dropwizard

• Upgrade Jackson to 2.9.4 in 1.2.* to address a CVE #2269

• Upgrade Jackson to 2.8.11 in 1.1.* to address a CVE #2270

• Correctly handle the default context path when logging endpoints #2279

• Add support for providing a custom logging layout during logging bootstrap #2260
• Add context path to logged endpoints #2254
• Enable auto escaping of strings in Freemarker templates #2251
• Add dropwizard-jdbi3 to BOM #2247
• Upgrade to Guava 24.0-jre
• Upgrade to JUnit 5.0.3
• Upgrade to Error Prone 2.2.0
• Upgrade to NullAway 0.3.2
• Upgrade to Apache HttpClient 4.5.5
• Upgrade to Apache Commons Text 1.2
• Upgrade to Liquibase 3.5.4
• Upgrade to Hibernate 5.2.13.Final
• Upgrade to Apache Tomcat JDBC 9.0.4
• Upgrade to Apache Commons Lang3 3.7
• Upgrade to AssertJ 3.9.0
• Upgrade to Jackson 2.9.4

• Enable auto escaping of strings in Freemarker templates (#2251)

• Add 'dropwizard-jdbi3' module #2243
• Allow dynamic constraint validation messages #2246

• Upgrade to metrics 4.0.2

• Add support for JSON logs in Dropwizard #2232

• Don't shut down asynchronous executor in Jersey #2221
• Add possibility to possibility to extend DropwizardApacheConnector #2220

• Support for building and running Dropwizard on JDK9 #2197
• Add Dropwizard testing module for JUnit 5 #2166
• Add the SelfValidation annotation as a powerful alternative to ValidationMethod #2150
• Support multiple extensions for views (breaking change) #2213
• Set a minimal duration for DatasourceFactory.maxWaitForConnection #2130
• Migrate deprecated classes from commons-lang to commons-text #2208
• Enable NullAway errorprone checks #2204
• Support for setting the immediateFlush option for file logging #2193
• Use InstrumentedQueuedThreadPool for admin endpoint #2186
• Add support for configuring ServiceUnavailableRetryStrategy for HTTP clients #2185
• Add possibility to configure Jetty's minRequestDataRate #2184
• Add exclusive mode to MinDuration and MaxDuration annotations #2167

• Correctly set up SO_LINGER for the HTTP connector #2176
• Support fromString in FuzzyEnumParamConverter #2161
• Upgrade to Hibernate 5.2.12.Final to address https://hibernate.atlassian.net/browse/HHH-11996, #2206
• Upgrade to Freemaker 2.3.27-incubating

• Support fromString in FuzzyEnumParamConverter #2161

• Correctly set up SO_LINGER for the HTTP connector (#2176)

Complete changelog on GitHub

• Support configuring FileAppender#bufferSize #1951
• Improve error handling of @FormParam resources #1982
• Add JDBC interceptors through configuration #2030
• Support Dropwizard applications without logback #1900
• Replace deprecated SizeAndTimeBasedFNATPSizeAndTimeBasedRollingPolicy #2010
• Decrease allowable tomcat jdbc validation interval to 50ms #2051
• Add support for setting several cipher suites for HTTP/2 #2119
• Remove Dropwizard's Jackson dependency on Logback #2112
• Handle badly formed "Accept-Language" headers #2103
• Use LoadingCache in CachingAuthorizer #2096
• Client NTLM Authentication #2091
• Add optional Jersey filters #1948
• Upgrade to Apache commons-lang3 3.6
• Upgrade to AssertJ 3.8.0
• Upgrade to classmate 1.3.4
• Upgrade to Guava 23.1
• Upgrade to H2 1.4.196
• Upgrade to Hibernate 5.2.11.Final
• Upgrade to Hibernate Validator 5.4.1.Final
• Upgrade to HSQLDB 2.4.0
• Upgrade to Jackson 2.9.1
• Upgrade to Jetty 9.4.7.v20170914
• Upgrade to JMH 1.19
• Upgrade to Joda-Time 2.9.9
• Upgrade to Logback 1.2.3
• Upgrade to Metrics 3.2.5
• Upgrade to Mockito 2.10.0
• Upgrade to Mustache.java 0.9.5
• Upgrade to Objenesis 2.6
• Upgrade to SLF4J 1.7.25
• Upgrade to tomcat-jdbc 8.5.23

• Update Jetty to 9.4.6.v20170531 to address CVE-2017-9735 #2117

• Update Jetty to 9.3.20.v20170531 to address CVE-2017-9735 #2116

• Updated Jackson to 2.8.9. Fixes a security vulnerability https://github.com/FasterXML/jackson-databind/issues/1599 with default typing #2086
• Use the correct JsonFactory in JSON configuration parsing #2046
• Support of extending of DBIFactory #2067
• Add time zone to Java 8 datetime mappers #2069

• Updated Jackson to 2.7.9.1. Fixes a security https://github.com/FasterXML/jackson-databind/issues/1599 with default typing #2087

• Set the console logging context after a reset #1973
• Set logging context for file appenders before setting the buffer size #1975
• Remove javax.el from jersey-bean-validation #1976
• Exclude duplicated JTA 1.1 from dropwizard-hibernate dependencies #1977
• Add missing @UnwrapValidatedValue annotations #1993
• Fix HttpSessionListener.sessionDestroyed is not being called #2032
• Add flag to make ThreadNameFilter optional #2014

http://www.dropwizard.io/1.1.0/docs

• Upgraded to Hibernate ORM 5.2.7 #1871
• Add runtime certificate reload via admin task #1799
• List available tasks lexically via admin task #1939
• Add support for optional resource protection #1931
• Invalid enum request parameters result in 400 response with possible choices #1734
• Enum request parameters are deserialized in the same fuzzy manner, as the request body #1734
• Request parameter name displayed in response to parse failure #1734
• Add DurationParam as a possible request parameter #1734
• Add SizeParam as a possible request parameter #1751
• Allow overriding of a default ExceptionMapper without re-registering all other defaults #1768
• Allow overriding of default JsonProvider #1788
• Finer-grain control of exception behaviour in view renderers #1820
• Default WebApplicationException handler preserves exception HTTP headers #1912
• JerseyClientBuilder can create rx-capable client #1721
• Configurable response for empty Optional return values #1784
• Add web test container agnostic way of invoking requests in ResourceTestRule #1778
• Remove OptionalValidatedValueUnwrapper #1583
• Allow constraints to be applied to type #1586
• Use LoadingCache in CachingAuthenticator #1615
• Switch cert and peer validation to false by default #1855
• Introduce CachingAuthorizer #1639
• Enhance logging of registered endpoints #1804
• Flush loggers on command exit instead of destroying logging #1947
• Add support for neverBlock on AsyncAppenders #1917
• Allow to disable caching of Mustache views #1289
• Add the httpCompliance option to the HTTP configuration #1825
• Add the blockingTimeout option to the HTTP configuration #1795
• Make GZipHandler sync-flush configurable #1685
• Add min and mins as valid Duration abbreviations #1833
• Register Jackson parameter-names modules #1908
• Native Jackson deserialization of enums when Jackson annotations are present #1909
• Add JsonConfigurationFactory for first-class support of the JSON configuration #1897
• Support disabled and enabled attributes for metrics #1957
• Support @UnitOfWork in sub-resources #1959
• Upgraded to Jackson 2.8.6
• Upgraded to Hibernate Validator 5.3.4.Final
• Upgraded to Jetty 9.4.2.v20170220 #1901
• Upgraded to tomcat-jdbc 8.5.9
• Upgraded to Objenesis 2.5.1 #1654
• Upgraded to AssertJ 3.6.2
• Upgraded to classmate 1.3.3
• Upgraded to Metrics 3.2.2 #1970
• Upgraded to Mustache 0.9.4 #1766
• Upgraded to Mockito 2.7.12
• Upgraded to Liquibase 3.5.3
• Upgraded to Logback 1.2.1 #1918
• Upgraded to JDBI 2.78
• Upgraded to Jersey 2.25.1
• Upgraded to javassist 3.21.0-GA
• Upgraded to Guava 21.0
• Upgraded to SLF4J 1.7.24
• Upgraded to H2 1.4.193
• Upgraded to Joda-Time 2.9.7
• Upgraded to commons-lang3 3.5
• Upgraded to Apache HTTP Client 4.5.3