fix(deps): update http4k monorepo to v6 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.http4k:http4k-format-moshi (source)	5.47.0.0 -> 6.25.0.0
org.http4k:http4k-server-jetty (source)	5.47.0.0 -> 6.25.0.0
org.http4k:http4k-core (source)	5.47.0.0 -> 6.25.0.0

---

Release Notes

http4k/http4k (org.http4k:http4k-format-moshi)

v6.25.0.0

Compare Source

• http4k-*: Upgrade versions, including Kotlin to 2.3.0

v6.24.1.0

Compare Source

• http4k-connect-amazon-scheduler: [New module!] AWS EventBridge Scheduler client. H/T @​aharin
• http4k-connect-amazon-scheduler-fake: [New module!] AWS EventBridge Scheduler fake. H/T @​aharin

v6.24.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-platform-azure: [Fix #​1453] AzureHttpClient blocks forever.
• http4k-platform-docker*: [New module!] Utility module for working with Docker configurations H/T @​time4tea
• http4k-format-toon*: [New module!] Support for compact Toon format. Includes auto-marshalling capabilities.

v6.23.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk*: [Fix] Wire in outputSchema for MCP tools

v6.23.0.0

Compare Source

• http4k-*: Upgrade versions, including Kotlin to 2.2.21
• http4k-multipart: [Fix #​1446] Added length field to MultipartFormFile.
• http4k-format-kondor: Simpler API for registering converters. H/T @​npryce

v6.22.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-core*: [Unlikely break] Introduce QUERY HTTP method as RFC has been approved. H/T @​npryce
• http4k-core*: [Fix #​1438] URL encode Flash cookie content. H/T @​cies
• http4k-core*: [Fix #​1426] Avoiding repeated copies of HttpMessage.bodyString(). H/T @​hermannm

v6.21.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-conformance: [New module!] Published MCP SDK Conformance test server as a separate example module. This allows for wider deployment against the MCP conformance tests.

v6.21.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk: [Breaking] Various tweaks to align with MCP conformance tests. Some trivial breaks, which should make servers better aligned with the spec.

v6.20.2.1

Compare Source

• http4k-realtime-core: [Fix] Better support for all SSE delimiters.
• http4k-ai-mcp-client: [Fix] Better support for all SSE delimiters.

v6.20.2.0

Compare Source

• http4k-*: Upgrade versions
• http4k-realtime-core: SSE client now supports more line ending types (previously only /n/n)
• http4k-ai-mcp-client: MCP client now supports more line ending types (previously only /n/n)

v6.20.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ops-opentelemetry: Set open telemetry http.user_agent and http.client_ip attributes as they are used by AWS Xray. H/T @​aharin
• http4k-ops-opentelemetry: AWS Xray requires message.type and messaging.message_payload_size_bytes. H/T @​aharin
• http4k-ops-opentelemetry: Set span request attribute before span is created so that they can be used by RuleBasedRoutingSampler. H/T @​aharin
• http4k-platform-aws: Add support for configurable payload mode in AwsRequestPreSigner. H/T @​torfinnberset

v6.20.0.3

Compare Source

• http4k-ai-mcp-*: [Fix] Fix up missing extension (accidentally removed).

v6.20.0.2

Compare Source

• http4k-ai-mcp-*: [Fix] Add session id to output in HttpNonStreaming mode

v6.20.0.1

Compare Source

• http4k-ai-mcp-*: [Fix] Some MCP clients require a 200 instead of a 202 in MCP responses (that are stateless)

v6.20.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-*: [Breaking] Non-streaming mode spec: Alignment with the MCP spec to be compatible with clients such as Claude Desktop (change to the spec to not support JSON RPC). This simplifies integration points.

v6.19.0.0

Compare Source

• http4k-*: Upgrade versions, including JUnit to v6.0.0
• http4k-ai-llm-gemini: Fix #​1421. Make strict flag nullable for Gemini chat completions.

v6.18.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-server-helidon: [Unlikely break] Helidon upgrade has slightly changed behaviour around new lines in data events. Before, new lines would be put into multiple data events, now they are preserved in a single event.
• http4k-template-htmlflow: [New module] Typesafe templates using HTMLFlow. H/T @​BernardoPe
• http4k-*: Handle additional connection issues in HTTP Clients. H/T @​alex859

v6.18.0.1

Compare Source

• http4k-*: Fix maven dependencies in published POMs

v6.17.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-mcp-*: [Breaking] These modules are now living under their new coordinates in http4k-ai-mcp-*. Please change your imports and dependencies to reflect this.
• http4k-web-datastar*: [Breaking] This is the post Datastar v1 release. The API has significantly changed to match the changes to D* mechanisms - most notably: Fragments are now called Elements, and the number of SSE events has been reduced from 5 to 2 (datastar-patch-elements and datastar-patch-signals). See the D* docs for more details. You can of course continue to use the old API by using an old version of this module.
• http4k-connect-amazon-cognito [Breaking] Align RespondToAuthChallenge to the official doc. The ChallengeResponses in the response is now a Map<String, String> instead of the incorrect Map<ChallengeName, String>. H/T @​alphaho
• http4k-testing-powerassert [New Module!] Power Assert is now bundled with Kotlin, so it's the perfect assertions library to use! This module provides assertions for http4k entities in your tests.
• http4k-realtime-core: SseMessage.Event now supports retry field.
• http4k-core*: Lenses, content negotiation & routing for accept-like header. H/T @​npryce
• http4k-realtime-core: SseMessage now supports lens injection.

v6.16.0.0

Compare Source

v6.16.0.0

v6.15.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-connect-amazon-instancemetadata: [Fix] Http InstanceMetadataService will now refresh tokens properly. H/T @​oharaandrew314

v6.15.0.1

Compare Source

• http4k-ai-mcp-sdk: [Fix] resource parameter in OAuth corrected (was "resourceUri")

v6.15.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk: [Breaking] Support for 2025-06-18 spec. Changes to require OAuth resource indicators now require the MCP server URL to be used (to prevent token attack) so if you are using OAuth then you will need to specify it at creation time
• http4k-connect-amazon-cloudwatch*: [New module!] with a server fake. H/T @​PaulWMR for the contribution.
• http4k-connect-amazon-instancemetadata: [Unlikely Break] Support IMDSv2. H/T @​oharaandrew314

v6.14.0.0

Compare Source

• http4k-*: Upgrade some dependency versions
• http4k-connect-langchain: [Breaking!] This is now http4k-ai-langchain4j. The packages have been moved to org.http4k.ai.langchain4j - you can search and replace the imports to fix the breaks.
• http4k-ai-mcp-sdk: Add new draft spec features to model.
• http4k-ai-llm-anthropic: [New module!] Universal LLM support for OpenAI.
• http4k-ai-llm-azure: [New module!] Universal LLM support for Azure and Azure GitHubModels.
• http4k-ai-llm-gemini: [New module!] Universal LLM support for Google Gemini models.
• http4k-ai-llm-github: [New module!] Universal LLM support for GitHubModels through the GitHub API.
• http4k-ai-llm-openai: [New module!] Universal LLM support for OpenAI and compatible LLM APis, including Gemini, Azure, GitHubModels

v6.13.0.0

Compare Source

• http4k-*: Upgrade some dependency versions
• http4k-server-undertow: [Fix #​1365] Gracefully handle unrecognized/invalid HTTP verbs
• http4k-ai-mcp-sdk: [Breaking] Rename Reference.Resource to Reference.ResourceTemplate.
• http4k-connect-ai-langchain: [Breaking] Rename some classes for consistency. Easy fix :)

v6.12.0.0

Compare Source

• http4k-*: Repackaging modules into new http4k ecosystem http4k-ai
• http4k-ai-llm-core: [New module!] Core abstractions for a unified LLM API, providing a functional interface for working with LLMs in true http4k style. :)
• http4k-mcp-core: [Breaking] Package migration org.http4k.mcp to org.http4k.ai.mcp. Fix: Simple replacement will fix imports.
• http4k-mcp-core: [Deprecation] Replaced with http4k-ai-mcp-core
• http4k-mcp-client: [Breaking] Package migration org.http4k.mcp to org.http4k.ai.mcp. Fix: Simple replacement will fix imports.
• http4k-mcp-client: [Deprecation] Replaced with http4k-ai-mcp-client
• http4k-mcp-sdk: [Breaking] Package migration org.http4k.mcp to org.http4k.ai.mcp. Fix: Simple replacement will fix imports.
• http4k-mcp-sdk: [Deprecation] Replaced with http4k-ai-mcp-sdk

v6.11.1.0

Compare Source

• http4k-ai-core: [Rename] Disambiguate System and User Prompt
• http4k-connect*: [Rename] Disambiguate System and User Prompt

v6.11.0.0

Compare Source

• http4k-ai-core: [New module!] Core module for common AI types
• http4k-connect-ai-core: [Breaking] This module has been renamed to http4k-ai-core.
• http4k-connect*: [Deprecation] Repackaging of core types into org.http4k.ai package. Change the offending package names to fix.
• http4k-mcp-*: [Deprecation] Repackaging of core types into org.http4k.ai package. Change the offending package names to fix. SystemMessage is now Prompt

v6.10.2.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: Add typesafe lens access to Elicitations.

v6.10.1.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: Support for Elicitations capability, allowing the server to request User submitted information from the client. This is in the draft spec.
• http4k-mcp-client: Support for Elicitations capability, allowing the server to request User submitted information from the client. This is in the draft spec.

v6.10.0.0

Compare Source

• http4k-*: Upgrade some dependency versions, including LangChain4k to V1.
• http4k-connect-ai-langchain: Implement HTTP Client adapter so that http4k clients and fakes slot effortlessly into the new LangChain4J v1 APIs.
• http4k-connect-ai-langchain: [Breaking] Replacement of ChatLanguageModel implementations with ChatModel. These will eventually go away once all LangChain models support HTTP client injection (see above).
• http4k-testing-webdriver: [Possible break]: Upgrade of JSoup dependency may cause issues with parsing of HTML content. GitHub
• http4k-testing-approval: [Possible break]: Upgrade of JSoup dependency may cause issues with parsing of HTML content. GitHub
• http4k-mcp-sdk*: Add cancellation capability.

v6.9.2.0

Compare Source

• http4k-core: Add typesafe Uri builders using the lens system.
• http4k-realtime-core: [Fix #​1353] SSE Cors filter not setting CORs headers correctly.

v6.9.1.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: Support for structuredContent field and typesafe outputs in Tools. This is in the draft spec.
• http4k-web-datastar: [Fix] Correctly handle templates with Windows new-lines in.

v6.9.0.0

Compare Source

• http4k-mdk-sdk: [Breaking] Removed options for running MCP servers without explicitly supplying a security implementation. This is now mandatory. If you wish to not supply a security implementation, please use the NoMcpSecurity object in place of one of the others (Basic, Bearer, ApiKey, OAuth).

v6.8.1.0

Compare Source

• http4k-*: Upgrade some dependency versio.
• http4k-mdk-sdk: Added support for auto-marshalled Tool args. You will need Kotlin Reflect on the classpath to use this feature.

v6.8.0.0

Compare Source

• http4k-*: Upgrade some dependency versio.
• http4k-realtime-core: Added PolyFilter and convenience filter for common CorsAndRebindProtection
• http4k-mcp-sdk: [Breaking] Rework Tool Args to better support JSON schema definitions and for every arg to require an explicit type. To fix breaking
  changes, simply make Tool.Arg with Tool.Arg.string().
• http4k-mcp-client: Added scopes to OAuth2 client credentials client filter.

v6.7.0.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: Improved support for MCP security models, including new Protected Resource OAuth Standard which is present in the latest MCP Draft. This
  is a much more convenient way to use OAuth2 with the MCP.
• http4k-security-oauth: [Breaking] Can now retrieve Auth Server in various ways, using Protected Resource standard. Implementation of automatic auth
  server discovery.
• http4k-api-openapi: Add modelNamer to Jackson extension for OpenApi3 renderer. H/T @​mbcltd
• http4k-api-graphql: Add support for root-level GraphQL extensions field in GraphQLResponse H/T @​joostbaas

v6.6.1.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-security-oauth: Add some WellKnown endpoints for serving metadata for OAuth2 providers.
• http4k-mcp-core-: Added DirectoryResources to be able to read from a directory of files.

v6.6.0.1

Compare Source

• http4k-mcp-core-: [Fix] Missing BOM for ForkHandles caused break in dependencies when using BOM

v6.6.0.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: [Breaking] Repackaging of MCP code to avoid cross-module dependencies. It's just imports that need to be changed.
• http4k-mcp-client: [New module] New module purely for projects that need an MCP client without the server side code.
• http4k-mcp-core: [New module] New module for the core of the MCP domain.
• http4k-template-freemarker: [Fix #​1337] FreemarkerTemplates sets incompatibleImprovements

v6.5.6.1

Compare Source

• http4k-mcp-sdk-*: [Fix] Fixes to RFC 6570 support in Resource URI Template.

v6.5.6.0

Compare Source

• http4k-mcp-sdk-*: Proper RFC 6570 support in Resource URI Template.

v6.5.5.1

Compare Source

• http4k-mcp-sdk-*: Fixing up resource template matching to better resemble RFC 6570.

v6.5.5.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk-*: Add better matching around ResourceTemplates.

v6.5.4.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-format-*: Some convenience functions for JSON rendering.
• http4k-connect-amazon-sqs-*: [Fix] Correct SQS SendMessage request DTO (#​1336) H/T @​mghwang

v6.5.3.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-mcp-sdk: Updates to support objects in new spec.
• http4k-connect-amazon-s3*: More support for keys containing hash (#). H/T @​aharin

v6.5.2.0

Compare Source

• http4k-*: Upgrade some dependency versions.
• http4k-connect-amazon-s3*: Added support for s3 bucket keys containing hash (#). H/T @​aharin
• http4k-mcp-sdk: Updates to support sampling callbacks in Tool and other requests.
• http4k-mcp-sdk: Add filters for all common MCP Request types

v6.5.1.0

Compare Source

• http4k-mcp-sdk: Tidy up completions API.

v6.5.0.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-mcp-sdk [Breaking]: Protocol negotiation and turning on Server and Client capabilities by default.
• http4k-mcp-sdk Add in-band sampling and progress to most client requests

v6.4.1.0

Compare Source

• http4k-mcp-sdk [DevEx]: Capabilities now implement their Handler type, allowing you to call through directly to the handler,

v6.4.0.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-mcp-sdk : [NEW PRO MODULE] A fully-featured SDK for the MCP platform. See
  the MCP microsite for more details.

v6.2.0.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-realtime-core : Add Router binding for all Websockets and SSE handlers
• http4k-connect- : [Breaking] Repackage of common AI model classes into org.http4k.connect. Import changes will be required.
• http4k-connect-openai-* : [Breaking] Rename FinishReason to StopReason
• http4k-connect-ai-anthropic-* : [Breaking] Replaced Schema with a simple Map<String, Any>, as we are unifying the types across all AI modules. A new
  Schema type will be introduced in a future release. Replace existing Schema usage with a Map<String, Any> for now.
• http4k-connect-ai-anthropic-* : [Fix] Correct name of input_schema field in Tool.
• http4k-client-helidon : Add Helidon Websocket client. H/T @​oharaandrew314
• http4k-server-helidon : [Fix] Support headers for websocket upgrade request. H/T @​oharaandrew314
• http4k-connect-storage-redis : Changes to allow Storage instance to act as a ReadWriteCache H/T @​ollieabbey

v6.1.0.1

Compare Source

v6.1.0.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-tools-hotreload :[Fix] Hot Reload Module does not work in Windows - again :) H/T @​haaloworld
• http4k-security-oauth :[Breaking] Reorganised filter argument order for OAuth filters to pass scopes through to token endpoint.
• http4k-realtime-core :[Breaking] SseEventId is now a type instead of just a string
• http4k-connect-amazon-ses*: [Breaking] Upgrade to SES V2 API. H/T @​oharaandrew314
• http4k-bridge-spring : Translates LensFailure exceptions to 400 HTTP status codes. H/T @​npryce
• http4k-realtime-core : Added PolyHandlerTestClient for testing poly servers in a single place

v6.0.1.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-format-moshi : [Fix #​1291] Moshi + ProtocolStatus Serialization Exception
• http4k-tools-hotreload : [Fix #​1290] Hot Reload Module does not work in Windows

v6.0.0.0

Compare Source

• http4k-* : [License update] Selected "Pro-tier" modules will start to be introduced under the new
  http4k commercial license. These modules remain freely available for personal and academic
  purposes, and bear the new org.http4k.pro Maven coordinate group to distinguish them from the open-source modules.
• http4k-* : [Breaking] Minimum Java version is now 21. Java versions 8-20 support is provided through our LTS programme available through the commercial
  version of http4k. Please see: https://www.http4k.org/enterprise/
• http4k-* : [Breaking] Repackaging/splitting code into new modules coordinates. See the mapping grid below:

SOURCE MODULE - v5.X.X.X	DESTINATION MODULE(S) - v6.X.X.X
http4k-aws	http4k-platform-aws
http4k-azure	http4k-platform-azure
http4k-cloudevents	http4k-api-cloudevents
http4k-cloudnative	Split into http4k-config, http4k-platform-core, http4k-platform-k8s
http4k-contract	http4k-api-openapi
http4k-contract-jsonschema	http4k-api-jsonschema
http4k-contract-ui-redoc	http4k-api-ui-redoc
http4k-contract-ui-swagger	http4k-api-ui-swagger
http4k-failsafe	http4k-ops-failsafe
http4k-gcp	http4k-platform-gcp
http4k-graphql	http4k-api-graphql
http4k-htmx	http4k-web-htmx
http4k-jsonrpc	http4k-api-jsonrpc
http4k-metrics-micrometer	http4k-ops-micrometer
http4k-opentelemetry	http4k-ops-opentelemetry
http4k-resilience4j	http4k-ops-resilience4j

• http4k-* : [Breaking] Complete rewrite of the routing logic to work identically across HTTP, WS and SSE. Mostly backwards compatible, but some small may
  be required if you are referencing low level routing classes.
• http4k-* : [Breaking] Removal of all deprecations. See the migration guide for more details.
• http4k-core : [Breaking] regex lens now returns the entire matched string. To match groups, use regexGroup instead.
• http4k-contract : [Breaking] withPostSecurityFilter() removed as is part of the contract DSL.
• http4k-realtime-core : [Breaking] From above, repackaging of SSE and Websocket routing and filters.
• http4k-connect-amazon-kms : [Breaking] CustomerKeySpec removed and replaced with KeySpec (as per AWS deprecations)
• http4k-server : [Breaking] For consistency, all server configurations have been simplified to only support only simple examples. Anything more convoluted
  should be handled by user implementations.
• http4k-api-contract : [Breaking] Security implementations moved from contract to security-core. This has involved repackaging them, but the APIs remain
  the same.
• http4k-api-jsonrpc : [Breaking] Repackaging of some classes - APIs remain the same.
• http4k-cloudnative : [Breaking] Code has moved to a combination of http4k-config, http4k-platform-core and http4k-platform-k8s modules.
• http4k-* : [Unlikely Break] Upgrades all dependencies to latest versions. This may involve API changes if you are reliant on APIs in previous versions.
• http4k-format-moshi : [Unlikely break/Enhancement] Support for MoshiLong as well as MoshiInteger. This has improved the handling of longs when using
  the MoshiNode types.
• http4k-serverless-* : [Unlikely break] Replacement of serverless Context system to use new RequestKey mechanism.
• http4k-core : [Replacement/Upgrade] RequestContextKey mechanism replaced with new simpler RequestKey lenses. This obliviates the need for the old
  InitializeRequestContext mechanism and filter
• http4k-server-helidon : [Fix] SSE implementation now cleans up SSE connections correctly on close.
• http4k-* : [Enhancement] Unified the Events for HTTP, WS and SSE to use the same ProtocolEvent type for tracing and logging transactions.
• http4k-realtime-core : [Enhancement] Added ability to use debugging filters for both SSE and WebSockets.
• http4k-realtime-core : [Enhancement] New DSL for defining Polyhandlers for routing to different types of HTTP/SSE/Websocket protocols connections. Use
  poly().
• http4k-realtime-core : [Enhancement] SSE client for connecting to Server-sent events. Includes configurable auto-reconnection modes.
• http4k-format-moshi : [Enhancement] Support for Data4k containers for Moshi.
• http4k-tools-hotreload : [New Pro module!] Work with any http4k-based application without restarting the server. Includes browser reloading when working
  with web-based code, assets and templates. Extensible with custom rebuild logic - ships with Gradle support.
• http4k-bridge-jakarta : [New module!] Easy migrations from/to Jakarta-based servers.
• http4k-bridge-spring : [New module!] Easy migrations from/to Spring-based servers.
• http4k-bridge-vertx : [New module!] Easy migrations from/to Vertx-based servers.
• http4k-bridge-ktor : [New module!] Easy migrations from/to Ktor-based servers.
• http4k-bridge-micronaut : [New module!] Easy migrations from/to Micronaut-based servers.
• http4k-bridge-ratpack : [New module!] Easy migrations from/to Ratpack-based servers.
• http4k-web-datastar : [New module!] Deep support for the super-powerful Datastar Hypermedia library, which helps you build
  reactive web applications with the simplicity of server-side rendering and the power of a full-stack SPA framework..
• http4k-tools-traffic-capture : [New module!] A set of tools to help the capture and replay of traffic from any HTTP server.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.