Switch to Java 11's HttpClient

Author: oschwald

.github/workflows/test.yml

@@ -7,7 +7,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
-        version: [ 8, 9, 10, 11, 12, 13, 14, 15 ]
+        version: [ 11, 12, 13, 14, 15 ]
     steps:
       - uses: actions/checkout@v2
         with:

CHANGELOG.md

@@ -1,9 +1,23 @@
 CHANGELOG
 =========
 
-1.19.0
+2.0.0
 -------------------
 
+* Java 11 or greater is now required.
+* Apache HttpClient has been replaced with `java.net.http.HttpClient`.
+* The `close()` method on `WebServiceClient` is now deprecated. It
+  no longer does anything.
+* On `WebServiceClient.Builder`:
+  * `connectTimeout(int)` has been deprecated in favor of
+    `connectTimeout(Duration)`.
+  * `readTimeout(int)` has been deprecated in favor of
+    `requestTimeout(Duration)`.
+  * `proxy(Proxy)` has been deprecated in favor of `proxy(ProxySelector)`.
+* On `HttpException` and `InvalidRequestException`, `getUrl()` has been
+  deprecated in favor of `getUri()`. Constructors that took a `URL` have
+  been replaced with the equivalent taking a `URI`.
+* Deprecated constructors on model classes were removed.
 * Upgraded the `geoip2` dependency to 2.16.1. This adds mobile country code
   (MCC) and mobile network code (MNC) to minFraud Insights and Factors
   responses. These are available at

README.md

@@ -271,9 +271,9 @@ If you are having an issue with the minFraud service that is not specific
 to the client API, please see
 [our support page](https://www.maxmind.com/en/support).
 
-## Requirements  ##
+## Requirements ##
 
-This code requires Java 8+.
+This code requires Java 11+.
 
 ## Contributing ##
 

pom.xml

@@ -64,29 +64,6 @@
             <artifactId>geoip2</artifactId>
             <version>2.16.1</version>
         </dependency>
-        <dependency>
-            <groupId>org.apache.httpcomponents</groupId>
-            <artifactId>httpclient</artifactId>
-            <version>4.5.13</version>
-        </dependency>
-        <dependency>
-            <!-- httpclient pulls this in. We pull in a newer version
-            because of a security issue in 1.11 -->
-            <groupId>commons-codec</groupId>
-            <artifactId>commons-codec</artifactId>
-            <version>1.15</version>
-        </dependency>
-        <!--
-            commons-validator 1.6 depends on an older version of
-            commons-beanutils with a CVE. So add a direct dependency on the
-            commons-beanutils version that is fixed, while we wait for
-            commons-validator to be updated.
-        -->
-        <dependency>
-            <groupId>commons-beanutils</groupId>
-            <artifactId>commons-beanutils</artifactId>
-            <version>1.9.4</version>
-        </dependency>
         <dependency>
             <groupId>commons-validator</groupId>
             <artifactId>commons-validator</artifactId>
@@ -160,7 +137,7 @@
                 <version>3.3.1</version>
                 <configuration>
                     <show>public</show>
-                    <source>8</source>
+                    <source>11</source>
                 </configuration>
             </plugin>
             <plugin>
@@ -186,8 +163,9 @@
                 <artifactId>maven-compiler-plugin</artifactId>
                 <version>3.8.1</version>
                 <configuration>
-                    <source>1.8</source>
-                    <target>1.8</target>
+                    <release>11</release>
+                    <source>1.11</source>
+                    <target>1.11</target>
                 </configuration>
             </plugin>
             <plugin>