Dependency updates

• Bump byte-buddy from 1.10.19 to 1.10.21 (#3681, #3716)
• Bump caffeine from 2.8.8 to 2.9.0 (#3710)
• Bump checker-qual from 3.9.1 to 3.10.0 (#3679)
• Bump freemarker from 2.3.30 to 2.3.31 (#3711)
• Bump hibernate-core from 5.4.24.Final to 5.4.28.Final (#3698)
• Bump jetty.version from 9.4.36.v20210114 to 9.4.37.v20210219 (#3721)
• Bump jna from 5.6.0 to 5.7.0 (#3696)
• Bump joda-time from 2.10.9 to 2.10.10 (#3694)
• Bump metrics-bom from 4.1.17 to 4.1.18 (#3722)
• Bump tomcat-jdbc from 9.0.41 to 9.0.43 (#3723)
• Bump junit from 4.13.1 to 4.13.2 (#3706)
• Bump junit-jupiter from 5.7.0 to 5.7.1 (#3683)
• Bump junit5.version from 5.7.0 to 5.7.1 (#3682)
• Bump mockito.version from 3.7.7 to 3.8.0 (#3719)
• Bump testcontainers-bom from 1.15.1 to 1.15.2 (#3700)
• Bump maven-invoker-plugin from 3.2.1 to 3.2.2 (#3715)
• Bump sphinx-maven-plugin from 2.9.0 to 2.10.0 (#3699)
• Bump actions/cache from v2.1.3 to v2.1.4 (#3684)
• Bump actions/stale from v3.0.15 to v3.0.17 (#3695, #3712)
• Bump sphinx from 3.4.3 to 3.5.1 in /docs (#3705, #3709)

Assorted

• Address SonarCloud concerns in dropwizard-auth (#3688)
• Ensure FileAppenderFactoryTest works within its temporary directories (#3692)
• Refactor testing of thrown exceptions (#3676)
• Refactor testing of thrown exceptions in dropwizard-client (#3686)
• Remove public modifiers from dropwizard-assets tests (#3687)

Upgrade notes

• Jersey 2.33 no longer pulls in org.glassfish.jersey.media:jersey-media-jaxb by default (see https://github.com/eclipse-ee4j/jersey/pull/4634). If you're using XML-based payloads, you'll have to explicitly include the dependency to org.glassfish.jersey.media:jersey-media-jaxb in your projects. (Thanks to @maffe for pointing this out)

Improvements

• Add support for testing plain Command classes (#3673)

Dependency updates

• Upgrade to Jersey 2.33 (#3671)
• Bump jetty.version from 9.4.35.v20201120 to 9.4.36.v20210114 (#3662)
• Bump checker-qual from 3.9.0 to 3.9.1 (#3653)
• Bump error_prone_annotations from 2.4.0 to 2.5.1 (#3656)
• Bump assertj-core from 3.18.1 to 3.19.0 (#3665)
• Bump mockito.version from 3.7.0 to 3.7.7 (#3659)
• Bump mysql-connector-java from 8.0.22 to 8.0.23 (#3660)
• Bump sonar-maven-plugin from 3.7.0.1746 to 3.8.0.2131 (#3655)
• Bump actions/stale from v3.0.14 to v3.0.15 (#3668)

Documentation

• Update contributors list
• Clarify how to override ConfiguredCommand#configure (#3675)

Assorted

• Address SonarCloud issues (#3666)
• Move DropwizardSSLConnectionSocketFactoryTest to io.dropwizard.client (#3657)
• Reduce use of reflection in dropwizard-jetty tests (#3658)
• Remove apache commons-lang3 from tests (#3625)
• Use assertThatExceptionOfType in dropwizard-auth (#3667)
• Fix GitHub release workflow

Improvements

• Support custom StatsCounter in CachingAuthenticator/CachingAuthorization (#3642)
• DropwizardAppExtension support for RegisterExtension (#3549, #3649)
• Do not print error message about class not found (#3616)

Dependency updates

• Bump bcprov-jdk15on from 1.67 to 1.68 (#3614)
• Bump byte-buddy from 1.10.18 to 1.10.19 (#3611)
• Bump checker-qual from 3.8.0 to 3.9.0 (#3638)
• Bump guava from 30.0-jre to 30.1-jre (#3606)
• Bump hibernate-validator from 6.1.6.Final to 6.1.7.Final (#3608)
• Bump joda-time from 2.10.8 to 2.10.9 (#3628)
• Bump metrics-bom from 4.1.16 to 4.1.17 (#3648)
• Bump mockito.version from 3.6.28 to 3.7.0 (#3637)
• Bump octokit from 4.19.0 to 4.20.0 in /docs (#3626)
• Bump pgpverify-maven-plugin from 1.10.1 to 1.11.0 (#3640)
• Bump sphinx from 3.3.1 to 3.4.3 in /docs (#3610, #3618, #3635, #3643)
• Bump sphinx-rtd-theme from 0.5.0 to 0.5.1 in /docs (#3636)

Documentation

• Add missing parentheses in example docs #3624
• Fix typo in HttpClientBuilder Javadoc (#3632)
• Fix the AssertJ documentation URL (#3620)
• Remove unused import from Getting Started docs #3619
• Rename jdbi3 to db packages in example docs (#3623)

Assorted

• Add GitHub release workflow
• Remove Travis CI configuration
• Add checks for logging statements via errorprone-slf4j (#3607)
• Remove commons-lang3 from dropwizard-benchmarks (#3627)
• Remove usage of deprecated Mockito#initMocks() (#3630)
• Replace Mockito#verifyZeroInteractions with verifyNoInteractions (#3631)
• Replace Streams usage with String#join (#3646)
• Replace deprecated AssertJ assertions (#3645)
• Small cleanups (#3621)
• Stop ignoring exceptions in dropwizard-logging tests (#3633)
• Use System.lineSeparator() instead of String.format(%n") (#3644)

❗ Important note

This is the final release of Dropwizard 1.3.x. Please consider migrating to Dropwizard 2.0.x.

➡️ Upgrade Notes for Dropwizard 2.0.x

Dependency updates

• Bump checker-qual from 3.8.0 to 3.9.0 (joschi/dropwizard-1.3#73)
• Bump guava from 30.0-jre to 30.1-jre (joschi/dropwizard-1.3#69)
• Bump jackson-bom from 2.9.10.20201202 to 2.9.10.20210106 (#3641, joschi/dropwizard-1.3#75)
• Bump joda-time from 2.10.8 to 2.10.9 (joschi/dropwizard-1.3#72)
• Bump snakeyaml from 1.26 to 1.27 (joschi/dropwizard-1.3#48)
• Bump tomcat-jdbc from 9.0.40 to 9.0.41 (joschi/dropwizard-1.3#67)
• Bump mockito-core from 3.6.28 to 3.7.0 (joschi/dropwizard-1.3#74)
• Bump octokit from 4.19.0 to 4.20.0 in /docs (joschi/dropwizard-1.3#71)

Dependency updates

• Upgrade to Jackson 2.10.5.20201202 (#3587)
  • This is addressing CVE-2020-25649
• Bump caffeine from 2.8.6 to 2.8.8 (#3593, #3597)
• Bump checker-qual from 3.7.1 to 3.8.0 (#3586)
• Bump httpcore from 4.4.13 to 4.4.14 (#3584)
• Bump jdbi3-bom from 3.17.0 to 3.18.0 (#3589)
• Bump tomcat-jdbc from 9.0.40 to 9.0.41 (#3600)
• Bump jmh.version from 1.26 to 1.27 (#3598)
• Bump pgpverify-maven-plugin from 1.10.0 to 1.10.1 (#3596)
• Bump testcontainers-bom from 1.15.0 to 1.15.1 (#3602)

Documentation

• Fixed syntax in Testing Database Interactions example (#3601)
• Update FreeMarker links in documentation (#3591)

Dependency updates

• Bump checker-qual from 3.7.0 to 3.8.0 (joschi/dropwizard-1.3#47, joschi/dropwizard-1.3#64)
• Bump jackson-bom from 2.9.10.20200824 to 2.9.10.20201202 (joschi/dropwizard-1.3#63)
• Bump jdbi3-bom from 3.17.0 to 3.18.0 (joschi/dropwizard-1.3#65)
• Bump jetty.version from 9.4.33.v20201020 to 9.4.35.v20201120 (joschi/dropwizard-1.3#41, joschi/dropwizard-1.3#59)
  • This addresses https://github.com/advisories/GHSA-86wm-rrjm-8wh8
• Bump maven-shade-plugin from 3.2.0 to 3.2.4 (joschi/dropwizard-1.3#54)
• Bump metrics4.version from 4.1.14 to 4.1.16 (joschi/dropwizard-1.3#43, joschi/dropwizard-1.3#61)
• Bump tomcat-jdbc from 9.0.39 to 9.0.40 (joschi/dropwizard-1.3#56)
• Bump junit-jupiter-engine from 5.6.2 to 5.7.0 (joschi/dropwizard-1.3#53)
• Bump assertj-core from 3.17.2 to 3.18.1 (joschi/dropwizard-1.3#40)
• Bump mockito-core from 3.5.15 to 3.6.28 (joschi/dropwizard-1.3#52, joschi/dropwizard-1.3#60)
• Bump slf4j-simple from 1.7.25 to 1.7.30 (joschi/dropwizard-1.3#50)
• Bump jacoco-maven-plugin from 0.8.5 to 0.8.6 (joschi/dropwizard-1.3#39)
• Bump actions/cache from v1 to v2.1.3 (joschi/dropwizard-1.3#58)
• Bump joschi/setup-jdk from v1 to v2.3.0 (joschi/dropwizard-1.3#57)

Improvements

• Add ConfigOverride for random application ports during tests (#3561)

Bug fixes

• Skip errors when visiting default implementations in ConfigurationMetadata (#3577)

Dependency updates

• Bump hibernate-core from 5.4.23.Final to 5.4.24.Final (#3571)
• Bump jetty.version from 9.4.33.v20201020 to 9.4.35.v20201120 (#3552, #3574)
  • This addresses https://github.com/advisories/GHSA-86wm-rrjm-8wh8
• Bump metrics-bom from 4.1.14 to 4.1.16 (#3566, #3578)
• Bump tomcat-jdbc from 9.0.39 to 9.0.40 (#3570)
• Bump assertj-core from 3.18.0 to 3.18.1 (#3564)
• Bump jna from 5.5.0 to 5.6.0 (#3562)
• Bump mockito.version from 3.5.15 to 3.6.28 (#3529, #3575)
• Bump testcontainers-bom from 1.14.3 to 1.15.0 (#3559)
• Bump pgpverify-maven-plugin from 1.9.0 to 1.10.0 (#3568)
• Bump sphinx from 3.3.0 to 3.3.1 in /docs (#3565)
• Bump actions/cache from v2.1.2 to v2.1.3 (#3560)
• Bump actions/stale from v3.0.13 to v3.0.14 (#3573)

Assorted

• Tighten up commons-lang3 dependencies (#3567)
• Revert "Replace invalid default excludedProtocols in HttpsConnectorFactory" (#3579)

Improvements

• Fix logFormat configuration inconsistencies (#3530)

Bug fixes

• Prevent deep recursion in ConfigurationMetadata (#3536)

Security

• Replace invalid default excludedProtocols in HttpsConnectorFactory (#3533)
  • If you're using regular expressions in the excludedProtocols configuration setting, make sure change these to specific protocols, for example ["TLSv1", "TLSv1.1", "TLSv1.2"] instead of ["TLSv1(\.[12])?"].
• Bump jetty.version from 9.4.32.v20200930 to 9.4.33.v20201020 (#3522)
  • This is addressing https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6 (CVE-2020-27216)

Dependency updates

• Bump byte-buddy from 1.10.17 to 1.10.18 (#3539)
• Bump checker-qual from 3.7.0 to 3.7.1 (#3544)
• Bump hibernate-core from 5.4.22.Final to 5.4.23.Final (#3538)
• Bump joda-time from 2.10.7 to 2.10.8 (#3525)
• Bump assertj-core from 3.17.2 to 3.18.0 (#3524)
• Bump bcprov-jdk15on from 1.66 to 1.67 (#3540)
• Bump actions/stale from v3.0.12 to v3.0.13 (#3545)
• Bump sphinx from 3.2.1 to 3.3.0 in /docs (#3543)

Assorted

• Remove obsolete NonblockingServletHolder (#3527)
• Reduce flakiness of LayoutIntegrationTests (#3537)
• Move SonarQube settings to GitHub workflow (#3534)

Improvements

• Remove obsolete NonblockingServletHolder (#3527)
  • NonblockingServletHolder is now deprecated and will be removed in Dropwizard 2.1.x.

Security

• Bump jetty.version from 9.4.32.v20200930 to 9.4.33.v20201020 (#3522)
  • This is addressing https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6 (CVE-2020-27216)

Dependency updates

• Bump joda-time from 2.10.7 to 2.10.8 (#3525)
• Bump jetty.version from 9.4.32.v20200930 to 9.4.33.v20201020 (#3522)
• Bump assertj-core from 3.17.2 to 3.18.0 (#3524)

Improvements

• Swallow EofException when response was incomplete (#3382)

Bug fixes

• Reset Jersey client in tests (#3453)

Dependency updates

• Bump Mustache Java compiler from 0.9.6 to 0.9.7 (#3508)
• Bump guava from 24.1.1-jre to 30.0-jre (#3509)
• Bump httpclient from 4.5.12 to 4.5.13 (#3516)
• Bump jdbi3-bom from 3.14.3 to 3.17.0 (#3510)
• Bump jetty.version from 9.4.31.v20200723 to 9.4.32.v20200930 (#3478)
• Bump joda-time from 2.10.6 to 2.10.7 (#3519)
• Bump metrics-bom from 4.1.12.1 to 4.1.14 (#3520)
• Bump tomcat-jdbc from 9.0.37 to 9.0.39 (#3495)
• Upgrade to Liquibase 3.10.3
• Bump assertj-core from 3.16.1 to 3.17.2 (#3448)
• Bump junit from 4.12 to 4.13.1 (joschi/dropwizard-1.3#24, joschi/dropwizard-1.3#25)
• Bump mockito.version from 3.4.6 to 3.5.15 (#3513)
• Bump maven-project-info-reports-plugin from 3.1.0 to 3.1.1 (joschi/dropwizard-1.3#29)
• Bump octokit from 4.18.0 to 4.19.0 in /docs (#3518)
• Enforce checker-qual 3.7.0 for dependency convergence

Bug fixes

• Support parsing system property configuration values as arrays when the field does not exist (#3442)
• Add null-checks to AnnotationSensitivePropertyNamingStrategy (#3515)

Dependency updates

• Bump byte-buddy from 1.10.14 to 1.10.17 (#3460, #3462, #3492)
• Bump caffeine from 2.8.5 to 2.8.6 (#3503)
• Bump checker-qual from 3.6.0 to 3.7.0 (#3445, #3479)
• Bump Mustache Java compiler from 0.9.6 to 0.9.7 (#3508)
• Bump conscrypt-openjdk-uber from 2.5.0 to 2.5.1 (#3452)
• Bump guava from 29.0-jre to 30.0-jre (#3509)
• Bump hibernate-core from 5.4.21.Final to 5.4.22.Final (#3474)
• Bump hibernate-validator from 6.1.5.Final to 6.1.6.Final (#3473)
• Bump httpclient from 4.5.12 to 4.5.13 (#3490)
• Bump jdbi3-bom from 3.14.4 to 3.17.0 (#3484, #3491, #3497, #3510)
• Bump jersey-bom from 2.31 to 2.32 (#3465)
• Bump jetty.version from 9.4.31.v20200723 to 9.4.32.v20200930 (#3478)
• Bump joda-time from 2.10.6 to 2.10.7 (#3519)
• Bump metrics-bom from 4.1.12.1 to 4.1.14 (#3496, #3520)
• Bump mysql-connector-java from 8.0.21 to 8.0.22 (#3507)
• Bump tomcat-jdbc from 9.0.37 to 9.0.39 (#3456, #3495)
• Bump assertj-core from 3.17.1 to 3.17.2 (#3448)
• Bump jmh.version from 1.25.1 to 1.26 (#3444, #3494)
• Bump junit from 4.13 to 4.13.1 (#3500)
• Bump junit5.version from 5.6.2 to 5.7.0 (#3454, #3455)
• Bump mockito.version from 3.5.7 to 3.5.15 (#3439, #3446, #3459, #3464, #3513)
• Bump maven-project-info-reports-plugin from 3.1.0 to 3.1.1 (#3449)
• Bump jacoco-maven-plugin from 0.8.5 to 0.8.6 (#3457)
• Upgrade to NullAway 0.8.0 (#3504)
• Bump octokit from 4.18.0 to 4.19.0 in /docs (#3518)
• Bump sphinx-autobuild from 0.7.1 to 2020.9.1 in /docs (#3438)
• Bump joschi/setup-jdk from v1 to v2.3.0 (#3486)
• Bump actions/cache from v1 to v2.1.2 (#3487, #3498)
• Bump actions/stale from v1 to v3.0.12 (#3488, #3499)

Assorted

• Add analysis with SonarCloud (#3493)
• Build Dropwizard with Java 15 (#3458)
• Hacktoberfest: Simplify conditional experession (#3482)
• Fix typos in documentation (#3483)

Changes since Dropwizard 1.3.25-beta.2

Dependency updates

• Upgrade to Jackson 2.9.10.20200824 (#3433)

Changes since Dropwizard 1.3.24

Improvements

• Remove alpn-boot dependency in dropwizard-http2 for Java 8u252 (#3256)
• Extend from AbstractHandlerContainer instead of AbstractHandler (#2460)
• Add JAXB API to dropwizard-jersey (Java 11)
• Use SslContextFactory.Server over deprecated SslContextFactory (#3411)

Dependency updates

• Upgrade to Jetty 9.4.31.v20200723
• Upgrade to jetty-setuid-java 1.0.4
• Upgrade to Liquibase 3.10.2
• Upgrade to Joda-Time 2.10.6
• Upgrade to Jdbi 3.14.3
• Upgrade to SLF4J 1.7.30
• Upgrade to Apache Tomcat JDBC Pool 9.0.37
• Upgrade to Apache HttpClient 4.5.12
• Upgrade to commons-text 1.9
• Upgrade to commons-lang3 3.11
• Upgrade to Metrics 4.1.12.1
• Upgrade to Freemarker 2.3.30
• Upgrade to Objenesis 3.1
• Upgrade to Javassist 3.27.0-GA
• Upgrade to Classmate 1.5.1

Test dependencies

• Upgrade to HSQLDB 2.5.1
• Upgrade to JUnit 5.6.2
• Upgrade to Mockito 3.4.6
• Upgrade to AssertJ 3.16.1
• Upgrade to Error Prone 2.3.4
• Upgrade to NullAway 0.7.10

Build dependencies

• Update wrapper to Maven 3.6.3
• Bump octokit from 4.8.0 to 4.18.0 in /docs (#23)
• Upgrade to sphinx-maven-plugin 2.9.0
• Upgrade to maven-source-plugin 3.2.1
• Upgrade to maven-site-plugin 3.9.1
• Upgrade to maven-resources-plugin 3.2.0
• Upgrade to maven-project-info-reports-plugin 3.1.0
• Upgrade to maven-javadoc-plugin 3.2.0
• Upgrade to maven-jar-plugin 3.2.0
• Upgrade to maven-clean-plugin 3.1.0
• Upgrade to maven-checkstyle-plugin 3.1.1
• Upgrade to jacoco-maven-plugin 0.8.5
• Upgrade to build-helper-maven-plugin 3.2.0
• Update Maven plugins in java-simple archetype POM template
• Update Maven plugins in dropwizard-example
• Update Maven plugins in dropwizard-archetypes

Assorted

• Fix build of dropwizard-example with Java 11

Bug fixes

• Handle null values in Optional* ParamConverters (#3431)

Dependency updates

• Bump Maven plugins in java-simple Maven archetype template (#3389)
• Bump assertj-core from 3.16.1 to 3.17.1 (#3423, #3437)
• Bump byte-buddy from 1.10.13 to 1.10.14 (#3396)
• Bump checker-qual from 3.5.0 to 3.6.0 (#3398)
• Bump commons-text from 1.8 to 1.9 (#3387)
• Bump conscrypt-openjdk-uber from 2.4.0 to 2.5.0 (#3420)
• Bump guava from 28.2-jre to 29.0-jre (#3251)
• Bump hibernate-core from 5.4.18.Final to 5.4.21.Final (#3388, #3405, #3436)
• Bump jdbi3-bom from 3.14.1 to 3.14.4 (#3413, #3425)
• Bump jetty.version from 9.4.30.v20200611 to 9.4.31.v20200723 (#3394)
• Bump jmh.version from 1.23 to 1.25.1 (#3399, #3412, #3434)
• Bump maven-archetype-plugin.version from 3.1.2 to 3.2.0 (#3383)
• Bump maven-filtering from 3.1.1 to 3.2.0 (#3409)
• Bump maven-resources-plugin from 3.1.0 to 3.2.0 (#3410)
• Bump metrics-bom from 4.1.11 to 4.1.12.1 (#3401)
• Bump mockito.version from 3.4.4 to 3.5.7 (#3395, #3417, #3419, #3424, #3428, #3429)
• Bump sphinx from 3.1.2 to 3.2.1 in /docs (#3402, #3416)
• Upgrade to Liquibase 3.10.2 (#3392)

Assorted

• Add Jersey bean validation end-to-end test (#3391)
• Less noisy CI output: mvn --no-transfer-progress (#3400)

Assorted

• Fix build of dropwizard-example with Java 11

Improvements

• Remove alpn-boot dependency in dropwizard-http2 for Java 8u252 (#3256)
• Extend from AbstractHandlerContainer instead of AbstractHandler (#2460)
• Add JAXB API to dropwizard-jersey (Java 11)
• Use SslContextFactory.Server over deprecated SslContextFactory (#3411)

Dependency updates

• Upgrade to Jetty 9.4.31.v20200723
• Upgrade to jetty-setuid-java 1.0.4
• Upgrade to Liquibase 3.10.2
• Upgrade to Joda-Time 2.10.6
• Upgrade to Jdbi 3.14.3
• Upgrade to SLF4J 1.7.30
• Upgrade to Apache Tomcat JDBC Pool 9.0.37
• Upgrade to Apache HttpClient 4.5.12
• Upgrade to commons-text 1.9
• Upgrade to commons-lang3 3.11
• Upgrade to Metrics 4.1.12.1
• Upgrade to Freemarker 2.3.30
• Upgrade to Objenesis 3.1
• Upgrade to Javassist 3.27.0-GA
• Upgrade to Classmate 1.5.1

Test dependencies

• Upgrade to HSQLDB 2.5.1
• Upgrade to JUnit 5.6.2
• Upgrade to Mockito 3.4.6
• Upgrade to AssertJ 3.16.1
• Upgrade to Error Prone 2.3.4
• Upgrade to NullAway 0.7.10

Build dependencies

• Update wrapper to Maven 3.6.3
• Bump octokit from 4.8.0 to 4.18.0 in /docs (#23)
• Upgrade to sphinx-maven-plugin 2.9.0
• Upgrade to maven-source-plugin 3.2.1
• Upgrade to maven-site-plugin 3.9.1
• Upgrade to maven-resources-plugin 3.2.0
• Upgrade to maven-project-info-reports-plugin 3.1.0
• Upgrade to maven-javadoc-plugin 3.2.0
• Upgrade to maven-jar-plugin 3.2.0
• Upgrade to maven-clean-plugin 3.1.0
• Upgrade to maven-checkstyle-plugin 3.1.1
• Upgrade to jacoco-maven-plugin 0.8.5
• Upgrade to build-helper-maven-plugin 3.2.0
• Update Maven plugins in java-simple archetype POM template
• Update Maven plugins in dropwizard-example
• Update Maven plugins in dropwizard-archetypes

Improvements

• Swallow EofException when response was incomplete (#3372)
• Don't specify scope in dependencyManagement of BOM (#3373)

Dependency updates

• Upgrade to Jackson 2.10.5 (#3381)
• Bump bcprov-jdk15on from 1.65.01 to 1.66 (#3364)
• Bump commons-lang3 from 3.10 to 3.11 (#3371)
• Bump metrics-bom from 4.1.10.1 to 4.1.11 (#3374)
• Bump mockito.version from 3.3.3 to 3.4.0 (#3367)
• Bump mockito.version from 3.4.0 to 3.4.2 (#3370)
• Bump mockito.version from 3.4.2 to 3.4.3 (#3375)
• Bump mockito.version from 3.4.3 to 3.4.4 (#3380)
• Bump mysql-connector-java from 8.0.20 to 8.0.21 (#3368)
• Bump pgpverify-maven-plugin from 1.8.0 to 1.9.0 (#3365)

Assorted

• Add CodeQL analysis for security scans (#3298)
• Update wrapper to Maven 3.6.3
• Try making App1Test#earlyEofTest() less flaky (#3378)
• Removed some conditional tests (test smell) (#3379)

Improvements

• Export cache stats in CachingAuthorizer and CachingAuthenticator (#3360)

Dependency updates

• Bump bcprov-jdk15on from 1.65 to 1.65.01 (#3312)
• Bump byte-buddy from 1.10.10 to 1.10.11 (#3324)
• Bump byte-buddy from 1.10.11 to 1.10.12 (#3339)
• Bump byte-buddy from 1.10.12 to 1.10.13 (#3354)
• Bump caffeine from 2.8.4 to 2.8.5 (#3353)
• Bump checker-qual from 3.4.0 to 3.4.1 (#3318)
• Bump checker-qual from 3.4.1 to 3.5.0 (#3357)
• Bump hibernate-core from 5.4.16.Final to 5.4.17.Final (#3316)
• Bump hibernate-core from 5.4.17.Final to 5.4.18.Final (#3341)
• Bump hsqldb from 2.5.0 to 2.5.1 (#3352)
• Bump jakarta.servlet-api from 4.0.3 to 4.0.4 (#3342)
• Bump jdbi3-bom from 3.13.0 to 3.14.0 (#3334)
• Bump jdbi3-bom from 3.14.0 to 3.14.1 (#3336)
• Bump jetty.version from 9.4.29.v20200521 to 9.4.30.v20200611 (#3333)
• Bump maven-project-info-reports-plugin from 3.0.0 to 3.1.0 (#3323)
• Bump maven-shade-plugin from 3.2.3 to 3.2.4 (#3322)
• Bump maven-site-plugin from 3.9.0 to 3.9.1 (#3349)
• Bump metrics-bom from 4.1.10 to 4.1.10.1 (#3359)
• Bump metrics-bom from 4.1.9 to 4.1.10 (#3358)
• Bump sphinx from 3.0.2 to 3.0.3 in /docs
• Bump sphinx from 3.0.3 to 3.0.4 in /docs (#3310)
• Bump sphinx from 3.0.4 to 3.1.0 in /docs (#3328)
• Bump sphinx from 3.1.0 to 3.1.1 in /docs (#3332)
• Bump sphinx from 3.1.1 to 3.1.2 in /docs (#3361)
• Bump sphinx-rtd-theme from 0.4.3 to 0.5.0 in /docs (#3337)
• Bump testcontainers-bom from 1.14.2 to 1.14.3 (#3314)
• Bump tomcat-jdbc from 9.0.35 to 9.0.36 (#3325)
• Bump tomcat-jdbc from 9.0.36 to 9.0.37 (#3362)
• Upgrade to Error Prone 2.4.0 (#3345)
• Upgrade to Liquibase 3.10.0 (#3350)

Assorted

• Remove explicit SnakeYAML dependency

Documentation

• Add docs for includeStackTrace setting of syslog appender
• Add documentation on JUnit 5.x support

Dependency updates

• Upgrade to Jackson 2.9.10.20200621 (#3344)

Improvements

• Enable reproducible builds (#3305)
• Reuse DefaultThreadFactory (#3285)

Assorted

• Stabilize JSON serialization of potentially flakey tests
• Use circleci/openjdk:11-jdk-buster on CircleCI

Documentation

• Add details on how to configure filterFactories (#3283)
• Added note on Task.execute method (#3279)
• Changed signature of Task.execute method (#3278)

Dependency updates

• Bump assertj-core from 3.15.0 to 3.16.0 (#3281)
• Bump assertj-core from 3.16.0 to 3.16.1 (#3288)
• Bump byte-buddy from 1.10.9 to 1.10.10 (#3267)
• Bump caffeine from 2.8.2 to 2.8.3 (#3296)
• Bump caffeine from 2.8.3 to 2.8.4 (#3303)
• Bump checker-qual from 3.3.0 to 3.4.0 (#3275)
• Bump hibernate-core from 5.4.15.Final to 5.4.16.Final (#3297)
• Bump hibernate-validator from 6.1.4.Final to 6.1.5.Final (#3282)
• Bump jersey-bom from 2.30.1 to 2.31 (#3307)
• Bump jetty.version from 9.4.28.v20200408 to 9.4.29.v20200521 (#3304)
• Bump metrics-bom from 4.1.7 to 4.1.8 (#3294)
• Bump metrics-bom from 4.1.8 to 4.1.9 (#3308)
• Bump pgpverify-maven-plugin from 1.7.0 to 1.8.0 (#3302)
• Bump testcontainers-bom from 1.14.1 to 1.14.2 (#3295)
• Bump tomcat-jdbc from 9.0.34 to 9.0.35 (#3290)
• Remove unused dependency on Objenesis (#3300)

Improvements

• Allow overriding default media type in AssetServlet and AssetBundle (#3269)
• Fix random port assignment in Resource (dropwizard-testing) (#3270)
• Add missing DAOTest#setPassword() method (#3274)

Dependency updates

• Upgrade to Jackson 2.10.4 (#3273)
• Bump caffeine from 2.8.1 to 2.8.2 (#3265)
• Bump hibernate-core from 5.4.14.Final to 5.4.15.Final (#3268)
• Bump hibernate-validator from 6.1.3.Final to 6.1.4.Final (#3255)
• Bump jdbi3-bom from 3.12.2 to 3.13.0 (#3260)
• Bump joda-time from 2.10.5 to 2.10.6 (#3264)
• Bump metrics-bom from 4.1.6 to 4.1.7 (#3271)
• Bump sphinx from 3.0.1 to 3.0.2 in /docs (#3254)

Assorted

• Fix typo in dropwizard-archetypes README.md (#3266)
• Fix coordinates of maven-archetype-plugin (#3272)
• Remove alpn-boot dependency in dropwizard-http2 for Java 8u252 (#3256)