v6.0.2

Fixes

• String conversion of headers and properties in SpEL expressions
• TLS connections to SOAP backends

---

A few breaking changes were introduced in version 6.0.0; please refer to the Migration Guide for required updates.

v6.0.1

Fixes

• Set Java version in Dockerfile to 21

---

A few breaking changes were introduced in version 6.0.0; please refer to the Migration Guide for required updates.

v6.0.0

Membrane 6 marks a significant upgrade from version 5 with extensive refactoring and improvements throughout the codebase.

New Features

• Enhanced Scripting Functionality:
  The setHeader, setProperty and rateLimiter now support Groovy, XPath, and Jsonpath, offering greater versatility.
• API Key Stores:
  API key store support has been added for JDBC and MongoDB, enhancing security and access control.

Improvements

• Flow Control:
  Flow control is now managed through definitions in the proxies.xml file rather than a stack of executed interceptors, resulting in clearer configuration and more predictable behavior.
• Enhanced Logging:
  The updated log plugin offers a cleaner configuration and advanced features, including the ability to dump both the exchange and its properties.
• Standardized Error Handling:
  Most error messages now adhere to the ProblemDetails format with ordered fields, ensuring consistency and better readability.
• Improved OpenAPI Support:
  References within OpenAPI specifications are now fully supported, facilitating comprehensive API documentation. OpenAPI version 3.1 is now also supported.

Fixes

• Lots of smaller fixes improving overall stability

---

A few breaking changes were introduced in version 6.0.0; please refer to the Migration Guide for required updates.

v5.8.2

Fixes:

• Performance: Outbound HTTPS connections idling in the pool are now reused. (@Lucamadio)

v5.5.12

Fixes:

• Performance: Outbound HTTPS connections idling in the pool are now reused. (@Lucamadio)

v5.8.1

Improvements:

• <graphQLProtection>: counts nested mutations, now has an example. (@predic8)
• <openapi>: minor improvements, added note to Swagger 2 specifications which were automatically converted to OpenAPI 3.1 .
• Keepalive: check whether socket is closed before trying to reuse a TCP connection (#1576, @idylmz)

Fixes:

• <oauth2Resource2> with <flowInitiator> (B2C): default flow uses wrong token endpoint after initiating but not completing non-default flow (@rrayst)
• Mark HTTP body only as read, if it has been read completely. In some configuration scenarios, this causes HTTP connections to be correctly closed again and/or returned to the pool for reuse.

Dependency upgrades.

v5.5.11

Fixes:

• Mark HTTP body only as read, if it has been read completely. In some configuration scenarios, this causes HTTP connections to be correctly closed again and/or returned to the pool for reuse.

v5.5.10

Fixes:

• <oauth2Resource2> with <flowInitiator> (B2C): default flow uses wrong token endpoint after initiating but not completing non-default flow

v5.8.0

New Features

• OpenAPI 3.1 Support: Added compatibility with version 3.1 of the OpenAPI Specification.
• API Greasing: Introduced a new feature to streamline API lifecycle management.

Upgrades

• Dependency Updates: Upgraded various dependencies for enhanced stability and security.

Improvements

• XML Content Support: Mixed Configuration Elements now accept XML content (#1388).
• Enhanced XML Protection: XML messages containing external entities are consistently blocked for improved security.
• Detailed Error Handling: Enhanced ProblemDetails messages and added more specific details in error reports.
• Improved Logging: Logs are now more structured, facilitating easier debugging and monitoring.
• Expanded and Rewritten Examples:
  • Internal Proxy
  • API Keys
  • SOAP Validation
  • JSONPath

Bug Fixes

• OpenTelemetry Issue: Resolved missing library for OpenTelemetry integration (#1378).
• WSDL Parsing: Fixed an issue with reading WSDL files that include a UTF-8 BOM.

v5.5.9

Fixes:

• Tests