Releases: quickfix-j/quickfixj
3.0.1
What's Changed
- Update Maven Central badge to Sonatype Central by @chrjohn in #1153
- Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #1155
- Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 by @dependabot[bot] in #1154
- Bump org.apache.maven:maven-plugin-api from 3.9.12 to 3.9.13 by @dependabot[bot] in #1157
- Trimming oversized
Message StringBuilderto page size by @the-thing in #1159 - HTTP proxy tests by @the-thing in #1152
- Add FixMock library link to README by @chrjohn in #1162
- Update supported versions in SECURITY.md by @chrjohn in #1163
- Bump org.apache.maven:maven-plugin-api from 3.9.13 to 3.9.14 by @dependabot[bot] in #1161
- Bump SmartsquareGmbH/delete-old-packages from 0.8.1 to 1.0.0 by @dependabot[bot] in #1165
- Convert configuration options to Markdown by @chrjohn in #1160
- Fix spelling, grammar in
configuration.mdby @chrjohn in #1168 - Suppress noisy
WriteToClosedSessionExceptionerrors by @the-thing in #1166 - Fix non-self-closing
<br>tags inconfiguration.mdby @Copilot in #1169 - Update links and descriptions in
configuration.mdby @chrjohn in #1170 - Update section title from 'QuickFIX' to 'QuickFIX/J' by @chrjohn in #1174
- Bump io.netty:netty-example from 4.2.10.Final to 4.2.12.Final by @dependabot[bot] in #1176
- Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 by @dependabot[bot] in #1177
SSLFiltersocket linger by @the-thing in #1178- Add doc on threading model by @Copilot in #1180
- Update deployment step to include retry mechanism by @chrjohn in #1182
- Static inner classes, autoboxing changes, typos by @abhishekraha in #1057
- Bump jaxen:jaxen from 2.0.0 to 2.0.1 by @dependabot[bot] in #1186
- Bump org.apache.maven:maven-plugin-api from 3.9.14 to 3.9.15 by @dependabot[bot] in #1187
- Add scheduled workflow to auto-update Maven Wrapper and Maven distribution by @Copilot in #1188
- fix: derive latest stable Maven version from
<version>entries instead of<release>tag by @Copilot in #1189 - chore: update Maven Wrapper to 3.9.15 by @github-actions[bot] in #1190
- Change cron schedule and update PR commit message for Maven wrapper update by @chrjohn in #1191
- Bump peter-evans/create-pull-request from 7 to 8 by @dependabot[bot] in #1192
- Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #1193
- Bump junit.jupiter.version from 5.14.3 to 5.14.4 by @dependabot[bot] in #1196
- Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 by @dependabot[bot] in #1197
- Remove junie by @chrjohn in #1205
- extract
quickfixj-class-pruner-maven-plugininto standalone repository by @Copilot in #1184 - Delete
quickfixj-class-pruner-maven-plugindirectory by @chrjohn in #1209 - chore: clean up POM after
class-prunermoved to its own repo by @Copilot in #1210 - Fix compiler warning in
SSLCertificateTest.parameters()by @Copilot in #1213 - reset disabled session per
SessionScheduleto avoid message loss on Logon by @Ra9huvansh in #1181 - Update
dependabot.ymlto ignore specific Maven dependency by @chrjohn in #1216 - Unblock Dependabot security updates by bumping MINA to 2.2.7 and removing stale config-level ignore by @Copilot in #1217
- Stabilize external-DTD dictionary loading in
MessageTestwith short timeouts and bounded retries by @Copilot in #1220 - Add per-test logging to
SocksProxyTestby @Copilot in #1222
New Contributors
- @abhishekraha made their first contribution in #1057
- @github-actions[bot] made their first contribution in #1190
- @Ra9huvansh made their first contribution in #1181
Full Changelog: QFJ_RELEASE_3_0_0...QFJ_RELEASE_3_0_1
3.0.0
Release notes: https://github.com/quickfix-j/quickfixj/wiki/QFJ-3.0.0-release-notes
Full Changelog: QFJ_RELEASE_2_3_2...QFJ_RELEASE_3_0_0
New Contributors
- @zhaojunmo made their first contribution in #404
- @esanchezros made their first contribution in #395
- @fillreject made their first contribution in #352
- @dparui made their first contribution in #316
- @JKlmrk made their first contribution in #489
- @raipc made their first contribution in #462
- @korzha made their first contribution in #380
- @harinda05 made their first contribution in #549
- @stasal made their first contribution in #451
- @busy-spin made their first contribution in #573
- @vinipx made their first contribution in #575
- @jacques0803 made their first contribution in #481
- @andreasbuechel made their first contribution in #649
- @msmat0 made their first contribution in #658
- @ChoiJunsik made their first contribution in #750
- @spoerri made their first contribution in #767
- @wajncn made their first contribution in #775
- @gbirchmeier made their first contribution in #889
- @andreydp made their first contribution in #674
- @frankk-d made their first contribution in #957
- @krisbanas made their first contribution in #950
- @jetbrains-junie[bot] made their first contribution in #982
- @Ramonster1 made their first contribution in #988
- @wilson-zh made their first contribution in #1083
- @Copilot made their first contribution in #1094
- @ishabandi67 made their first contribution in #819
2.3.2
This is a bug fix release. It contains only few bug fixes and upgrades the MINA library to 2.2.4 since prior versions are vulnerable to RCE: https://www.cve.org/CVERecord?id=CVE-2024-52046 . However, QFJ is not directly affected by this since it does not use the affected ObjectSerializationCodecFactory.
https://github.com/quickfix-j/quickfixj/wiki/QuickFIX-J-2.3.2-release-notes
2.3.1
This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.
https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes
2.2.1
This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.
https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes