Sourced from org.asynchttpclient:async-http-client's releases.

AHC v3.0.2 Release

What's Changed

• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.33 to 10.1.34 by @​dependabot in AsyncHttpClient/async-http-client#2044
• Bump brotli4j.version from 1.17.0 to 1.18.0 by @​dependabot in AsyncHttpClient/async-http-client#2045
• Bump netty.version from 4.1.115.Final to 4.1.116.Final by @​dependabot in AsyncHttpClient/async-http-client#2049
• Bump io.netty.incubator:netty-incubator-transport-native-io_uring from 0.0.25.Final to 0.0.26.Final by @​dependabot in AsyncHttpClient/async-http-client#2052
• Bump com.uber.nullaway:nullaway from 0.12.1 to 0.12.3 by @​dependabot in AsyncHttpClient/async-http-client#2055
• Bump ch.qos.logback:logback-classic from 1.5.12 to 1.5.16 by @​dependabot in AsyncHttpClient/async-http-client#2054
• Bump org.junit:junit-bom from 5.11.3 to 5.11.4 by @​dependabot in AsyncHttpClient/async-http-client#2046
• Bump org.jetbrains:annotations from 26.0.1 to 26.0.2 by @​dependabot in AsyncHttpClient/async-http-client#2058
• Bump com.github.luben:zstd-jni from 1.5.6-8 to 1.5.6-9 by @​dependabot in AsyncHttpClient/async-http-client#2057
• Bump netty.version from 4.1.116.Final to 4.1.117.Final by @​dependabot in AsyncHttpClient/async-http-client#2056
• Bump netty.version from 4.1.117.Final to 4.1.118.Final by @​dependabot in AsyncHttpClient/async-http-client#2060
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.34 to 10.1.35 by @​dependabot in AsyncHttpClient/async-http-client#2061
• Bump io.github.nettyplus:netty-leak-detector-junit-extension from 0.0.5 to 0.0.6 by @​dependabot in AsyncHttpClient/async-http-client#2062
• netty leak detector 0.0.6 by @​sullis in AsyncHttpClient/async-http-client#2059
• enable leak detection in AutomaticDecompressionTest by @​sullis in AsyncHttpClient/async-http-client#2064
• Bump com.github.luben:zstd-jni from 1.5.6-9 to 1.5.6-10 by @​dependabot in AsyncHttpClient/async-http-client#2063
• use larger payload in AutomaticDecompressionTest by @​sullis in AsyncHttpClient/async-http-client#2065
• fix: inappropriate connection reuse when using HTTP proxy if the initial CONNECT failed by @​jasonjoo2010 in AsyncHttpClient/async-http-client#2072
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 by @​dependabot in AsyncHttpClient/async-http-client#2069
• Bump com.github.luben:zstd-jni from 1.5.6-10 to 1.5.7-1 by @​dependabot in AsyncHttpClient/async-http-client#2067
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.35 to 10.1.36 by @​dependabot in AsyncHttpClient/async-http-client#2066
• fix: send CONNECT first when recovering a HTTPS request by @​jasonjoo2010 in AsyncHttpClient/async-http-client#2077
• Bump netty.version from 4.1.118.Final to 4.1.119.Final by @​dependabot in AsyncHttpClient/async-http-client#2076
• Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.36 to 10.1.39 by @​dependabot in AsyncHttpClient/async-http-client#2073
• Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 by @​dependabot in AsyncHttpClient/async-http-client#2084
• Bump com.uber.nullaway:nullaway from 0.12.3 to 0.12.6 by @​dependabot in AsyncHttpClient/async-http-client#2082
• Bump com.github.luben:zstd-jni from 1.5.7-1 to 1.5.7-2 by @​dependabot in AsyncHttpClient/async-http-client#2078
• Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.18 by @​dependabot in AsyncHttpClient/async-http-client#2080
• Disable Dependabot by @​hyperxpro in AsyncHttpClient/async-http-client#2085
• Release v3.0.2 by @​hyperxpro in AsyncHttpClient/async-http-client#2086

New Contributors

• @​jasonjoo2010 made their first contribution in AsyncHttpClient/async-http-client#2072

Full Changelog: https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-3.0.1...async-http-client-project-3.0.2

AHC v3.0.1 Release

Security Advisory

https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv

Important

This is a breaking release. RequestBuilderBase.java has a new method added. This is in response to GHSA-mfj5-cf8g-g2fv.

What's Changed

• brotli 1.17.0 by @​sullis in AsyncHttpClient/async-http-client#1974
• Enable Dependabot by @​hyperxpro in AsyncHttpClient/async-http-client#1975
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.4.0 by @​dependabot in AsyncHttpClient/async-http-client#1979
• Bump s4u/maven-settings-action from 2.2.0 to 3.0.0 by @​dependabot in AsyncHttpClient/async-http-client#1976

... (truncated)

• 3f1de31 Release v3.0.2 (#2086)
• 4fea3f7 Disable Dependabot (#2085)
• 1f642ba Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.18 (#2080)
• 5977cd3 Bump com.github.luben:zstd-jni from 1.5.7-1 to 1.5.7-2 (#2078)
• 9684069 Bump com.uber.nullaway:nullaway from 0.12.3 to 0.12.6 (#2082)
• acdacfb Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 (#2084)
• 0fe2036 Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.36 to 10.1.39 (#2073)
• 4bd02df Bump netty.version from 4.1.118.Final to 4.1.119.Final (#2076)
• a9a3a7e fix: send CONNECT first when recovering a HTTPS request (#2077)
• 8189c92 Bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.35 to 10.1.36 (#2066)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)