2.4.0 (2026-10-07)
Commits:
- upgrade to version 2.4.0 before release in master branch (e88790c) (by Steve Hu)
- fixes #2806 resolve the latest copilot finding (e21fd62) (by Steve Hu)
- fixes #2806 resolve quality gate issues (7978432) (by Steve Hu)
- fixes #2808 resolve quality gate and copilot findings (78d0879) (by Steve Hu)
- fixes #2806 Add example and comments for the profile HMAC configuration (7246e55) (by Steve Hu)
- upgrade maven-javadoc to 3.12.0 (85052dd) (by Steve Hu)
- upgrade h2 to 2.5.252 from 2.5.250 (ba03b12) (by Steve Hu)
- upgrade mockito to 5.24.0 (e22bfd9) (by Steve Hu)
- upgrade slf4j to 2.0.20 from 2.0.19 (70cc8eb) (by Steve Hu)
- Harden LDAP user-bind validation (#2807) (2fa0bb5) (by Steve Hu)
- upgrade jose4j to 0.9.7 from 0.9.6 (05351d8) (by Steve Hu)
- upgrade jackson to 2.22.3 from 2.22.1 (73c63c8) (by Steve Hu)
- upgrade to version 2.3.8-SNAPSHOT after release in master branch (ce59eca) (by Steve Hu)
- upgrade slf4j to 2.0.19 from 2.0.17 (8f11186) (by Steve Hu)
- #2804 resolve the quality gate (1602518) (by Steve Hu)
- fixes #2805 fixes SonarCloud shows 7 open code smells (12be038) (by Steve Hu)
- fixes #2804 update after the review (87e659e) (by Steve Hu)
- fixes #2804 basic-auth AD-delegation accepts empty password (09108c3) (by Steve Hu)
- upgrade maven-surefire to 3.6.0 (0306ae5) (by Steve Hu)
- upgrade hikaricp to 7.1.0 from 6.2.1 (7f0ecd9) (by Steve Hu)
- upgrade caffeine to 3.2.4 from 3.3.0 (4c7de13) (by Steve Hu)
- fixes #2801 change the empty array to mutable (44481be) (by Steve Hu)
- #2801 address claude review findings (34d3692) (by Steve Hu)
- fixes #2801 quality gate issues (28a3603) (by Steve Hu)
- fixes #2801 unified the format to map for ruleId (fd329d5) (by Steve Hu)
- fixes #2801 When add the rule.yml into the values.yml it cannot be loaded (8cbe2cd) (by Steve Hu)
- Split the trailing slash fallback into its own method (3c1debc) (by Gaurav K Ohri)
- fixes #2797 client module test cannot pass on mac book pro m5 (145f2e5) (by Steve Hu)
- upgrade logback to 1.6.3 from 1.5.37 (7128270) (by Steve Hu)
- upgrade version.caffeine to 3.2.4 from 3.2.0 (c5a8e14) (by Steve Hu)
- Remove obsolete javadoc-packagelist-maven-plugin workaround (8a8358e) (by Steve Hu)
- upgrade central-publishing-maven to 0.11.0 (d2e03e4) (by Steve Hu)
- upgrade h2 to 2.5.250 from 2.3.232 (6690e72) (by Steve Hu)
- fixes #2794 keep the service.yml parameter mappings on a config reload (4cef841) (by Steve Hu)
- fixes #2793 resolve the Host header of a ServiceDef request at send time (afaf429) (by Steve Hu)
- fixes #2793 drop the null guards that make the request look nullable (3730e59) (by Steve Hu)
- fixes #2793 set the Host header from the resolved service target (da47b0a) (by Steve Hu)
- fixes #2793 set basePath on the URL object for the service.yml parameter form (246e3e5) (by Steve Hu)
- fixes #2793 keep the encoded base path verbatim and drop the hard-coded path delimiter (1a2ee76) (by Steve Hu)
- fixes #2793 support basePath for k8s ingres in direct-registry.yml (cbc26c1) (by Steve Hu)
- Cover the encoded URI and the path parameters (798f051) (by Gaurav K Ohri)
- Trim the trailing slashes from the raw request URI (9e3574f) (by Gaurav K Ohri)
- Cover the opt-in switch, multiple slashes and the path normalization (4028594) (by Gaurav K Ohri)
- Make the trailing slash fallback opt-in and normalize the request path (396eb1b) (by Gaurav K Ohri)
- Add the trailingSlashFallback config property to HandlerConfig (b14990c) (by Gaurav K Ohri)
- Add trailingSlashFallback to the generated handler JSON schema (cf1d02e) (by Gaurav K Ohri)
- Add the trailingSlashFallback switch to the default handler config (8e16a68) (by Gaurav K Ohri)
- test(handler): cover trailing slash path matching for #2235 (3670efa) (by Gaurav K Ohri)
- fixes #2235 fall back to the path without the trailing slash (c4ebdc0) (by Gaurav K Ohri)
- fix(server): normalize legacy lookup whitespace (bf03bf1) (by Steve Hu)
- fix(server): ignore blank legacy parameters and encode query values (3799658) (by Steve Hu)
- fix(server): restore deprecated config lookup parameters (#2785) (d757b19) (by Steve Hu)
- fixes #2783 Unsafe singleton publication in six config loaders and a missing config-name guard in ProxyConfig (d84bdd6) (by Steve Hu)
- fixes #2782 Fix SonaQube Quality Gate issues (3199c3e) (by Steve Hu)
- fixes #2781 update after the review (ebfd0be) (by Steve Hu)
- [Bug Fix] add identity cached singleton load wherever missing in configs (1e3b74f) (by zl80)
- refactor(config): simplify cached object loading (20d6baa) (by Steve Hu)
- fix(config): isolate reentrant cache loads from shared entry locks (3b4d7ef) (by Steve Hu)
- fix(config): make loader bootstrap and cache lifecycle safe (d144fa0) (by Steve Hu)
- fix(config): use a private cache entry load lock (3868cc5) (by Steve Hu)
- fix(config): preserve cached representations and coordinated invalidation (5f750d1) (by Steve Hu)
- fix(config): handle mixed map and POJO cache reads (#2779) (a186402) (by Steve Hu)
- fixes #2778 change the hard-coded class name to ClientConfig classs name for registry (8e836a5) (by Steve Hu)
- fixes #2777 update after the review (3046946) (by Steve Hu)
- fixes #2777 remove the productId and productVersion parameter to use snapshot only (94e87fb) (by Steve Hu)
- fixes #2772 Improve Unified-Security handler to support HMAC validation (6bc6fd9) (by Steve Hu)
- fixes #2776 rollback the rule changes to 2.0.1 for backward compatibility (309be3f) (by Steve Hu)
- upgrade to version 2.3.8-SNAPSHOT after release in master branch (7979f6e) (by Steve Hu)