Update all dependencies by renovate[bot] · Pull Request #8 · HSLdevcom/jore4-hastus

renovate · 2023-03-14T07:45:57Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.mockk:mockk-jvm (source)	`1.14.9` → `1.14.11`
io.ktor:ktor-client-logging-jvm	`3.0.3` → `3.5.0`
com.expediagroup:graphql-kotlin-client-jackson	`9.0.0` → `10.0.0`
com.expediagroup:graphql-kotlin-ktor-client	`9.0.0` → `10.0.0`
com.expediagroup:graphql-kotlin-maven-plugin	`9.0.0` → `10.0.0`
io.github.oshai:kotlin-logging-jvm	`8.0.01` → `8.0.4`
com.github.gantsign.maven:ktlint-maven-plugin	`3.5.0` → `3.7.1`
org.apache.maven.plugins:maven-surefire-plugin (source)	`3.5.5` → `3.5.6`
org.apache.maven.plugins:maven-enforcer-plugin (source)	`3.6.2` → `3.6.3`
org.springframework.boot:spring-boot-starter-parent (source)	`4.0.3` → `4.0.6`

Release Notes

mockk/mockk (io.mockk:mockk-jvm)

`v1.14.11`

Compare Source

What's Changed

fix: added SameInstanceMatcher to handle an issue with equals method when using EqMatcher along with a mock to an object by @DOssaA in #1508
Add scoped confirmVerified overloads for callables (KFunction and KProperty) by @DOssaA in #1513
feat: support MockKAnnotation.useDependencyOrder for JUnit 5 by @ilia1243 in #1515
Allow updating settings from code by @Yentis in #1517
Add currentThread filter and excluded mocks to clearAllStubsFromMemory by @evgenru in #1519
Support new Kotlin annotation defaulting rule for @InjectMockKs by @ZzAve in #1525
feat(dsl): Add context parameters support module (#1431) by @faraz152 in #1521
fix: resolve @InjectMockKs dependency order for interface by @neungs-2 in #1526
fix: resolve @InjectMockKs dependency order for list injection by @ilia1243 in #1527
fix: extract native lib from APK when not on filesystem (AGP 8.5+) by @snowykte0426 in #1529
fix: support OpenJ9 in JvmAutoHinter by @hspedro in #1530

New Contributors

@DOssaA made their first contribution in #1508
@ilia1243 made their first contribution in #1515
@Yentis made their first contribution in #1517
@evgenru made their first contribution in #1519
@ZzAve made their first contribution in #1525
@faraz152 made their first contribution in #1521
@hspedro made their first contribution in #1530

Full Changelog: mockk/mockk@1.14.9...v1.14.11

ktorio/ktor (io.ktor:ktor-client-logging-jvm)

`v3.5.0`

Compare Source

Published 14 May 2026

Features

KTOR-8421 Route.contentType should support multiple ContentType
KTOR-7961 Add known TDM headers to the HttpHeaders object
KTOR-9418 Support getAs from the root ApplicationConfig
KTOR-9559 DNS configuration for the Apache5 client
KTOR-9554 DNS configuration for OkHttp client engine
KTOR-9555 Custom SSE heartbeat function
KTOR-8914 Dependency injection: read annotations in function references
KTOR-8300 Sessions: Add a way to create a user session shared for all user devices or look up sessions of the same user
KTOR-9521 Upgrade to Kotlin 2.3.21
KTOR-9276 Make DynamicProviderConfig.authenticateFunction suspend
KTOR-9491 Provide parameter validation convenience functions
KTOR-9506 OpenAPI: Support prefixItems in JsonSchema for tuple type definitions
KTOR-470 Add an option to not resend the session cookie if the session data wasn't changed.
KTOR-9355 Deprecate HttpHeaders.AcceptCharset
KTOR-7659 Make ktor-network compatible with ES modules for nodejs
KTOR-9350 JS: Make ES2015 the default target for tests
KTOR-7578 Update Digest authentication implementation according to RFC 7616

Improvements

KTOR-9503 The JacksonConverter.streamRequestBody property name is confusing
KTOR-9552 Deprecation notice for io.ktor.server.auth.Principal does not explain what to use instead
KTOR-7458 Jetty Jakarta: Provide an easy way to disable SNI hostname validation
KTOR-9354 Websockets: webSocket builder function should return a Route to be describable
KTOR-9488 Nonce and hex function performance optimizations

Bugfixes

KTOR-9524 Netty response hangs after connection lost
KTOR-9542 Netty: The request handler runs on worker event loop instead of call event loop since 3.4.3
KTOR-9531 Netty server intermittently drops requests after upgrading to 3.4.3
KTOR-8151 MicrometerMetrics: "MeterFilters configured after a Meter has been registered" warning when a metric is registered before installing the plugin
KTOR-9411 Darwin throws DarwinHttpRequestException instead of FrameTooBigException
KTOR-8320 CallLogging: plugin usage in testApplication breaks console standard output
KTOR-8906 Jackson, with request body streaming on, exhausts Dispatchers.IO
KTOR-8709 Websockets: Unable to close session with a custom CloseReason
KTOR-9567 Flaky UnixSockets on Windows: WSAEOPNOTSUPP from bind()
KTOR-9183 A client call wrapped with withTimeout throws a generic CancellationException instead of TimeoutCancellationException
KTOR-8199 Autoreloading: default watch patterns don't match anything when project path contain spaces
KTOR-9549 Kotlin/JS: ktor-ktor-client-core.mjs is incompatible with Vite: toRaw naming conflict
KTOR-9544 Apache: body channel not cancelled when caller scope is cancelled
KTOR-9546 HttpClient: cancelling ByteReadChannel body does not propagate to engine
KTOR-455 Content-Disposition additional parameters should be inside quotes
KTOR-9500 RawSourceChannel returns false positive on awaitContent
KTOR-646 Netty engine still print annoying exceptions
KTOR-9527 Curl: Freeze when receiving large responses
KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
KTOR-9483 Curl: backpressure implementation is never used
KTOR-9545 Curl: body channel not cancelled when caller scope is cancelled
KTOR-9540 Curl: CancelWebSocket task may cancel a new HTTP request due to easy handle pointer reuse
KTOR-9539 Curl: WebSocket bearer token refresh fails due to stale native handle reuse
KTOR-9536 Netty call hang when channel becomes inactive before response is sent
KTOR-4752 OkHttp: Websockets pinging doesn't work
KTOR-9409 call.respond performance regression caused by transitive kotlin-reflect:2.3.0
KTOR-9487 ZSTD decoder fails if the compressed frame is larger than 4096 bytes
KTOR-8271 MockEngine, HttpTimeout: the virtual clock of kotlinx coroutines isn't respected
KTOR-6683 Plugin onCallReceive/transformBody is not called for receive()
KTOR-7416 Jetty, Java: Custom Host header doesn't override the default value
KTOR-9203 CIOMultipartDataBase: Call thread is blocked when releasing file parts

`v3.4.3`

Compare Source

Published 22 April 2026

Bugfixes

KTOR-9451 OpenAPI schema inference not working for custom nested generics
KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
KTOR-9463 OpenAPI: schema inference StackOverflow
KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
KTOR-8989 Shared engine is closed when a client created with config method is closed
KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
KTOR-9476 Unable to update/remove session data if no response content
KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

`v3.4.2`

Compare Source

Published 27 March 2026

Improvements

KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
KTOR-9383 CaseInsensitiveString: reduce allocations
KTOR-9385 Netty: Allocation micro-optimizations
KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
KTOR-9437 Fix GraalVM Compatibility
KTOR-9424 Logging: OkHttp format should log the full requested URL
KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
KTOR-5977 Compression: The encoders buffer streaming response
KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

`v3.4.1`

Compare Source

Published 3 March 2026

Improvements

KTOR-9382 HttpProtocolVersion.parse: fast path for common versions
KTOR-9381 GMTDate: reduce allocations
KTOR-8971 Support "operationId" in Kdoc for OpenAPI spec. gen.
KTOR-9333 WebSockets: Infinite spin and potential OOM vulnerabilities in the Inflater.inflateFully method
KTOR-5616 Ktor always adds by default an Accept-Charset header
KTOR-9291 OpenAPI: handle atypical route functions
KTOR-9293 OpenAPI describe needs defaults
KTOR-9304 OpenAPI: Order of path parameters is not preserved in the spec
KTOR-9353 Routing: TailcardSelector missing toString(), which clutters the logs

Bugfixes

KTOR-9281 OpenApi code inference misses lambda argument bodies
KTOR-9273 OpenAPI static content path appears in resulting model
KTOR-9004 OpenAPI: No respective formats detected for serializable types like UUID or Instant
KTOR-9305 OpenAPI: "No mapping for symbol: VAR FOR_LOOP_VARIABLE" error with codeInferenceEnabled=true
KTOR-9279 OpenAPI: UnsupportedOperationException for a function with a reified type parameter codeInferenceEnabled = true
KTOR-9289 OpenAPI: Resource routes are missing inferred and comment-based documentation
KTOR-9330 OpenAPI: Cannot override kotlinx.serialization module
KTOR-9320 OpenAPI: jsonSchema() does not unwrap Kotlin value classes (inline classes)
KTOR-9352 Authentication: Creating JWT verifier fails for JWK with kty=EC and alg=null
KTOR-9344 Flow invariant error happens after update to Ktor 3.4.0
KTOR-9362 testApplication: Race condition in timeout coroutine when response is streaming
KTOR-9274 Curl: Undefined symbol errors when linking on Linux since 3.4.0
KTOR-8782 NodeJS CIO: "Module 'os' could not be imported" error on resolving WORKING_DIRECTORY_PATH with es2015 target
KTOR-9348 String.decodeBase64String fails to decode when the input has no padding since 3.4.0
KTOR-9318 CIO engine rejects valid certificates with unsupported signature algorithms
KTOR-9331 Curl: Segfaults when working with WebSockets
KTOR-9334 Coroutines in route handlers are dispatched with Dispatchers.Unconfined since 3.2.0
KTOR-9339 StreamResetException is not propagated to the caller of StreamRequestBody.writeTo since 3.4.0
KTOR-9329 HTMX: "on" attributes extension not working
KTOR-9316 WasmJS bad get and set implementations for Uint8Array and ArrayLike
KTOR-9272 JSON schema inference does not recognize unsigned types
KTOR-9211 SendCountExceedException when request is sent twice with maxRetries = 0 since 3.3.2
KTOR-9285 RateLimit: Milliseconds in the Retry-After header are truncated
KTOR-7512 JWT: Docs for validate method claim that it's optional, but it isn't
KTOR-9269 Incorrect dependency declaration in swagger / openapi
KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly

`v3.4.0`

Compare Source

Published 22 January 2026

Features

KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
- KTOR-9085 Read OpenAPI security details from authentication plugin
- KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
- KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
- KTOR-8859 Routing documentation compiler plugin
- KTOR-8936 Routing documentation runtime API
- KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
KTOR-7075 Zstd support
KTOR-9209 Support Jackson 3
KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
KTOR-8927 Support for respondResource
KTOR-9162 Auth API key plugin
KTOR-7882 Support HTTP QUERY method
KTOR-8195 Partial HTML response
KTOR-8985 EngineMain: Support reading trust store settings from the configuration
KTOR-9066 Add duplex streaming for OkHttpClient
KTOR-8180 Auth: Provide control over tokens to user code
KTOR-8273 iOS native interop for WebRTC client
KTOR-8956 DI: Allow file configuration
KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

KTOR-8890 Rename target jsAndWasmShared to web
KTOR-9242 Upgrade to Kotlin 2.3
KTOR-9243 Update libcurl to 8.18.0
KTOR-9014 Deprecate DarwinLegacy engine
KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
KTOR-9199 Make HttpHeaders strings const
KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
KTOR-9097 Java: Use HTTP/2 by default
KTOR-8740 HTMX: Missing DSL for some attributes
KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
KTOR-6761 Apache5: Simplify configuration of ConnectionManager
KTOR-9037 Multipart/form-data: Make formData's block inline
KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
KTOR-9026 Introduce/reuse interfaces for logging selectors
KTOR-6766 Deprecate Apache 4 engine
KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
KTOR-8941 Add override DI conflict policy

Bugfixes

KTOR-9258 headers { } block does not affect the request in defaultRequest due to function name collision with io.ktor.http.headers
KTOR-9235 HttpCookies: Support parsing non-compilant Expires dates of Set-Cookie header
KTOR-8945 ByteReadChannel.readUTF8Line doesn't throw TooLongLineException when the limit is reached
KTOR-8339 Curl: caPath is not set by default in the Curl client on linuxArm64
KTOR-9188 WebRTC. IceServer.urls should be a list.
KTOR-9148 Logging: Body logging of multipart/form-data requests hangs when OkHttp format is on
KTOR-9166 CORS: Excessive logs on INFO level since 3.3.3
KTOR-9130 Missing implementation of getPluginId method error with Kotlin 2.3.0-RC
KTOR-9147 OpenAPI: "AssertionError: Cannot add a performance measurements" leading to StackOverflowError within a multimodule project
KTOR-2162 JettyKtorHandler executor will never grow beyond core size
KTOR-9201 audio/x-matroska is wrongly recognized as mkv type
KTOR-9146 Run HttpStatement.execute on the engine's dispatcher
KTOR-6300 Native engines should use Dispatchers.IO not Dispatchers.Unconfined
KTOR-9098 Curl: HttpResponse.version always returns HTTP_1_1
KTOR-9100 Curl always uses HTTP/1.1
KTOR-7162 DefaultRequest: Configuration applied twice for client created with HttpClient.config
KTOR-9102 SSE: Java engine does not close the underlying connection when SSE session is canceled
KTOR-9108 SSE: The handler adds Connection: Keep-Alive header, which is incompatible with HTTP/2
KTOR-7884 Auth: The MutableList cannot be accessed since 3.0.0
KTOR-6569 Bearer auth: Don't cache client bearer token (option)
KTOR-4946 Auth: Bearer authentication - unable to update tokens
KTOR-4759 Auth: BearerAuthProvider caches result of loadToken until process death
KTOR-9129 Fix SendCountExceedException when maxRetries = Int.MAX_VALUE
KTOR-9113 Netty HTTP2 server hangs on the plugin exception
KTOR-9135 buildOpenApi fails with unknown serializer
KTOR-8285 Bearer Auth: request cancellation causes refresh token invalidation
KTOR-5241 The decodeBase64Bytes method doesn't throw an exception on illegal base64 characters
KTOR-8912 Incorrect KDoc of ApplicationConfig.tryGetStringList
KTOR-9079 The ktor-server-test-host module, having junit-jupiter runtime dependency, causes conflicts
KTOR-7713 HttpCallValidatorConfig.handleResponseException() should receive a CallExceptionHandler
KTOR-7121 testApplication: Test HTTP client does not use specified coroutine dispatcher
KTOR-8785 DI: JobCancellationException during cleanup
KTOR-6198 Client/WebSocket/Darwin close code and reason are incorrect
KTOR-7824 Ktor doesn't parse multiple headers

`v3.3.3`

Compare Source

Published 26 November 2025

Improvements

KTOR-6837 Discrepancies when parsing URL host with CIO and Darwin engines compared to the rest engines
KTOR-9050 Logging: SimpleLogger should be an object, not a class
KTOR-9094 Jetty Client: Support HTTP/2 over cleartext (h2c)
KTOR-9120 OpenAPI gen: missing operationId for KDoc fields
KTOR-3019 Improve logging for CORS plugin

Bugfixes

KTOR-8671 Netty: RejectedExecutionException during shutdown on MacOS when dev mode is enabled
KTOR-9096 Darwin: New SSE handlers stop responding after canceling few SSE sessions
KTOR-9125 Double ResponseSent invocation when exception is thrown after respond
KTOR-8878 OpenAPI: StackOverflowError when a response object has property with @Contextual serializer
KTOR-8947 Java, ContentEncoding: IllegalHeaderNameException is thrown for ":status" pseudo header with HTTP/2
KTOR-9092 NettyHttp2Handler throws IllegalArgumentException: 'ktor.ApplicationCall' is already in use
KTOR-8924 Curl: Client sends both Transfer-Encoding and Content-Length headers for DELETE requests with body
KTOR-8838 Exception handling issue in client cache

`v3.3.2`

Compare Source

Published 5 November 2025

Improvements

WebRTC Client. Remove redundant targets (KTOR-9062)
Add Socks proxy support to Darwin engine (KTOR-8968)
Java: Improve error message when SOCKS proxy is used (KTOR-2908)

Bugfixes

HttpRequestRetry: SendCountExceedException when max retries is more than maxSendCount of HttpSend (KTOR-5850)
Darwin: The maxFrameSize option has no effect (KTOR-6963)
OpenAPI: StackOverflowError when a response object has property with @Contextual serializer (KTOR-8878)
OpenAPI gen: missing KDoc fields (KTOR-9021)
Server call.request.path() returns routing selectors in path (KTOR-7639)
StaticContent doesn't allow siblings (KTOR-9012)
HttpCache: FileStorage doesn't use given dispatcher for all file operations (KTOR-8832)
Curl: SOCKS proxy doesn't work (KTOR-9008)
Netty: java.lang.VerifyError is thrown on Android since 3.3.0 (KTOR-8916)
Response body channel is canceled while the body is being saved when having HttpRequestRetry and onDownload (KTOR-8975)
HttpCache: InvalidCacheStateException when varyKeys stored in files contain uppercase letters since 3.3.0 (KTOR-8970)

`v3.3.1`

Compare Source

Published 8 October 2025

Improvements

Add a note about SSE session lifetime in KDoc (KTOR-8440)
Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
Support serving static resources within bootJar (KTOR-8592)

`v3.3.0`

Published 11 September 2025

Features

Support for server side http2 without tls (h2c) (KTOR-4750)
OpenAPI generation build extension preview (KTOR-8721)
Serve static resources with caching headers and ETag based on sha256 of content (KTOR-6700)
Jetty engine: Upgrade Jetty dependencies to the latest version 12 (KTOR-6734)
Static content: Support a custom respond logic if the file is not found (KTOR-8496)
Upgrade OkHttp to version 5.0.0 (KTOR-8652)
WebRTC Client, Android + WASM (KTOR-7958)

Improvements

SSE: Cannot read response body from SSEClientException (KTOR-8165)
SSE: "SSEClientException: Content-Length mismatch" on saving response body in DefaultResponseValidation (KTOR-8753)
var Route.staticRootFolder: File? should be deprecated (KTOR-5836)
Add image/bmp to the ContentType (KTOR-8735)
Add some missing image content types (KTOR-8624)
Upgrade to Kotlin 2.2 (KTOR-8647)
Bump Kotlin API level to 2.2 (KTOR-8637)
CIO: The engine ignores system proxy settings (KTOR-5922)

Bugfixes

Performance regression when using ContentEncoding and HttpRequestRetry since 3.2.0 (KTOR-8820)
Big number of simultaneous outbound web socket connections leads to a coroutine deadlock (KTOR-8829)
DI: JobCancellationException during cleanup (KTOR-8785)
Autoreloading: JobCancellationException when app is reloaded in the debugger since 3.2.0 (KTOR-8810)
HttpRedirect: The client is redirected when no Location header in response (KTOR-8697)
SerializationException when Application.propertyOrNull() is called with type Map<String, Any?> (KTOR-8781)
"Failed resolution of: Ljava/lang/management/ManagementFactory" on Android when JvmGcMetrics are initialized (KTOR-8714)
HttpCache: all header values but first in HttpResponse.varyKeys() are ignored (KTOR-6402)
HttpCache: plugin selects wrong cache entry when filtering Vary headers with different case (KTOR-7621)
CountedByteWriteChannel: autoFlush of the source channel doesn't make the channel auto flushing (KTOR-8411)

`v3.2.3`

Compare Source

Published 29 July 2025

Improvements

Server only accepts yaml as the configuration file suffix (KTOR-8712)
JS / WASM error when process global is undefined (KTOR-8686)
DI async duplicate resolution (KTOR-8681)

Bugfixes

CIO: Expect 100-continue response is missing a final \r\n (KTOR-8687)
Intermittent "ParserException: No colon in HTTP header" when parsing multipart request (KTOR-8523)
Infinite loop in ByteReadChannel.readFully (KTOR-8682)
ShutDownUrl: The server cannot shut down since 3.2.0 (KTOR-8674)

`v3.2.2`

Compare Source

Published 14 July 2025

Improvements

SSE: Change the order of SSE field serialization: put event before data (KTOR-8627)

Bugfixes

CORS: server replies with the 405 status code on a preflight request when the plugin is installed in a route (KTOR-4499)
Darwin: The Content-Encoding header is removed since 3.0.3 (KTOR-8526)
JS/WASM: response doesn't contain the Content-Length header in a browser (KTOR-8377)
StatusPages: response headers of OutgoingContent aren't available in the status handlers (KTOR-8232)
testApplication: The client.sse() acts like a REST call and not a stream in test environment (KTOR-7910)
Config deserialization - default properties problem (KTOR-8654)
kotlinx.datetime is not available transitively in 3.2.1 (KTOR-8656)
Request builder block overrides HTTP method in specific request builders (get, post, etc) (KTOR-8636)

`v3.2.1`

Compare Source

Published 3 July 2025

Improvements

Replace kotlinx.datetime APIs with kotlin.time (KTOR-8635)
Thymeleaf: null values in template model (KTOR-8559)
Publish Javadoc as a maven artifact (KTOR-3962)
Netty: Invalid hex byte with malformed query string (KTOR-2934)

Bugfixes

"Space characters in SimpleName" error when executing R8 mergeExtDex task with 3.2.0 (KTOR-8583)
ForwardedHeaders: the plugin does not handle parameters case-insensitively (KTOR-8622)
Potential race condition in socket.awaitClosed (hangs indefinitely) since 3.2.0 (KTOR-8618)
Module parameter type Application.() -> kotlin.Unit is not supported in 3.2.0 (KTOR-8602)
OkHttp: java.net.ProtocolException when sending MultiPartFormDataContent with onUpload (KTOR-6790)
OAuth2 authentication provider breaks form-urlencoded POST requests when receiving request body (KTOR-4420)
404 for a link in KDoc for io.ktor.server.plugins.contentnegotiation.ContentNegotiation (KTOR-8597)
Ktor fails to boot with default jvminline argument (KTOR-8608)
Flow invariant is violated since 3.2.0 (KTOR-8606)
ResponseSent hook handler of the plugin installed into a route isn't executed when an exception is thrown from the route (KTOR-6794)

`v3.2.0`

Compare Source

Published 12 June 2025

Features

Dependency injection Ktor extension (KTOR-8267)
Support Version Catalog (KTOR-8162)
Unix domain socket support at the Ktor Engine level (KTOR-4766)
Allow suspend Ktor modules (KTOR-8005)
Ability to use browser cookie storage (KTOR-539)
Configuration file deserialization (KTOR-7874)
HttpCache: Support evicting/clearing cache (KTOR-6653)
File configuration for dependencies (KTOR-8304)

Improvements

Excessive allocation of ApplicationConfig when loading multiple files from CLI (KTOR-8563)
Linux curl engine doesn't work for simultaneous websocket and http request (KTOR-8259)
ktor-network produces ProGuard warning (KTOR-8525)
More overloads for StringValuesBuilder.appendAll (KTOR-8573)
HttpClientCall: Deprecate wrapWithContent and wrap (KTOR-8378)
Add a way to create an ApplicationCall for testing (KTOR-7607)
Configuration access API improvements (KTOR-8185)
Application instance access in testApplication (KTOR-8215)
The TestApplication client should be configurable and mutable (KTOR-8465)
Support accessing resolved IP address on an instance of io.ktor.network.sockets.InetSocketAddress (KTOR-8490)
Deprecate SaveBodyPlugin in favor of HttpClientCall.save (KTOR-8367)
Obscure log message on server startup (KTOR-8519)
Routing: accept should return 406 if the Accept header isn't matched (KTOR-8416)
MicrometerMetrics: the route label can exceed length limit (KTOR-7274)
Micrometer: Make route label configurable (KTOR-8183)
Add more common ContentType values (KTOR-7108)

Bugfixes

Logging/Darwin: IOException is thrown when detecting if body is a binary (KTOR-8581)
Netty: NoSuchElementException or empty headers when responding with 204 (KTOR-8528)
YAML configuration: NoSuchElementException when parameter is expanded with curly braces (KTOR-8575)
ApplicationConfig: Most of the content is absent after merging configs (KTOR-8565)
Android: "ProtocolException: TRACE does not support writing" when sending TRACE request (KTOR-8352)
The "Content-Length: 0" header is added for GET requests sent to some servers (KTOR-6508)
HttpRequestRetry: requests with some IOException's thrown by Java engine aren't retried (KTOR-6770)
HttpCookies: Encoding of request cookies is not preserved in CookiesStorage (KTOR-8343)
Url class mangles data URLs (KTOR-5708)
SaveBodyPlugin: Logging plugin consumes response body (KTOR-6474)
Config deserialization does not respect testApplication environment (KTOR-8436)
Resources: Exclude a parent from query params when it is an object (KTOR-8507)
BearerAuthProvider does not clear token if refreshTokens returns null (KTOR-8470)
Coroutines launched from RoutingContext are not cancelled upon server shutdown (KTOR-8338)
Application job is not joined during shutdown (KTOR-8291)
HttpCache: InvalidCacheStateException thrown when Vary header has different entries is overly severe (KTOR-8345)
Fix socket channel close handling (KTOR-8201)

`v3.1.3`

Compare Source

Published 5 May 2025

Improvements

Implement toString for staticContentRoute (KTOR-8451)
Don't send Authorization header for requests marked with markAsRefreshTokenRequest (KTOR-8107)
ByteChannel single-byte operations are slow (KTOR-8412)
Receiving multipart without Content-Length is very slow (KTOR-8407)
MicrometerMetrics: different path 404s requests can be abused to trigger OOM (KTOR-8276)
Compression & Static Content: No Vary Header when serving a compressed resource (KTOR-8326)
HttpTimeout: Reference to nonexistent INFINITE_TIMEOUT_MS in the exception message (KTOR-8358)

Bugfixes

Websockets: Unable to send a frame when ktor-serialization-kotlinx-js

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-12-22T12:27:51Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 8 package(s) with unknown licenses.

See the Details below.

License Issues

pom.xml

Package	Version	License	Issue Type
com.expediagroup:graphql-kotlin-client-jackson	10.0.0	Null	Unknown License
com.expediagroup:graphql-kotlin-ktor-client	10.0.0	Null	Unknown License
com.expediagroup:graphql-kotlin-maven-plugin	10.0.0	Null	Unknown License
com.github.gantsign.maven:ktlint-maven-plugin	3.7.1	Null	Unknown License
io.github.oshai:kotlin-logging-jvm	8.0.4	Null	Unknown License
io.ktor:ktor-client-logging-jvm	3.5.0	Null	Unknown License
org.apache.maven.plugins:maven-enforcer-plugin	3.6.3	Null	Unknown License
org.apache.maven.plugins:maven-surefire-plugin	3.5.6	Null	Unknown License

Allowed Licenses:
CC0-1.0, CC-BY-4.0, Unlicense, WTFPL, 0BSD, MIT, Apache-2.0, ISC, BSD-2-Clause, BSD-3-Clause, Zlib, MPL-1.1, MPL-2.0, CDDL-1.0, EPL-1.0, EPL-2.0, CECILL-2.1, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, EUPL-1.0, EUPL-1.1, EUPL-1.2, AAL, AFL-3.0, Apache-1.1, APL-1.0, APSL-2.0, Artistic-1.0-Perl, Artistic-2.0, BlueOak-1.0.0, BSL-1.0, CATOSL-1.1, CPAL-1.0, CUA-OPL-1.0, ECL-2.0, EFL-2.0, Entessa, EUDatagrid, Fair, LPPL-1.3c, LPL-1.02, MirOS, Motosoto, Multics, NASA-1.3, NCSA, NTP, Naumen, Nokia, PostgreSQL, PSF-2.0, RPSL-1.0, RSCPL, SimPL-2.0, Sleepycat, SPL-1.0, VSL-1.0, W3C, W3C-20150513, Xnet, ZPL-2.0

Excluded from license check:
pkg:githubactions/trufflesecurity/trufflehog, pkg:npm/knex, pkg:npm/mapbox-gl

OpenSSF Scorecard

Package

Version

Score

Details

maven/com.expediagroup:graphql-kotlin-client-jackson

10.0.0

Unknown

maven/com.expediagroup:graphql-kotlin-ktor-client

10.0.0

Unknown

maven/com.expediagroup:graphql-kotlin-maven-plugin

10.0.0

Unknown

maven/com.github.gantsign.maven:ktlint-maven-plugin

3.7.1

🟢 4.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review	⚠️ 0	Found 1/14 approved changesets -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

maven/io.github.oshai:kotlin-logging-jvm

8.0.4

Unknown

maven/io.ktor:ktor-client-logging-jvm

3.5.0

🟢 4.6

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	⚠️ 0	binaries present in source code
Packaging	🟢 10	packaging workflow detected

maven/io.mockk:mockk-jvm

1.14.11

🟢 5.1

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 10	all changesets reviewed
Security-Policy	🟢 4	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Maintained	🟢 10	30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

maven/org.apache.maven.plugins:maven-enforcer-plugin

3.6.3

🟢 5.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 9/12 approved changesets -- score normalized to 7
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	15 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

maven/org.apache.maven.plugins:maven-surefire-plugin

3.5.6

🟢 5.8

Details

Check	Score	Reason
Maintained	🟢 10	25 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 7	Found 19/25 approved changesets -- score normalized to 7
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	🟢 10	security policy file detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

pom.xml

renovate Bot added the dependencies label Mar 14, 2023

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 7b26420 to e83741c Compare March 16, 2023 08:14

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 2ca574b to 31c255e Compare April 5, 2023 01:47

renovate Bot force-pushed the renovate/all branch from 31c255e to fabb64b Compare April 25, 2023 12:08

renovate Bot force-pushed the renovate/all branch 9 times, most recently from 601717d to 1c31078 Compare May 31, 2023 20:06

renovate Bot force-pushed the renovate/all branch 3 times, most recently from bfa33d3 to 2c7c14e Compare June 7, 2023 22:02

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 6210544 to 8875d2c Compare June 19, 2023 05:27

renovate Bot force-pushed the renovate/all branch 3 times, most recently from dedf4a0 to d95137b Compare June 28, 2023 16:35

renovate Bot force-pushed the renovate/all branch from d95137b to 3242bde Compare July 6, 2023 06:48

renovate Bot force-pushed the renovate/all branch 4 times, most recently from d1fc8bb to 2444022 Compare August 1, 2023 16:00

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3306d16 to fa2fa84 Compare August 14, 2023 14:38

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 28e2dcd to fdbb998 Compare September 19, 2023 00:50

renovate Bot force-pushed the renovate/all branch 3 times, most recently from e792967 to 045a8b1 Compare September 22, 2023 15:06

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 43877e7 to c4f4420 Compare October 5, 2023 09:51

renovate Bot force-pushed the renovate/all branch 4 times, most recently from fecf2c9 to a71d1bc Compare October 13, 2023 08:50

renovate Bot force-pushed the renovate/all branch 6 times, most recently from 9f0ba2f to 374c72e Compare October 26, 2023 13:44

renovate Bot force-pushed the renovate/all branch 5 times, most recently from d7b5baf to b8a8d1b Compare November 3, 2023 07:14

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 94e46b6 to a2aa8ec Compare November 8, 2023 09:08

Update all dependencies

3724158

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies#8

Update all dependencies#8
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Mar 14, 2023 •

edited

Loading

Uh oh!

github-actions Bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 14, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Features

Improvements

Bugfixes

Bugfixes

Improvements

Bugfixes

Improvements

Bugfixes

Features

Improvements

Bugfixes

Improvements

Bugfixes

Improvements

Bugfixes

Improvements

Bugfixes

Features

Improvements

Bugfixes

Improvements

Bugfixes

Improvements

Bugfixes

Improvements

Bugfixes

Features

Improvements

Bugfixes

Improvements

Bugfixes

Configuration

Uh oh!

github-actions Bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

License Issues

pom.xml

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 14, 2023 •

edited

Loading

github-actions Bot commented Dec 22, 2025 •

edited

Loading