Micronaut Core 5.0.3

What's Changed

Bug Fixes 🐞

• Fix RequestBean validation for computed properties by @lissam1 in #12707
• Fix generic candidate matching for intercepted beans by @andriy-dmytruk in #12715

Other Changes 💡

• Fix bean introspection for Kotlin extension methods by @yawkat in #12547
• fix: use Http2ClientConfiguration.PREFIX for ServiceHttp2ClientConfiguration by @funsaized in #12625

New Contributors

• @funsaized made their first contribution in #12625

Full Changelog: v5.0.2...v5.0.3

Micronaut Core 3.8.15

Security 🚨

• Add configurable HTTP client redirect limit
• Avoid forwarding sensitive headers on cross-origin redirects
• Update to Netty 4.1.135

Full Changelog: v3.8.14...v3.8.15

Micronaut Core 4.10.25

What's Changed

Dependency updates 🚀

• Update Micronaut 4 to netty to v4.2.15.Final by @sdelamo in #12704

Full Changelog: v4.10.24...v4.10.25

Micronaut Core 3.10.8

What's Changed

Dependency updates 🚀

• Update mn3 to netty 4.1.135 by @sdelamo in #12703

Full Changelog: v3.10.7...v3.10.8

Micronaut Core 5.0.2

🚨 Security Upgrades

It updates to Netty 4.2.15.Final, a bug-fix and security release.

Full Changelog: v5.0.1...v5.0.2

Micronaut Core 5.0.1

🚨 Security

Fixes for security advisories:

• GHSA-387m-935m-c4vw
• GHSA-q6gh-6v2r-hjv3

What's Changed

Bug Fixes 🐞

• Fix heap ByteBuf release in NettyReadBuffer.useFastHeapBuffer by @shblue21 in #12681
• Handle malformed Forwarded host ports by @yawkat in #12688

Other Changes 💡

• Nested each property and configuration properties by @sdelamo in #12691

New Contributors

• @shblue21 made their first contribution in #12681

Full Changelog: v5.0.0...v5.0.1

Micronaut Core 4.10.24

What's Changed

🚨 Security

Fixes for security advisories:

• GHSA-387m-935m-c4vw
• GHSA-q6gh-6v2r-hjv3

Bug Fixes 🐞

• Fix IllegalArgumentException synthesizing bootstrap-loaded annotations (e.g. @deprecated) by @szabelin in #12692

New Contributors

• @szabelin made their first contribution in #12692

Full Changelog: v4.10.23...v4.10.24

Micronaut Core 3.10.7

🚨 Security

• Fixes for security advisories:
• GHSA-387m-935m-c4vw
• GHSA-q6gh-6v2r-hjv3

Full Changelog: v3.10.6...v3.10.7

Micronaut Core 5.0.0

What's Changed

Breaking Changes 🛠

• Remove BeanIntrospectionModule by @yawkat in #12207
• Match jackson feature names and add config for remaining features by @yawkat in #12237
• application/x-yaml -> application/yaml by @altro3 in #10613

New Features 🎉

• Support for creating AOP proxies at Runtime if necessary by @dstepanov in #12223
• Generation of JSON schema from Micronaut Configuration Properties by @graemerocher in #12377
• Refactor multipart by @yawkat in #12246
• Minor Changes to support Truffle polyglot languages by @graemerocher in #12435
• Add programmatic retry and circuit breaker APIs by @graemerocher in #12585
• Add config import support and importer SPI by @graemerocher in #12571
• Add jakarta Priority annotation mapper by @graemerocher in #12592
• Expand thread-selection behavior by @yawkat in #12439
• Async Http Client by @dstepanov in #12629
• Add h2c prior-knowledge client support by @yawkat in #12555

Bug Fixes 🐞

• Fix missing annotations with RECORD_COMPONENT target by @dstepanov in #12184
• Add support for less buggy multipart decoder by @yawkat in #12202
• Fix context beans are not singleton in some cases by @dstepanov in #12276
• Preserving Body Related Headers When Following 307 or 308 Redirects by @everett-hayes in #12271
• In CORS Filter add GET as available method for static resources by @sdelamo in #12279
• Don't dispose request body on HTTP/2 RST by @yawkat in #12332
• add null check for environment by @graemerocher in #12380
• Fix duplicate content-type header bug, add test by @wfhartford-wordly in #12376
• annotation valueMapper can return null by @sdelamo in #12393
• fix: prevent denial of service submitting form-url-encoded payload by @sdelamo in #12410
• Fix GraalVM 25 loom-carrier native image initialization by @yawkat in #12418
• Fix NettyHttpServerSpec dual-protocol client leak by @yawkat in #12424
• fix: avoid Path @QueryValue StackOverflow in declarative clients by @yawkat in #12421
• fix @EachProperty env entry lookup for hyphenated prefixes by @yawkat in #12419
• fix: preserve SSL configuration when refreshing netty HTTP client by @yawkat in #12434
• Fix flaky HttpClientTraceLoggingSpec log iteration (#12441) by @yawkat in #12442
• Fix request context availability in coroutine context factories by @yawkat in #12461
• test: add /beans runtime definition collision regression by @yawkat in #12465
• fix: avoid containsBean cache race during concurrent cache clears by @yawkat in #12462
• Stabilize JsonStreamSpec streaming request tests by @yawkat in #12458
• fix(inject-kotlin): preserve boxed getter signature for overridden primitive properties by @yawkat in #12469
• fix(http-client-jdk): honor named service SSL config in JDK client by @yawkat in #12473
• Fix Reactor HTTP client retry resubscription by @yawkat in #12470
• Propagate context for default error fallback logging by @yawkat in #12471
• Make ClassImport repeatable by @yawkat in #12485
• Add FileCustomizableResponseType body writer by @yawkat in #12481
• Clarify maxHeaderSize documentation by @yawkat in #12511
• Avoid iterating lazy property sources for config imports by @graemerocher in #12628
• Fix Kotlin default dispatch for inherited methods by @lissam1 in #12670

Improvements ⭐

• Improvements to the bean context in v5 by @dstepanov in #12045
• Precalculate indexes and isParallel for beans by @dstepanov in #12050
• Avoid using service loading accessible classes by @dstepanov in #12067
• Bean context improvements by @dstepanov in #12066
• Isolate tests + fix looking for all beans by @dstepanov in #12076
• Precalculate replaces at compilation time by @dstepanov in #12086
• Remove TypeThrashingTest by @yawkat in #12199
• test: reduce test pollution with spec.name by @sdelamo in #12208
• executable method processor and eager initialization by @sdelamo in #12180
• Pass HttpRequest to getLoadBalancerDiscriminator() by @iamsb97 in #12173
• Prepare JsonMapper for Jackson 3 and ReadBuffer by @yawkat in #12236
• New leak detection for tests by @yawkat in #12139
• Add explicit @Target to @Internal annotation for Groovy 5 compatibility and JLS compliance. by @ayoube-ait in #12314
• Apply request-decompression-enabled config to HTTP/2 by @yawkat in #12334
• Add @NullMarked to all packages in tck modules by @dstepanov in #12344
• Support Authentication as a valid WebSocket handler argument by @zManu3k in #12357
• Jackson2 annotation support by @yawkat in #12408
• Fail fast on duplicate configuration resources (with configurable merge/first-match) by @graemerocher in #12383
• Changes to support Micronaut processors as a Native Image by @graemerocher in #12449
• Add %q and %U access log elements for Netty by @yawkat in #12456
• Promote HTTP/3 support to stable by @yawkat in #12466
• test: add regression for @bindable defaults on config interfaces by @graemerocher in #12484
• Change default for CrossOrigin.allowCredentials by @yawkat in #12614
• Raise test-library baseline to Java 25 by @graemerocher in #12644

Docs 📖

• Docs: Add note about YAML reserved words in ConfigurationProperties by @nikitanagar08 in #12427
• Document @RouteCondition annotation for conditional routing by @Copilot in #12428
• Document custom HTTP client DNS resolver snippets by @yawkat in #12474
• Clarify JsonMapper and ObjectMapper guidance by @yawkat in #12525
• Clarify @controller port javadoc by @yawkat in #12534
• Fix whatsNew.adoc section heading levels and "scoped values" terminology by @graemerocher in #12603

Dependency updates 🚀

• chore(deps): update graalvm/setup-graalvm action to v1.4.2 by @renovate[bot] in #12160
• fix(deps): update dependency ch.qos.logback:logba...

Micronaut Core 5.0.0-RC2

What's Changed

Dependency updates 🚀

• Update Netty to 4.2.13.Final (#12662)
• Update kotlin monorepo to v2.3.21 by @renovate[bot] in #12656
• Update groovy monorepo to v5.0.5 by @renovate[bot] in #12647

Other Changes 💡

• fix #12651: reuse underlying HttpClient in toBlocking() to prevent thread leak by @naborka in #12652

New Contributors

• @naborka made their first contribution in #12652

Full Changelog: v5.0.0-RC1...v5.0.0-RC2