Skip to content

Releases: quickfix-j/quickfixj

3.0.1

12 May 10:18

Choose a tag to compare

What's Changed

  • Update Maven Central badge to Sonatype Central by @chrjohn in #1153
  • Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #1155
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 by @dependabot[bot] in #1154
  • Bump org.apache.maven:maven-plugin-api from 3.9.12 to 3.9.13 by @dependabot[bot] in #1157
  • Trimming oversized Message StringBuilder to page size by @the-thing in #1159
  • HTTP proxy tests by @the-thing in #1152
  • Add FixMock library link to README by @chrjohn in #1162
  • Update supported versions in SECURITY.md by @chrjohn in #1163
  • Bump org.apache.maven:maven-plugin-api from 3.9.13 to 3.9.14 by @dependabot[bot] in #1161
  • Bump SmartsquareGmbH/delete-old-packages from 0.8.1 to 1.0.0 by @dependabot[bot] in #1165
  • Convert configuration options to Markdown by @chrjohn in #1160
  • Fix spelling, grammar in configuration.md by @chrjohn in #1168
  • Suppress noisy WriteToClosedSessionException errors by @the-thing in #1166
  • Fix non-self-closing <br> tags in configuration.md by @Copilot in #1169
  • Update links and descriptions in configuration.md by @chrjohn in #1170
  • Update section title from 'QuickFIX' to 'QuickFIX/J' by @chrjohn in #1174
  • Bump io.netty:netty-example from 4.2.10.Final to 4.2.12.Final by @dependabot[bot] in #1176
  • Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 by @dependabot[bot] in #1177
  • SSLFilter socket linger by @the-thing in #1178
  • Add doc on threading model by @Copilot in #1180
  • Update deployment step to include retry mechanism by @chrjohn in #1182
  • Static inner classes, autoboxing changes, typos by @abhishekraha in #1057
  • Bump jaxen:jaxen from 2.0.0 to 2.0.1 by @dependabot[bot] in #1186
  • Bump org.apache.maven:maven-plugin-api from 3.9.14 to 3.9.15 by @dependabot[bot] in #1187
  • Add scheduled workflow to auto-update Maven Wrapper and Maven distribution by @Copilot in #1188
  • fix: derive latest stable Maven version from <version> entries instead of <release> tag by @Copilot in #1189
  • chore: update Maven Wrapper to 3.9.15 by @github-actions[bot] in #1190
  • Change cron schedule and update PR commit message for Maven wrapper update by @chrjohn in #1191
  • Bump peter-evans/create-pull-request from 7 to 8 by @dependabot[bot] in #1192
  • Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #1193
  • Bump junit.jupiter.version from 5.14.3 to 5.14.4 by @dependabot[bot] in #1196
  • Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 by @dependabot[bot] in #1197
  • Remove junie by @chrjohn in #1205
  • extract quickfixj-class-pruner-maven-plugin into standalone repository by @Copilot in #1184
  • Delete quickfixj-class-pruner-maven-plugin directory by @chrjohn in #1209
  • chore: clean up POM after class-pruner moved to its own repo by @Copilot in #1210
  • Fix compiler warning in SSLCertificateTest.parameters() by @Copilot in #1213
  • reset disabled session per SessionSchedule to avoid message loss on Logon by @Ra9huvansh in #1181
  • Update dependabot.yml to ignore specific Maven dependency by @chrjohn in #1216
  • Unblock Dependabot security updates by bumping MINA to 2.2.7 and removing stale config-level ignore by @Copilot in #1217
  • Stabilize external-DTD dictionary loading in MessageTest with short timeouts and bounded retries by @Copilot in #1220
  • Add per-test logging to SocksProxyTest by @Copilot in #1222

New Contributors

Full Changelog: QFJ_RELEASE_3_0_0...QFJ_RELEASE_3_0_1

3.0.0

04 Mar 09:49

Choose a tag to compare

Release notes: https://github.com/quickfix-j/quickfixj/wiki/QFJ-3.0.0-release-notes

Full Changelog: QFJ_RELEASE_2_3_2...QFJ_RELEASE_3_0_0

New Contributors

2.3.2

10 Jan 12:25

Choose a tag to compare

This is a bug fix release. It contains only few bug fixes and upgrades the MINA library to 2.2.4 since prior versions are vulnerable to RCE: https://www.cve.org/CVERecord?id=CVE-2024-52046 . However, QFJ is not directly affected by this since it does not use the affected ObjectSerializationCodecFactory.

https://github.com/quickfix-j/quickfixj/wiki/QuickFIX-J-2.3.2-release-notes

2.3.1

11 Nov 13:04

Choose a tag to compare

This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.

https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes

2.2.1

12 Nov 10:58

Choose a tag to compare

This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.

https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes

2.3.0

29 Apr 23:36

Choose a tag to compare

2.2.0

17 Jun 14:06

Choose a tag to compare

2.1.1

11 Jan 11:39

Choose a tag to compare

2.1.0

03 Aug 11:28

Choose a tag to compare

2.0.0

22 Nov 13:04

Choose a tag to compare