients using the OpenApi generator.
http4k-format-jackson : Removed reflective JSON schema creator, since it was not actually OA3 compliant.

v3.144.0

http4k-* : Update various dependencies.
http4k-contract : Improvements to better adhere to OA3 spec.
http4k-security-oauth : Allow injecting OpenID’s request parameter into the authorization request.
http4k-security-oauth : Expose request to AuthRequestTracking.

v3.143.1

http4k-core : Replace RequestContexts with reference to Store. H/T @amcghie
http4k-contract : Added some missing deprecations.
http4k-contract : Fix #243 - Nulls not allowed in OpenApi V3 JSON models.

v3.143.0

http4k-contract : Fix #239 - OpenApi v3 schemas for raw lists blow up when rendering.
http4k-* : Update various dependencies.

v3.142.0

http4k-contract : Both OpenApi v2 and v3 are now supported, including automatic schema generation. Some classes for OpenApi2 have moved to a new package - Deprecations should provide most alternatives. See module docs for details. For OpenApi v3, optionally include http4k-format-jackson to get JSON schema models based on JVM objects.
http4k-format-jackson : Added reflective JSON schema creator, to be used for generating named models from JVM objects.

v3.141.0

http4k-core : - Fix #233 - MemoryBody blows up with “java.nio.ReadOnlyBufferException”
http4k-core : - Tighten up security on Basic and Bearer auth server filters. H/T @andymoody
http4k-security-oauth : - Add filter to check bearer token is valid access token. H/T @andymoody

v3.140.0

http4k-* : Update dependencies (including Kotlin bump to 1.3.31)
http4k-security-oauth : Handle user rejecting/failing authentication. H/T @andymoody

v3.139.0

http4k-security-oauth : Allow access token generation to explicitly reject an authorization code already used. H/T @andymoody

v3.138.1

http4k-security-oauth : Amend error responses from access token generation. H/T @andymoody

v3.138.0

http4k-contracts : Tweaks to Security model for http4k-contracts. (Renamed) ApiKeySecurity is now a proper class, and added BasicAuthSecurity. You can now also override the security model on a per-route basis.
http4k-contract : Added ability to set the Security on each individual contract route. This overrides any Security set on a contract-level basis.

v3.137.1

http4k-serverless : Allow invocation of serverless functions locally. H/T @Charlyzzz
http4k-core : Fix #226 - ResourceLoadingHandler not close stream

v3.137.0

http4k-security-oauth : Rename AuthRequestPersistence to AuthRequestTracking

v3.136.0

http4k-security-oauth : Allow the http request to be referenced when generating OAuth authorization codes. H/T @andymoody

v3.135.0

http4k-core : Change mime.types location so it doesn’t conflic with other libraries. H/T @benusher and @dgliosca
http4k-testing-chaos : Added SnipRequestBody behaviour.
http4k-core : (Small) Breaking Fixed location of some extension files to be relevant to the particular package that they are referencing. This will require reimporting the new location into your source if you were using the imports.

v3.134.0

http4k-testing-approval : Made content-type aware approval tests check the content type after the content. This is friendlier for failing tests, as it is more important that the content is correct than the content-type (and often errors don’t have content type set so you get an erroneous error message which masks the fact that the content was wrong).

v3.133.0

http4k-cloudnative : HandleUpstreamRequestFailed client filter now takes a predicate (Response) -> Boolean instead of a boolean. This allows for more fine grained custom control of which Responses are acceptable.
http4k-* : Upgrade deps, including Kotlin to 1.3.30.
http4k-contract : Fix #221 - Contract path fixed segments cannot contain slash characters.

v3.132.0

http4k-format-jackson : Convert Jackson to use readValue instead of convertValue. This fixes some problems with type conversions.

v3.131.0

http4k-core : (Possible) Break: Made lense implementations Query, Header etc clear previous values by default instead of appending. This leads to a more consistent behaviour. In order to be able to set multiple values on an object using a lense, use the multi form instead - eg. Header.required("foo") -> Header.multi.required("foo"). We envisage the impact of this change is limited as it’s only Queries that generally can have multiple possible values, and in the vast majority of cases a replace rather than append is expected.

v3.130.0

http4k-contract : Generify contract handling code to allow for custom HttpMessageMeta<XYZ>

v3.129.0

(Slight) Break: Collapsed UpstreamRequestFailed exceptions to contain the status, and thus removing non-special cases like BadRequest and BadGateway. This makes them much easier to use in practice as users have access to the the status. To migrate, simply replace previous classes with UpstreamRequestFailed(Status.XYZ, message).
http4k-contract : Open up ContractRoute API to facilitate extension when defining a custom ContractRenderer.
http4k-* : Upgrade deps.

v3.128.0

http4k-core : Added base64 to the supported mappings for Query/Headers etc…
http4k-testing-approval : Approver does not write actual output if there is none to write and there is no approved content

v3.127.0

http4k-testing-approval : Improved Approver interface to more closely match the traditional assert<XYZ> approach - this results in a more discoverable/obvious API.
http4k-testing-hamkrest : Added ability to create a Hamkrest matcher directly from the Approver instance to be combined with other relevant matchers.

v3.126.0

http4k-testing-approval : Add support for XML and HTML approval tests.

v3.125.0

Added http4k-testing-approval module, which is compatible with JUnit5 tests and integrates with the OkeyDoke approval testing files and IntelliJ plugin. H/T to @jshiell for the inspiration Gist containing the base Junit5 Extension.

v3.124.0

http4k-security-oauth : Make authentication response available when creating AuthorizationCode.

v3.123.0

http4k-security-oauth : Introduce OAuthServer to http4k-security-oauth to assist in the creation of authorization servers.

v3.122.0

Generified GenerateXmlDataClasses filter, and added default implementations for http4k-format-jackson-xml and http4k-format-xml modules.
(Rename) Break: GenerateXmlDataClasses filter in http4k-format-xml is now GsonGenerateXmlDataClasses
Removed superfluous CatchLensFailure filter from http4k-contracts module. This is not required as lens failures are already handled by the main contract handler.

v3.121.0

Moved Jackson XML support to new module http4k-format-jackson-xml. Note that this is for auto-marshalling of data-classes only and does not expose an XML DOM model.

v3.120.0

Deprecated Body.view() lens construction in favour of a Body.viewModel() call which removes the implicitly called toLens(). This allows further mapping from one ViewModel type to another, and brings the view lens construction into line with the rest of the extension functions on Body.
Add auto-marshalling XML support to http4k-format-jackson module.
Upgrade deps.

v3.119.0

Add UpstreamRequestFailed exceptions and HandleUpstreamRequestFailed filters to http4k-cloudnative. These allow apps to neatly deal with upstream failure in a sensible way.

v3.118.0

Tweak contract() DSL to add remaining options for configuration.

v3.117.0

Renamed ChaosControls (deprecated) to ChaosEngine.

v3.116.0

Added new templating module http4k-templates-freemarker. H/T @amcghie for the PR implementing this
http4k-contract has a new DSL for construction of the contract which replaces the old one (now deprecated). This is consistent with the meta DSL used to construct individual contract routes and avoids repetition of the old API. We attempted to implement the standard replace-with deprecation, but IntelliJ didn’t like it (too complex maybe), so we’ve hard coded the warning instead which code which should work.
Added PreFlightExtraction to contract module, which adds the ability to disable body-checking for contract routes. This will allow refining of routes or entire contracts to be more efficient.
Upgrade deps.

v3.115.1

Fix #217 - Cannot override the definitionId of a top-level array in OpenAPI
Upgrade deps

v3.115.0

Chaos now do not blat x-uri-template when used with a RoutingHttpHandler
Simplified usage of Once chaos trigger.
(Slight break) Consistentified (!) construction of Chaos Behaviours, Stages and Triggers. Replaced singletons with function calls. Eg. Always -> Always()

v3.114.0

(Possible Break): Fix #215 - LensFailure does not always include target object. Only change to the API is that IN generic in Lenses is now bounded by IN : Any. This fix is a actually internally consistent as we could not always include the target otherwise (which is an Any?).
Trim leading and trailing whitespace from extracted EnvironmentKey values.
Secret value is now only usable once via the use() function.
Upgrade to various deps.
Removed deprecations.

v3.113.0

Added some common types for Environmental setup, and equivalent BiDiLens mappings
Handle null response in Java Http client. H/T @FredNordin

v3.112.2

Fix #212 - allow null values in HTTP contract definitions. This does mean we lose the type definition for that field, but we don’t blow up silently (which was the previous behaviour). H/T @xhanin

v3.112.1

Re-add Path.nonEmptyString() which was accidentally removed.

v3.112.0

Add support for prohibiting String unmarshalling in JSON auto-marshalling configuration.
HTTP Contracts now use the underlying ContractRenderer to produce the BadRequest and NotFound responses. Made OpenAPI open so that these responses can be customised.

v3.111.0

Add support for JSON views in Jackson module. H/T @xhanin for the donkey work.

v3.110.0

Breaking: slight rearrangement of RouteMeta receiving/returning methods to provide consistency when defining route contracts.

v3.109.0

Moved the set of predefined String BiDiMapping instances to their own class. Bulked out the auto-mapping configuration options.

v3.108.0

Upgrade to various deps.
Extracted out new BiDiMapping type, which encapsulates string <-> type conversions and removes a boatload of duplications. These conversions are now used consistently across all the various places (Lenses, auto-mapping).
Improved configurability of AutoMarshallingJson instances.

v3.107.0

Upgrade to various deps.
Fix #208 - Xml auto deserialisation incorrectly converting strings to numbers

v3.106.1

Fix #207 - repeating prefixes in static routes are not handled correctly. H/T @ruXlab for the PR to fix.

v3.106.0

Add http4k-server-ktorcio server backend. Note that whilst this module does allow http4k apps to plug into the Ktor-CIO engine, it does not provide fully front-to-back coroutine support.

v3.105.0

Preventing FallbackCacheControl from duplicating existing headers. H/T @leandronunes85
Breaking: Make Body.length nullable instead of throwing exception when value is not available. H/T @zvozin

v3.104.0

Upgrade to various deps.
Add session token support to AWS filter, and “credentials provider” to allow for rotating AWS sessions. H/T @dhobbs.
Breaking: Moved WsClient from org.http4k.testing to org.http4k.websocket.

v3.103.2

Fix access-control-allow-origin returned when server supports multiple origins H/T @johnnorris

v3.103.1

(Properly) Fix #198 - Rewrote OpenApi contract to ensure it stays fixed. H/T @reik-wargaming for the help in tracking this down.

v3.103.0

“Fix” #198 - Breaking change made in http4k-contracts to clarify/deconfuse API. Hid body parameter in contract route meta DSL - it is now receiving().
Upgraded some dependencies, including Gradle to v5.0.
Breaking: Resilience4j dependency upgrade causes a break when providing custom config. Simply insert the Config type generic to fix: e.g. RetryConfig.custom() -> RetryConfig.custom<RetryConfig>()

v3.102.1

Fix #197 - Swagger spec for form fields had incorrect description.

v3.102.0

Introduce interface for Environment

v3.101.0

Upgrades to dependencies
Improved Client-side HTTP status descriptions
Lenses now support Durations out of the box
Environments now support multi-value keys (comma separated)

v3.100.0

Make Undertow API friendlier
Fix to JsonReadinessCheckResultRenderer to actually implement the correct interface

v3.99.0

Enhancement of http4k-cloudnative - now supports extra-health check routes, and provide way to load app configuration via Properties files.

v3.98.0

Add filter allowing Gzipping based on an allowed set of content types. H/T @jshiell
Change HttpHandler extending HttpClients to use object invoke() mechanism, as the individual clients have no visible API surface of their own. Introduced DualSyncAsyncHttpHandler interface.

v3.97.0

Webdriver checkbox handling improved. H/T @gypsydave5
upgrade to various versions

v3.96.0

upgrade to Kotlin 1.3.0

v3.95.1

Tweak to K8S port variables.

v3.95.0

(Unlikely break): Change Http4kServer interface to return Unit from stop(). This affects all server implementations.
Added DSL function for working with JSON objects (scopes JSON as this). fun <T> Json<NODE>.invoke(Json<NODE>.() -> T)
New module http4k-cloudnative contains classes to help run http4k services inside cloud-native environments, including K8S.
Upgrade some dependencies
Deprecation: Moved Header.Common fields to main Header object. Extension properties should go there now.

v3.94.1

Use UTC when checking cookie expiry

v3.94.0

Deprecate String.toBody()
Fix checkbox behaviour in webdriver

v3.39.4 v3.93.4

Use Jetty latest release version (rather than RC one)

v3.39.3

Fix #189 - Uri toString now omits leading slash if the authority of a Uri is blank. This could be a potential break, but is actually more consistent as a Uri can currently be relative or absolute.

v3.39.2

Extend SetBaseUriFrom to support query parameters

v3.39.1

Added SetBaseUriFrom filter

v3.39.0

(Possible breaking change): Json is now only generified by a single type parameter instead of 2. For most usages, this type would have been identical anyway, but the upgrade of Argo has finally allowed the removal of this dead generic. Simply replace Json<Node, Node> with Json<Node>.
Added Offset datetime types to all JSON auto-marshalling libraries
Build logic for versioning is now in Kotlin. H/T @jmfayard for the PR
Upgrade Kotlin, and various other dependencies

v3.38.1

Fix withChaosControls URL pattern so that it matches sub-routes ok on original handler

v3.38.0

Added BearerAuth and BasicAuth implementations which populate RequestContexts. Plus howto example :)

v3.37.1

Fix #177 - Make RequestContexts thread-safe.

v3.37.0

Upgrades to http4k-testing-webdriver. H/T @dickon for the PRs
Added ProxyHost request filter which is useful for writing proxy-type apps.

v3.36.1

Fix #168 - Fix rest of hamkrest matchers caused by generics mishap.
Upgrade HTTP client dependency versions.

v3.36.0

Added http4k-testing-chaos module, designed to enhance failure-mode testing for http4k apps. Massive H/T to @IgorPerikov for the PR which drove this module’s creation.
Added http4k-incubator module, for hosting developing projects and other code which might be promoted to top-level modules in the future.

v3.35.2

Fix #167 - Reintroduce hasBody compatibility with common matchers such as containsString()
Remove deprecations.

v3.35.1

Fix #165 - AWS auth filter does not replace headers - it sets them (which breaks for request signing)
Fix #164 - Webdriver internal state breaks when navigating to a full URL
Fix #162 - SetHostFrom doesn’t set ‘Host’ header correctly (missing port). H/T @elifarley

v3.35.0

Added some regex matchers to http4k-testing-hamkrest.
Added BearerAuth authentication Server and Client Filters - these work similarly to BasicAuth.
Added option for defaulted() lenses to fall back to another supplied lens in the case of missing value. Thanks to @dmcg for the inspiration. :)

v3.34.3

Fix #160 - JavaHttpClient does not copy body stream correctly onto URL connection.

v3.34.2

Fix #159 - Contracts should not have Security applied to the description route by default.

v3.34.1

Fix #158 - Static and contract routes filters are applied in the wrong order.

v3.34.0

Add default SamplingDecision param to ZipkinTraces - defaults to always sample.
Fix #150 - StaticRoutingHandler filters being called twice.
Fix #151 - POTENTIAL BREAK: Rework of Status objects to fix equality against the Status constant vals when a description has been overridden. This involves the following potential breaking change: The Status class is no longer a data class to tighten up encapsulation - user calls to copy() will have to be replaced.

v3.33.2

Raise SO_BACKLOG in Apache and Netty server implementations.
Add PERMANENT_REDIRECT and UNPROCESSABLE_ENTITY Status object.

v3.33.1

No change from 3.33.0. Previous version couldn’t be made available to maven central.

v3.33.0

Add convenient way to extract from as a Map from http message. H/T to @dmcg (this version is available in jcenter only)

v3.32.1

Fix #142 - Pebble templates don’t load from JAR files.

v3.32.0

Add support for propagation of the Zipkin x-b3-sampled header

v3.31.0

Changes to the Netty factory to enable running http4k on GraalVM. H/T @RichyHBM

v3.30.0

Allow all server implementations to start on port 0 (ie. find a free port) and then report it back as a part of the Http4kServer interface

v3.29.0

Make HTTP clients resilient to unknown host and connection refused exceptions
Implemented #134 - Added default (de)serialization for common JDK primitives to all Auto-marshalling JSON modules - eg. date times and UUIDs

v3.28.0

Fix #131 - Uri’s created with paths that don’t contain leading slashes.
Added etag parser filter. H/T @dgliosca for the PR
Fix #132 - Ensured that disableDefaultTyping is called in default Jackson implementation. This should be the default anyway, but has been added to ensure that we don’t fall foul of CVE-2017-7525 and to surface awareness of this issue.

v3.27.0

OpenAPI now provides example values in the generated schema. H/T @skewwhiffy for the PR.

v3.26.6

Fix #126 - ResourceLoadingHandler can expose mapped resources into the root. <– We think this is an important update, so please upgrade!

v3.26.5

Fix #125 - ApacheServer implementation now sets content length if present.

v3.26.4

Fix #123 - Multipart Body objects blow up when parsed after being debugged. As with all streams, care should be taken to not blow heap when internalising them for debugging purposes.

v3.26.3

Debugging filter now supports ignoring Multipart streams.

v3.26.2

Tweak: OpenAPI now doesn’t return null values in the schema.

v3.26.1

Fix #124 - headers in WebSocket upgrade request are incorrectly joined.

v3.26.0

Removed supportedContentTypes field from OpenApi contract JSON, since this is a legacy field.

v3.25.0

Added option to Undertow to enable HTTP2 from main ServerConfig

v3.24.0

Upgrade various dependencies for Java 10 compatibility. H/T @tom
Fix bug with repeated params in Websocket upgrade request. H/T @tom

v3.23.1

Composite LensFailures now capture (at least) the first failing cause (probably the body parameter in the case of an http4k-contract module.

v3.23.0

Fix #116 - Can provide a custom Response creation method for CatchLensFailure. H/T @elifarley for the inspiration!

v3.22.4

Added singleton method for Json.array, since if you pass in a single JsonNode (Jackson), it accidentally iterates over the fields in the node instead of using the object as an entry in the array.
Fix #115 - Only add content-length for methods that allow content in AwsAuth filter

v3.22.3

Preserve routing information on request/response manipulation

v3.22.2

http4k-security-oauth module added - with support for OAuth2 Authorization Grant flow
Replaced classes reliant on javax.activation package, which allows Java 9+ to not require any external dependencies. \o/
Fix #112 - ApacheClient incorrectly sets headers on GET requests (this breaks F5 load balancers). H/T @simojenki
PR #110 - Websocket client timeouts are incorrectly translated as seconds instead of millis. HT @anorth
Core JavaHttpClient does not support streaming due to limitations with HttpURLConnection

v3.21.1

Fix #109 - Jackson treats integer values inconsistently, leading to matching errors when using hamkrest.

v3.21.0

Fix #107 - Killed the x-uri-template header and fixed the ReportHttpTransaction to have access to the routingGroup.
Altered ordering of filters in http4k-contract so that the route is identified before pre-filters and security are applied. This allows knowledge of the path to be accessible at the time of application of those filters.

v3.20.0

Introduce JavaHttpClient to http4k-core. It provides a very basic http client without any other 3rd party dependencies.

v3.19.0

PR #104 - Add optional time/date formatters to LensSpecs so you can choose you serialisation format. H/T @elifarley
Fix #105 - Swagger API json file: duplicate key in “definitions”.

v3.18.1

Fixed PR #100 - URI template regex required extra escaping. This only affects Android deployments as IDE shows the regex escaping is redundant. H/T @privatwolke

v3.18.0

Breaking: converted contract pre-security filter to be a post-security filter. This means that all standard filters are applied before the security later, which allows for logging and monitoring and context setup. The previous filter mechanic applied security first, which didn’t allow for this. In the unlikely event that post-security filters still need to be applied, use the withPostSecurityFilter() function when building the contract.
Docs for contract RouteMeta function parameters, and deprecated some unused functions (missed when we introduced the DSL).
PR #99 - Contract routes now support up to 10 path segments. Thanks to @scap1784 for the PR! :)

v3.17.1

Fix #97. Moshi does not fail when deserialise non-nullable fields correctly. Note that GSON still suffers from this problem

v3.17.0

Added a pre-security filter option to contract creation, so that you can explicitly specify behaviour to occur before security kicks in.

v3.16.0

Convert Security (from sealed class) and ApiKey to be interfaces. This allows users to implement their own security models.

v3.15.0

Introduce HttpTransaction and new ReportHttpTransaction filter provide better generic API for reporting, along with the ability to label transactions for this purpose.
Breaking: Rework the metrics request counter and timer Filter API. There is now a HttpTransactionLabeller for you to add as many labels as required to the transaction. Each of these labels will be used to tag the metric.

v3.14.1

Fix #95 - Filters are now applied to “route not found” responses

v3.14.0

Fix #93 - Apache server doesn’t like content-length or transfer-encoding headers present in http4k response.
Add ability to “name” input and output contract body definitions in an OpenAPI JSON doc. This applies to only the top level entity. If no override is passed, the objects are named according to their hashcode.

3.13.4

Fix #92 - cookie date should always use US locale

v3.13.3

Further tweak to Netty. H/T @FredDeschenes

v3.13.2

Fix #91 - large message handli ng in Netty

v3.13.1

Upgrade to Kotlin 1.2.20

v3.13.0

Support for operationId in OpenApi route metadata. H/T @danschultz for the PR.
Removed previously deprecated methods.

v3.12.0

New client module http4k-client-jetty, which supports both sync and async models.

v3.11.1

Fix #84. OPTIONS requests are not detected by contract routes.
Added option to NOT authorise OPTIONS requests in ApiKey security filter.
Added support for Async HTTP clients and added new AsyncHttpClient interface, which is obviously used for HTTP clients only**, and not server-side calls. :)
New client module http4k-client-apache-async.
New metrics gathering module http4k-metrics-micrometer. Big H/T to @kirderf for the PR.
Added support for async to OkHttp client module.

v3.10.0

P/R 81 - adding headers and timeout to websocket client.

v3.9.0

Added compactify and prettify to Json implementations
Added Json.hasBody Hamkrest matchers for comparing bodies. Note these are extension methods and need to be referenced/imported as such.

v3.8.0

Added facility for non-blocking websocket client to react to onConnect event. This API is the same as the inbound, server-side API - ie. there are no explicit connection event handlers. H/T @tom for the idea.

v3.7.0

P/R #13 Create extension methods for Response to add caching headers. H/T @k0zakinio.

v3.6.1

Fix #78. Serialisation of raw lists using Moshi fails in the same way as the Jackson auto-conversions do. Added convenience methods to get around this.

v3.6.0

Added http4k-format-moshi to support the Square auto-marshalling library.

v3.5.1

Fix #76 - encoding of path segments to use URI encoding instead of URL form encoding.

v3.5.0

Added support for multiple HotReload template directories in HandlebarsTemplates. H/T @TomShacham
Fix #74 - Request tracing span/parentSpan set too early so was shared between outgoing requests.

v3.4.0

New server backend http4k-server-apache. H/T @kirderf for the PR :)
We now set the length of the incoming request body when it is available in the incoming request.

v3.3.1

Handlebars now uses combination of Class and Template name to cache templates.

v3.3.0

Facility to compose TemplateRenderers with then() to provide fallback behaviour.

v3.2.3

PR #70: Header order equality for Request/Response - H/T @gypsydave5.

v3.2.2

Switched out Status for WsStatus (with proper RFC code set) in Websockets.

v3.2.1

Typesafe Websockets! Jetty now supports websockets, using the same style of API in the main http4k routing.
(Possible) Breaking change: Because WsHandler (typealias) implements the same inbound interface as HttpHandler, you now cannot declare HttpHandlers without specifying the input type, so any “anonymous” handlers will not compile as a result. The required fix is very simple, but manual: `{ Response(OK) } should become { _:Request -> Response(OK) }

v3.1.3

Fix Request.form() for streaming requests

v3.1.2

Remove possibility of empty message for Path Lens failure.

v3.1.1

New (better!) API for http4k-contract module. Old meta DSL has been deprecated.

v3.0.1

Fix #63 - Apache Client Connect. timeout exception handling.

v3.0.0

Added http4k-serverless-lambda module, allowing http4k applications to be deployed into AWS Lambda and then called from API Gateway. Effectively, the combination of these two services become just another Server back-end supported by the library. \o/

v2.38.1

RequestContextKey now follow the standardised Lens structure of required, optional, defaulted, and can now be removed (set to null). Replace calls to RequestContextKey.of() with RequestContextKey.required()
Removed previously deprecated values. See below for details on replacements.

v2.37.0

Added http4k-resilience4j module, which adds Circuits, RateLimiters, Retrying and Bulkheading.
Fix #60 (H/T @michaelhixson for the spot).

v2.36.0

Added a couple of useful ServerFilters.
Upgrade various dependency versions.
Tidying of Multipart code.

v2.35.1

Fix #57. Static handlers behave oddly when combined with an HTTP verb in the routing tree.

v2.35.0

Fix #56. Altered behaviour of CatchLensFailure to NOT catch errors from unmarshalling Response objects. This was causing BAD_REQUEST to be incorrectly generated.
Simplification of generics around LensSpecs. This should not be a breaking change, (there were 3 generics, now the MID has been removed so there are just 2) but could break if signatures are used explicitly.

v2.34.0

Reordered generics in LensInjector to make sense. This should have no effect on most code-bases, but could break if signatures are used explicitly. Just flip the generic types to switch.

v2.33.1

Added support for unsigned AWS requests, which enables streaming content to S3.

v2.33.0

Added BodyMode.Request to configure streaming for clients.
ResponseBodyMode is now BodyMode.Response (Breaking change. Fixable with simple find/replace).

v2.32.0

Added ServerFilter.ProcessFiles filter to stream Multipart Files, convert them into references and replace inline in the Form.

v2.31.4

Avoid realising StreamBody unless necessary, which could break common usages of streaming.

v2.31.3

Tweaks to Server backends to improve efficiency.

v2.31.2

Webdriver will keep only the final URI after redirects.

v2.31.1

Increased granularity of Replay.DiskStream and ensure that traffic is returned in exact order on all OSes.
Add support for redirects to Webdriver.

v2.31.0

Multipart module tweaked to provide a more consistent API.
Fix FollowRedirects for POST/PUT request.

v2.30.0

Multipart form support through new module http4k-multipart.
Deprecation: Replaced Swagger with OpenApi and deprecated the former (via typealias).
Deprecation: Replaced FormValidator with Validator and deprecated the former (via typealias).

v2.29.4

Refactor release.

v2.29.3

Fix #50 - Webdriver does not normalise relative links correctly.

v2.29.2

Http client modules now catch and convert Socket Timeout exceptions to HTTP 504s (with a custom message)

v2.29.1

Tweaks to how recorded traffic is stored on disk. Thanks to @dkandalov for the PR around this.

v2.29.0

Added TrafficFilters for recording and replaying HTTP traffic. See org.http4k.traffic package for details.

v2.28.0

Added http4k-template-dust for Dust template engine support. Thanks to @npryce for the PR to add this.

v2.27.2

Fix #44 - Use quotes around cookie values

v2.27.1

Raise proper Exception (instead of LensFailure) when RequestContexts are not set up correctly, so we don’t accidentally classify developer errors as BadRequests

v2.27.0

Added facility to assign values into a RequestContext which is passed down the Filter chain.

v2.26.3

Fix #44 - Request cookies should not be wrapped in quotes.

v2.26.2

Fix #43 - AWS does not sign binary requests correctly.

v2.26.1

Fix #41 - Sending binary body alters the size of the payload.

v2.26.0

Added “catch all” routing option, which matches all methods to a handler.

v2.25.4

Fix #40 - GZip filters now use content-encoding headers instead of transfer-encoding.

v2.25.3

Fix #39 - ResponseBodyMode.Memory properly closes streams (breaks jetty + gzip).

v2.25.2

Ensure that streams are closed properly when consuming from an upstream client.

v2.25.1

Remove Apache client request streaming because it may not release connections properly.

v2.25.0

Add streaming support to HTTP Server and Client modules.
Remove CatchLensFailure ClientFilter as it will never be used.

v2.24.0

Added CatchLensFailure for ClientFilters - which catches un-deserializable invalid responses from clients and generates a BAD_GATEWAY error.

v2.23.4

Switch XML generation to Gson over Jackson because Jackson doesn’t handle uppercase field names well.
Switch native XML parsed type to Document over Node.

v2.23.3

New algorithm for XML data class deserialisation, so un-deprecated XML methods.

v2.23.2

Deprecated methods in XML support due to limitation with underlying Jackson implementation.

v2.23.1

Fixed bug with GenerateXmlDataClasses filter

v2.23.0

Renamed http4k-format-jackson-xml module to http4k-format-xml.
Improved XML unmarshalling support.

v2.22.1

Fixed 36: Form entry is too strict with content encoding.

v2.22.0

Added http4k-format-jackson-xml module, with XML parsing support.
Upgrade several dependencies

v2.21.2

Fixed Hamkrest matchers to be on HttpMessage and not Http Request.

v2.21.1

Default body Content Negotiation strategy changed to None

v2.21.0

Converted Content-Negotiation strategy from an Enum to an interface, so that users can define their own strategies. We also now check encoding so there are 4-built in strategies to choose from: Strict, StrictNoDirective, NonStrict and None.

v2.20.1

Fixed #31 - Matching of segments in URIs is done after URLs are decoded, which results in not capturing encoded slashes in the path segments.

v2.20.0

Fixed #30 - CachingClasspath template ResourceLoader not working with non-root packages.

v2.19.0

Fixed #29 - webdriver submission of text area.
Http clients now use a new instance of the default for each instantiation. Previously there was a shared instance.
Add regex body type for parsing values out of bodies, and “None” option for content negotiation.

v2.18.3

Fix AWS request signing for requests containing empty path

v2.18.2

Fix AWS request signing for requests containing path with special characters

v2.18.1

Added support for newRequest() in new RouteBinder mechanic.

v2.18.0

Add support for unlimited nesting for routes() blocks. Removed the raw Route object, which can be replaced with Router or RoutingHttpHandler where appropriate.
As part of above, rejigged route setup logic. Deprecated old routing structure, so now "/path" to GET bind is "/path" bind GET to. To fix deprecation, simply switch the calls to “to” and “bind” in routing setup.
Rename of bind() in http4k-contract to be bindContract()

v2.17.2

Added missing eclectic HTTP method. :)

v2.17.1

Added GZip filters to http4k-core to zip request and response bodies.

v2.16.1

Improved messages for http4k-testing-hamkrest matchers.

v2.16.0

Added http4k-testing-hamkrest which contains a set of Hamkrest matchers for Http4k objects.

v2.15.0

More features for http4k-testing-webdriver. Cookie support added.

v2.14.0

More features for http4k-testing-webdriver. We now support Form entry and submission.

v2.13.0

More features for http4k-testing-webdriver.

v2.12.0

Added http4k-testing-webdriver module, an ultralight Selenium WebDriver for http4k apps

v2.11.3

Fix #26 - GenerateDataClasses does not recurse into nested object trees

v2.11.2

Fix filter application on GroupRoutingHttpHandler to apply the filter when it is applied with then(RoutingHttpHandler()

v2.11.1

Fix static routes not defaulting to index.html when in root context

v2.11.0

Added SunHttp server implementation (for development use only)

v2.10.1

Fix cookie parsing when value contains ‘=’

v2.10.0

Add method to set form values in the request

v2.9.0

Added PURGE HTTP method as it’s used commonly by various caches.

v2.8.1

Repackage AWS classes for consistency with rest of project

v2.7.1

Alter AWS Auth filter creation. Now use ClientFilters.AwsAuth

v2.7.0

Add AWS module

v2.6.0

Newly created Zipkin traces are now populated onto incoming request in ServerFilters.

v2.5.1

Slight tweak to GSON auto-marshalling to allow for use of raw Arrays with auto-marshalling

v2.5.0

Add Thymeleaf templating support

v2.4.0

Add Pebble templating support

v2.3.0

Make Route a Router so we can nest them together.

v2.2.1

Remove excess “charset” from headers in Undertow.

v2.2.0

Rename by() to bind() in routing for clarity.

v2.1.2

Fix for #24 - UriTemplate captures query parameters when the trailing path parameter is a regex.

v2.1.0

Added GSON full-auto functions to convert arbitrary objects to/from JSON.

v2.0.5

Fix #23. Contract now supports multi-part URL params (for hardcoded parts)

v2.0.4

Fix #22. Uri template does not parse out correct path params when URL starts with a path part.

v2.0.3

toString() implementations to aid debugging

v2.0.1

Readded missing default parameter for newRequest() on RouteSpec

v2.0.0

Breaking: Inversion of routing API. GET to "/someUri" is now "/someUri" to GET for consistency across the entire API.

v1.33.1

Reimplementation of http4k-contract API to match main routing API. Contracts are now nestable.

v1.32.2

Fix Filters being applied twice in ContractRoutingHttpHandler

v1.32.1

More work on http4k-contract contract API

v1.31.0

Rework http4k-contract routing to be mounted in the same way as other RoutingHttpHandlers

v1.30.0

Filters are now applied consistently to all Routers

v1.29.0

Tweak to DSL for defining StaticRouters

v1.28.1

Fix for #18: FollowRedirect will now work if location header includes charset information.

v1.28.0

New DSL for defining StaticRouters

v1.27.0

Merged StaticContent and StaticRouter and repackage of contract API into other packages

v1.26.2

Extend fix for #17 to request Cookie header.

v1.26.1

Fix for #17. Cookie can now parse a cookie without attributes and ending in semicolon.

v1.26.0

Added nestable Routers.
Merging of Modules and Routers. Router is the new Module! RouteModule is now ContractRouter, so rename in code will be required.

v1.25.1

Fix for #15. OkHttp client handling of POSTs with no body.

v1.25.0

Can add custom mime types to Static Content
GenerateDataClasses is capable of more complex object graphs

v1.24.0

Remove HttpHandler.asServer in favour of HttpHandler.startServer to avoid confusion.
Introduce Status.description().

v1.23.0

Netty sets content-length header.

v1.22.2

Fix for #12. Undertow not constructing response correctly.

v1.22.0

New module with Undertow.io support http4k-server-undertow
Jackson implementation now ignores unknown properties in incoming messages
Netty implementation tidied up

v1.21.1

Fix for #11. Netty implementation returns incorrect status codes.

v1.21.0

Add synonym methods for Lenses to aid readability. We now have invoke(IN)/extract(IN) and `invoke(IN, TARGET) /inject(IN, TARGET)

v1.20.0

http4k-contracts: Add option to change the route of the module description route

v1.19.1

http4k-contracts: Fix for contract module description routes not being authenticated via security filter

v1.19.0

http4k-contracts: Add Swagger module rendering with JSON schema models for messages.

v1.18.0

Add nonEmptyString() lens type to all request parts.

v1.17.0

General rework

v1.16.0

Further work on Path Lenses. They are now fully supported and consistent for both simple and contract routing scenarios.

v1.15.0

Path lenses are now bidirectional, so can be used to populate requests as well as bodies an headers etc.
Routes can now create shell Requests for themselves, using route.newRequest()

v1.14.0

Body is now non-nullable (use Body.EMPTY instead)
Rename methods BodyLens API for consistency and clarity. required() is now toLens(). to()' binding method is now of().

v1.13.0

New client module: http4k-client-okhttp

v1.12.0

Tidying

v1.11.0

Added option for Body content-negotiation to be strict or non-strict (the default). Always be strict in what you send, relaxed in what you will accept. :)

v1.10.0

Moved Credentials to org.http4k.core package.
Add various filters, including SetHostFrom and CatchAll.

v1.9.0

Added GenerateDataClasses so you can generate Kotlin data classes from JSON messages.

v1.8.0

Added CORs support

v1.7.0

Added auto() to Jackson, so you can auto convert body objects into and out of Requests/Responses

v1.6.0

Added CachingFilters

v1.5.0

Removed static factory methods for Request/Response. They were confusing/incomplete and users can easily recreate them via extension functions.
Merge org.http4k.core.Body and org.http4k.lens.Body.
Add Request/Response message parsers.

v1.4.0

Turn Body into ByteBuffer wrapper rather than typealias. That should make .toString() behave as most people would expected.

v1.3.0

Removed non-mandatory parameters from Request and Response constructors. This is aid API clarity. and force users to use the API methods for properly constructing the objects.
Regex Lens added.

v1.0.0

Initial major release.