Bump io.ktor:ktor-bom from 2.3.3 to 2.3.7

[dependabot]

Bumps io.ktor:ktor-bom from 2.3.3 to 2.3.7.

Release notes

Sourced from io.ktor:ktor-bom's releases.

2.3.7

Published 7 December 2023

Bugfixes

• Server ContentNegotiation no longer allows multiple decoders for one Content-Type (KTOR-5410)
• High Native Server Memory Usage (KTOR-6321)
• WebSockets: Confusing error message when server doesn't respond with Upgrade (KTOR-6397)
• ContentNegotiation: Adding charset to content type of JacksonConverter breaks request matching (KTOR-6420)

2.3.6

Published 7 November 2023

Bugfixes

• Resolved connectors job does not complete in TestApplicationEngine (KTOR-6411)
• Darwin: Even a coroutine Job is canceled network load keeps high (KTOR-6243)
• Darwin: EOFException when sending multipart data using Ktor 2.3.4 (KTOR-6281)
• Ktor JS client unconfigurable logging in node (KTOR-6275)
• CIO: getEngineHeaderValues() returns duplicated values (KTOR-6352)
• "Server sent a subprotocol but none was requested" when using Node WebSockets (KTOR-4001)
• YAML properties with literal value null cannot be read since 2.3.1 (KTOR-6357)
• AndroidClientEngine cannot handle content length that exceeds Int range (KTOR-6344)
• Client unable to make subsequent requests after the network disconnection and connection when ResponseObserver is installed (KTOR-6252)
• Outdated Gradle jib plubin does not support application/vnd.oci.image.index.v1+json media type (KTOR-6280)
• KTor 2.3.5 Kotlin 1.9.x upgrade is a breaking change (KTOR-6354)
• WebSockets (CIO): Connection Failure Due to Lowercase 'upgrade' in 'Connection: upgrade' Header (KTOR-6388)
• WinHttp: ArrayIndexOutOfBoundsException when sending WS frame with empty body (KTOR-6394)
• Update dependency com.auth0:jwks-rsa to v0.22.1

2.3.5

Published 5 October 2023

Bugfixes

• 300+ ktor-client-java threads eat up lots of memory (KTOR-6292)
• Apache5 engine limits concurrent requests to individual route to 5 (KTOR-6221)
• DarwinClientEngine WebSocket rejects all received pongs (KTOR-5540)

2.3.4

Published 31 August 2023

Bugfixes

• The "charset=UTF-8" part is automatically added to the application/json Content-Type (KTOR-6183)
• MicrometerMetricsConfig default registry leaks coroutine (KTOR-6178)
• Darwin: App hangs when sending a huge MultiPart request without access to network (KTOR-6147)
• NPE in JavaClientEngine body() call (KTOR-6190)
• Digest Auth: algorithm isn't specified in the Authorization header (KTOR-3391)
• Confusing NoTransformationFoundException (KTOR-6064)
• Cookie name-value pairs should be separated by a semicolon instead of a comma (KTOR-5868)

Changelog

Sourced from io.ktor:ktor-bom's changelog.

2.3.7

Published 28 November 2023

Bugfixes

• Server ContentNegotiation no longer allows multiple decoders for one Content-Type (KTOR-5410)
• High Native Server Memory Usage (KTOR-6321)
• WebSockets: Confusing error message when server doesn't respond with Upgrade (KTOR-6397)
• ContentNegotiation: Adding charset to content type of JacksonConverter breaks request matching (KTOR-6420)

2.3.6

Published 7 November 2023

Bugfixes

• Resolved connectors job does not complete in TestApplicationEngine (KTOR-6411)
• Darwin: Even a coroutine Job is canceled network load keeps high (KTOR-6243)
• Darwin: EOFException when sending multipart data using Ktor 2.3.4 (KTOR-6281)
• Ktor JS client unconfigurable logging in node (KTOR-6275)
• CIO: getEngineHeaderValues() returns duplicated values (KTOR-6352)
• "Server sent a subprotocol but none was requested" when using Node WebSockets (KTOR-4001)
• YAML properties with literal value null cannot be read since 2.3.1 (KTOR-6357)
• AndroidClientEngine cannot handle content length that exceeds Int range (KTOR-6344)
• Client unable to make subsequent requests after the network disconnection and connection when ResponseObserver is installed (KTOR-6252)
• Outdated Gradle jib plubin does not support application/vnd.oci.image.index.v1+json media type (KTOR-6280)
• KTor 2.3.5 Kotlin 1.9.x upgrade is a breaking change (KTOR-6354)
• WebSockets (CIO): Connection Failure Due to Lowercase 'upgrade' in 'Connection: upgrade' Header (KTOR-6388)
• WinHttp: ArrayIndexOutOfBoundsException when sending WS frame with empty body (KTOR-6394)
• Update dependency com.auth0:jwks-rsa to v0.22.1

2.3.5

Published 5 October 2023

Bugfixes

• 300+ ktor-client-java threads eat up lots of memory (KTOR-6292)
• Apache5 engine limits concurrent requests to individual route to 5 (KTOR-6221)
• DarwinClientEngine WebSocket rejects all received pongs (KTOR-5540)

2.3.4

Published 31 August 2023

Bugfixes

• The "charset=UTF-8" part is automatically added to the application/json Content-Type (KTOR-6183)
• MicrometerMetricsConfig default registry leaks coroutine (KTOR-6178)
• Darwin: App hangs when sending a huge MultiPart request without access to network (KTOR-6147)
• NPE in JavaClientEngine body() call (KTOR-6190)
• Digest Auth: algorithm isn't specified in the Authorization header (KTOR-3391)
• Confusing NoTransformationFoundException (KTOR-6064)
• Cookie name-value pairs should be separated by a semicolon instead of a comma (KTOR-5868)

Commits

• d5cf25d Update vulnerable dependencies (#3857)
• 1eb4b55 Release 2.3.7 (#3852)
• 97362b8 Update versions
• 4d00349 Fix publication config
• 8daecf7 Fix mingwx64 compilation (#3808)
• 4af16bb Add a changelog
• d599b54 KTOR-6411 resolve connectors in the test engine (#3798)
• d55a1ff Update dependency com.auth0:jwks-rsa to v0.22.1 (#3750)
• 89805f7 KTOR-6354 Revert 1.9.10 Kotlin update (#3785)
• 2d0ddda Drop flaky test (#3756)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)