v4.1.20

Improvements

• HealthCheckServlet configurable object mapper and status indicator (#1871)

Dependency updates

• Bump amqp-client from 5.11.0 to 5.12.0 (#1852)
• Bump ehcache from 3.9.2 to 3.9.3 (#1878)
• Bump jetty9.version from 9.4.39.v20210325 to 9.4.40.v20210413 (#1875)
• Update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.4 (release/4.1.x) (#1864)
• Bump jcstress-core from 0.8 to 0.9 (#1879)
• Bump mockito-core from 3.8.0 to 3.9.0 (#1847)
• Bump actions/cache from v2.1.4 to v2.1.5 (#1862)
• Bump actions/setup-java from v1 to v2 (#1845)

v4.2.0-beta.4

⚠️ Security fixes

• Bump jetty9.version from 9.4.37.v20210219 to 9.4.39.v20210325 (#1767, #1835) ➡️ Jetty 9.4.39.v20210325 release notes
• Update dependency org.eclipse.jetty:jetty-bom to v10.0.2 (#1836) ➡️ Jetty 10.0.2 release notes
• Update dependency org.eclipse.jetty:jetty-bom to v11.0.2 (#1837) ➡️ Jetty 11.0.2 release notes
  • These are addressing various security issues.
  • GHSA-j6qj-j888-vvgq
  • GHSA-26vr-8j45-3r4w
  • GHSA-v7ff-8wcx-gmc5

Improvements

• Add convenience method for creating and accessing SettableGauge (#1812)

Dependency updates

• Bump jdbi3-core from 3.18.0 to 3.18.1 (#1829)
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.0.1 (#1818)
• Update dependency com.google.errorprone:error_prone_core to v2.6.0 (#1841)
• Update log4j2.version to v2.14.1 (release/4.1.x) (#1804)
• Bump jcstress-core from 0.7 to 0.8 (#1825)
• Bump jmh.version from 1.28 to 1.29 (#1824)
• Bump maven-bundle-plugin from 5.1.1 to 5.1.2 (#1833)
• Bump Maven to version 3.8.1

v4.1.19

⚠️ Security fixes

• Bump jetty9.version from 9.4.37.v20210219 to 9.4.39.v20210325 (#1767, #1835)
  • This is addressing various security issues (Jetty 9.4.39.v20210325 release notes).
  • GHSA-j6qj-j888-vvgq
  • GHSA-26vr-8j45-3r4w
  • GHSA-v7ff-8wcx-gmc5

Improvements

• Make metrics-caffeine compatible with Caffeine 2.x and 3.x (#1765)

Dependency updates

• Bump ehcache from 3.9.1 to 3.9.2 (#1766)
• Update dependency com.google.errorprone:error_prone_core to v2.6.0 (#1769, #1840)
• Update log4j2.version to v2.14.1 (#1804)
• Bump jdbi3-core from 3.18.0 to 3.18.1 (#1829)
• Bump jcstress-core from 0.7 to 0.8 (#1825)
• Bump jmh.version from 1.27 to 1.29 (#1774, #1824)
• Bump maven-bundle-plugin from 5.1.1 to 5.1.2 (#1833)
• Bump Maven to version 3.8.1
• Bump actions/stale from v3.0.17 to v3.0.18 (#1785)

Assorted

• Configure Renovate (#1747)

v4.2.0-beta.3

Improvements

• Make metrics-caffeine compatible with Caffeine 2.x and 3.x (#1765)

Dependency updates

• Bump ehcache from 3.9.1 to 3.9.2 (#1766)
• Bump jackson-databind from 2.9.10.8 to 2.12.2 (#1779)
• Bump jetty9.version from 9.4.37.v20210219 to 9.4.38.v20210224 (#1767)
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.2 (#1782)
• Update log4j2.version to v2.14.1 (release/4.2.x) (#1805)
• Update dependency com.google.errorprone:error_prone_core to v2.5.1 (release/4.1.x) (#1769)
• Update dependency junit:junit to v4.13.2 (#1787)
• Bump jmh.version from 1.27 to 1.28 (#1774, #1789)
• Bump actions/stale from v3.0.17 to v3.0.18 (#1784, #1785)

v4.2.0-beta.2

Features

• Add support for Caffeine 3.x (#1759)

Bug fixes

• Make FileDescriptorRatioGaugeTest not dependent on a specific JDK version (#1738)

Dependency updates

• Bump amqp-client from 5.10.0 to 5.11.0 (#1756)
• Bump caffeine from 2.8.8 to 2.9.0 (#1754)
• Bump ehcache from 3.9.0 to 3.9.1 (#1757)
• Bump jackson-databind from 2.9.10.8 to 2.12.1 (#1737)
• Bump jersey-bom from 3.0.0 to 3.0.1 (#1744)
• Upgrade metrics-jersey2 to Jersey 2.33 (#1745)
• Bump jetty10.version from 10.0.0 to 10.0.1 (#1763)
• Bump jetty11.version from 11.0.0 to 11.0.1 (#1764)
• Bump jetty9.version from 9.4.35.v20201120 to 9.4.37.v20210219 (#1740, #1762)
• Bump assertj-core from 3.18.1 to 3.19.0 (#1741)
• Bump mockito-core from 3.7.0 to 3.8.0 (#1739, #1761)
• Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2 (#1748)
• Bump sphinx-maven-plugin from 2.9.0 to 2.10.0 (#1751)
• Bump actions/cache from v2.1.3 to v2.1.4 (#1749)
• Bump actions/stale from v3.0.14 to v3.0.17 (#1742, #1750, #1755)

v4.1.18

Dependency updates

• Bump amqp-client from 5.10.0 to 5.11.0 (#1756)
• Bump caffeine from 2.8.8 to 2.9.0 (#1754)
• Bump ehcache from 3.9.0 to 3.9.1 (#1757)
• Bump jetty9.version from 9.4.35.v20201120 to 9.4.37.v20210219 (#1740, #1762)
• Upgrade metrics-jersey2 to Jersey 2.33 (#1745)
• Bump assertj-core from 3.18.1 to 3.19.0 (#1741)
• Bump mockito-core from 3.7.0 to 3.8.0 (#1739, #1761)
• Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2 (#1748)
• Bump sphinx-maven-plugin from 2.9.0 to 2.10.0 (#1751)
• Bump actions/cache from v2.1.3 to v2.1.4 (#1749)
• Bump actions/stale from v3.0.14 to v3.0.17 (#1742, #1750, #1755)

v4.2.0-beta.1

New Features

• Add support for jakarta.servlet (#1730)
• Add support for Eclipse Jersey 3.x (#1718, #1720)
• Add support for Jetty 10.0.0 and 11.0.0 (#1724)
• Add SettableGauge interface (#1126, #1599, #1607)

Improvements

• Avoid queuing up report tasks in ScheduledReporter #1524 #1590
• Remove locks from ExponentialDecayReservoir (#1638, #1656)
• Generify MetricRegistry.gauge() (#1693, #1607, #1695)

Dependency upgrades

• Upgrade to Jackson 2.12.0 (#1715, #1593)
• Bump jakarta.annotation-api from 1.3.5 to 2.0.0 (#1700)
• Bump jaxb-runtime from 2.3.3 to 3.0.0 (#1714)

v4.1.17

Improvements

• Add no-op implementation of MetricRegistry (#1732)
• Properly reconnect to Graphite via TCP (#1721)

Dependency updates

• Upgrade to Jackson Databind 2.9.10.8 (#1717, #1733)
• Bump caffeine from 2.8.6 to 2.8.8 (#1722, #1725)
• Bump jdbi3-core from 3.17.0 to 3.18.0 (#1719)
• Bump mockito-core from 3.6.28 to 3.7.0 (#1731)
• Bump jmh.version from 1.26 to 1.27 (#1726)

Assorted

• Add GitHub release workflow
• Remove Travis CI configuration

v4.1.16

Improvements

• Allow configuration of the maximum length of names sent to collectd (#1702)
• Enforce frequency limits in CPU profile servlet (#1710)

Dependency updates

• Bump jetty9.version from 9.4.34.v20201102 to 9.4.35.v20201120 (#1712)
  • This addresses GHSA-86wm-rrjm-8wh8
• Bump mockito-core from 3.6.0 to 3.6.28 (#1713)
• Bump actions/stale from v3.0.13 to v3.0.14 (#1711)

v4.1.15

Dependency Updates

• Upgrade to Jackson 2.9.10.6 (#1708)
  • This addresses CVE-2020-24750 and CVE-2020-24616
• Bump amqp-client from 5.5.3 to 5.10.0 (#1691)
• Bump jetty9.version from 9.4.32.v20200930 to 9.4.34.v20201102 (#1689, #1699)
  • This is addresses GHSA-g3wg-6mcf-8jj6 (CVE-2020-27216)
• Bump log4j2.version from 2.13.3 to 2.14.0 (#1707)
• Bump assertj-core from 3.17.2 to 3.18.1 (#1690, #1709)
• Bump mockito-core from 3.5.15 to 3.6.0 (#1692)
• Bump actions/cache from v2.1.2 to v2.1.3 (#1703)
• Bump actions/stale from v3.0.12 to v3.0.13 (#1698)

Assorted

• Add explicit version for sphinx-maven-plugin to fix build warning
• Run SonarCloud analysis only in dropwizard/metrics and when SONAR_TOKEN is available (#1697)