Releases: folio-org/edge-common
v4.4.2
- EDGCOMMON-56 Upgrade all dependencies; Jackson 2.14.0 fixes CVE-2022-42003
v4.4.1
- EDGCOMMON-54 Vert.x 4.3.3 fixing disabled SSL in 4.3.0/4.3.1
v4.4.0
- EDGCOMMON-51 Futurize MockOkapi for Junit 5 and .compose
- EDGCOMMON-52 Enable "Accept-Encoding: deflate, gzip" by default
- EDGCOMMON-53 Deprecate X-Duration, provide setDelay, fix timeout reporting
Upgrading notes:
Edge module must no longer copy HTTP headers from the incoming request to the outgoing
request. Remove deny list code like ctx.request().headers().remove(CONTENT_LENGTH)
. For security
use an allow list to copy only the HTTP headers that really are needed, if any. Support for this has
been added to edge-common's Handler and MockOkapi classes.
Replace
mockOkapi.start(testContext)
with
mockOkapi.start()
.onComplete(testContext.asyncAssertSuccess());
and
mockOkapi.close(testContext);
with
mockOkapi.close()
.onComplete(context.asyncAssertSuccess());
v4.3.0
- EDGCOMMON-49 Upgrade dependencies: Vert.x 4.3.1, ...
- EDGCOMMON-48 Remove vertx-completable-future
- EDGCOMMON-47 Fix behavior when tenant header is present in a request]
- EDGCOMMON-46 Vert.x 4.2.7 fixing jackson-databind DoS (CVE-2020-36518)
- EDGCOMMON-45 Reuse WebClient for pooling, pipe-lining, multiplexing
- EDGCOMMON-43 Update dependencies including Vert.x 4.2.4, Log4j 2.17.1
- EDGCOMMON-42 cryptographically strong random for token and salt
- EDGCOMMON-40 Upgrade to log4j 2.17.0
- EDGCOMMON-38 Upgrade to log4j 2.16.0, Vert.x 4.2.2
- EDGCOMMON-21 Do not block the Vert.x main thread when retrieving data from the secure store
v4.2.3
- EDGCOMMON-43 Update dependencies including Vert.x 4.2.4, Log4j 2.17.1
- EDGCOMMON-42 Use cryptographically strong random for token and salt
v4.2.2
- EDGCOMMON-40 Upgrade to log4j 2.17.0
v4.2.1
- EDGCOMMON-38 Upgrade to log4j 2.16.0, Vert.x 4.2.2
v4.2.0
- Defines request timeout when making HTTP requests (EDGCOMMON-36)
v4.1.0
No changes to the API since last release.
- EDGCOMMON-34 Upgrade to Vert.x 4.1.0
v4.0.0
This releases changes the API for edge-common. There are no known changes
to the HTTP behavior or the configuration of edge-common.
The existing HTTP-based verticle has been renamed to EdgeVerticleHttp
.
A new verticle without a built-in listener is offered, EdgeVerticleCore
.
Since edge-common is now based on Vert.x 4.0.0, that will probably
also require updates to module code. Refer to
4.0.0 Deprecations and breaking changes
Issues pertaining to this release (some of which are related):
- EDGCOMMON-5 Merge EdgeVerticle2 -> EdgeVerticle
- EDGCOMMON-19 Update dependencies
- EDGCOMMON-30 Update to Vert.x 4
- EDGCOMMON-31 Allow non-HTTP server
- EDGCOMMON-32 EdgeVerticleHttp and update documentation