5.34.0

Changes between 5.33.1 and 5.34.0

This is a maintenance release with bug fixes and dependency upgrades. It is compatible with 5.33.1. All users are encouraged to upgrade.

Harden connection negotiation phase

GitHub PRs: #2018 #2020

Honor unlimited negotiated frame_max when capping inbound message size

GitHub PR: #2016

Reject negative body size when parsing content headers

GitHub PR: #2014

Bump dependencies

GitHub issue: #2006

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.34.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.34.0'

5.33.1

Changes between 5.33.0 and 5.33.1

This is a maintenance release with a bug fix. It is compatible with 5.33.0. All users are encouraged to upgrade.

Harden ValueReader

GitHub PR: #2008

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.33.1</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.33.1'

5.33.0

Changes between 5.32.0 and 5.33.0

This is a maintenance release with bug fixes and dependency upgrades. It introduces minor breaking changes compared to 5.32.0 (see below for details). All users are encouraged to upgrade.

The RabbitMQ team normally maintain strict backward compatibility in minor versions. However, this release includes exceptional breaking changes that were necessary to patch security gaps and enforce secure-by-default behavior.

Breaking changes:

• Hostname verification is now enabled by default as soon as TLS is used.
• ConnectionFactory#useSslProtocol() now utilizes the JVM's default SSLContext, which validates the server certificate.
  • Note: This should primarily affect test environments, as useSslProtocol() was never intended for production use.
  • Action required: For test or development environments where certificate validation needs to be disabled, users can now explicitly switch to the new ConnectionFactory#useTlsWithNoVerification() method.
• JSON-RPC support classes now introduce an "allowlist". This change only impacts installations that explicitly utilize these classes.

Harden RPC support classes

GitHub PR: #2002

Enable hostname verification by default

GitHub issue: #2005

Introduce helper for dev/test TLS setup

GitHub PR: #2001

Enforce inbound frame max more strictly

GitHub PRs: #1995 #1998

Bump dependencies

GitHub issue: #1991

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.33.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.33.0'

5.32.0

Changes between 5.31.0 and 5.32.0

This is a maintenance release with dependency upgrades. It is compatible with 5.31.0. All users are encouraged to upgrade.

Bump dependencies

GitHub issue: #1973

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.32.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.32.0'

5.31.0

Changes between 5.30.0 and 5.31.0

This is a maintenance release with a usability improvements and dependency upgrades. It is compatible with 5.30.0. All users are encouraged to upgrade.

Use explicit message for malformed frame

GitHub PR: #1960

Bump dependencies

GitHub issue: #1938

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.31.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.31.0'

5.30.0

Changes between 5.29.0 and 5.30.0

This is a maintenance release with bux fixes, usability improvements, and dependency upgrades. It is compatible with 5.29.0. All users are encouraged to upgrade.

Report malformed frame

GitHub PR: #1930
GitHub PR: #1935

Cover more built-in exchange types

GitHub PR: #1922

Use RPC timeout for ChannelN.close

GitHub issue: #1907

Improve PemReader

GitHub PR: #1903

Bump dependencies

GitHub issue: #1888

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.30.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.30.0'

5.29.0

Changes between 5.28.0 and 5.29.0

This is a maintenance release with a new feature and dependency upgrades. It is compatible with 5.28.0. All users are encouraged to upgrade.

Thanks to @hgeraldino for his contribution.

Support PEM keystores

GitHub issue: #1837

Bump dependencies

GitHub issue: #1814

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.29.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.29.0'

5.28.0

Changes between 5.27.1 and 5.28.0

This is a maintenance release with a bug fix and dependency upgrades. It is compatible with 5.27.1. All users are encouraged to upgrade.

Revert ConnectionFactory return type in some methods

GitHub PR: #1813

Bump dependencies

GitHub issue: #1769

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.28.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.28.0'

5.27.1

Changes between 5.27.0 and 5.27.1

This is a patch release with a bug fix in the Netty IO layer. It is compatible with 5.27.0. All users are encouraged to upgrade.

Write byte array in Netty ByteBuf

GitHub issue: #1778

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.27.1</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.27.1'

5.27.0

Changes between 5.26.0 and 5.27.0

Compatibility

This release is source-compatible with 5.26.0 but no binary-compatible due to a change to a return type ofConnectionFactory#useNio (this is fixed in 5.28.0).

Overview

This is a maintenance release with a new feature, a bug fix, dependency upgrades, and some internal refactoring. It is compatible with 5.26.0. All users are encouraged to upgrade.

This release introduces a Netty-based frame handler and deprecates the NIO-based one. Users of NIO are encouraged to switch to Netty. This does not change anything for users of the default frame handler (socket-based, blocking IO).

Add Netty-based frame handler

GitHub PR: #1663

Add Netty dependencies

GitHub issue: #1768

Use lock in channel manager

GitHub PR: #1728

ConcurrentModificationException on channel manager closing

GitHub issue: #1725

Deprecate NIO frame handler

GitHub issue: #1664

Bump dependencies

GitHub issue: #1662

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.27.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.27.0'