diff --git a/.github/workflows/publish-1.4-docs.yml b/.github/workflows/publish-1.4-docs.yml index eb74f904a..84429309c 100644 --- a/.github/workflows/publish-1.4-docs.yml +++ b/.github/workflows/publish-1.4-docs.yml @@ -47,22 +47,22 @@ jobs: - name: Build Documentation run: |- - sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version := \"1.4.0\"; docs/paradox; unidoc" + sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version := \"1.4.1\"; docs/paradox; unidoc" env: JAVA_OPTS: "-verbose:gc -Xmx4g" # Create directory structure upfront since rsync does not create intermediate directories otherwise - name: Create directory structure run: |- - mkdir -p target/nightly-docs/docs/pekko-http/1.4.0/ + mkdir -p target/nightly-docs/docs/pekko-http/1.4.1/ mkdir -p target/nightly-docs/docs/pekko-http/1.4/ - cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4.0/docs + cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4.1/docs cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4/docs rm -r docs/target/paradox/site/main/ - cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4.0/api + cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4.1/api cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4/api rm -r target/scala-2.13/unidoc - cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4.0/japi + cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4.1/japi cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4/japi rm -r target/javaunidoc @@ -71,7 +71,7 @@ jobs: with: upload: true switches: --archive --compress --update --delete --progress --relative - local_path: target/nightly-docs/./docs/pekko-http/1.4.0 # The intermediate dot is to show `--relative` which paths to operate on + local_path: target/nightly-docs/./docs/pekko-http/1.4.1 # The intermediate dot is to show `--relative` which paths to operate on remote_path: ${{ secrets.NIGHTLIES_RSYNC_PATH }}/pekko/ remote_host: ${{ secrets.NIGHTLIES_RSYNC_HOST }} remote_port: ${{ secrets.NIGHTLIES_RSYNC_PORT }} diff --git a/docs/src/main/paradox/release-notes/releases-1.4.md b/docs/src/main/paradox/release-notes/releases-1.4.md index d4fc893ee..7f99abdc1 100644 --- a/docs/src/main/paradox/release-notes/releases-1.4.md +++ b/docs/src/main/paradox/release-notes/releases-1.4.md @@ -1,5 +1,27 @@ # 0. Release Notes (1.4.x) +## 1.4.1 + +Release notes for Apache Pekko HTTP 1.4.1. See [GitHub Milestone for 1.4.1](https://github.com/apache/pekko-http/milestone/16?closed=1) for a fuller list of changes. + +This is a bug fix release. It includes a number of hardening changes to the HTTP parsing and rendering code. + +### Bug Fixes +* SSE: allow Unicode line terminators ([PR1186](https://github.com/apache/pekko-http/pull/1186)) +* Use `Locale.ROOT` for `toLowerCase`/`toUpperCase` and in the `RouteTest` header lookup ([PR1224](https://github.com/apache/pekko-http/pull/1224)) +* Parse `Content-Length` as digits with surrounding whitespace only ([PR1243](https://github.com/apache/pekko-http/pull/1243)) +* Render `Content-Length` for HEAD responses with a declared length ([PR1244](https://github.com/apache/pekko-http/pull/1244)) +* HTTP/2: bound incoming header blocks with `max-header-list-size` ([PR1247](https://github.com/apache/pekko-http/pull/1247)) +* Count repeated `Connection` headers towards `max-header-count` ([PR1268](https://github.com/apache/pekko-http/pull/1268)) +* Compare path elements when checking that a served file is below the base directory ([PR1269](https://github.com/apache/pekko-http/pull/1269)) +* Prevent CRLF injection through chunk trailers and extensions ([PR1270](https://github.com/apache/pekko-http/pull/1270)) +* HTTP/2: drop header fields containing CR, LF or NUL ([PR1271](https://github.com/apache/pekko-http/pull/1271)) +* Drop rendered headers containing NUL as well as CR and LF ([PR1272](https://github.com/apache/pekko-http/pull/1272)) + +### Dependency Changes + +There are no dependency changes in this release. + ## 1.4.0 Release notes for Apache Pekko HTTP 1.4.0. See [GitHub Milestone for 1.4.0](https://github.com/apache/pekko-http/milestone/13?closed=1) for a fuller list of changes.