release notes for 1.4.1

.github/workflows/publish-1.4-docs.yml

@@ -47,22 +47,22 @@ jobs:
 
       - name: Build Documentation
         run: |-
-          sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version := \"1.4.0\"; docs/paradox; unidoc"
+          sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version := \"1.4.1\"; docs/paradox; unidoc"
         env:
           JAVA_OPTS: "-verbose:gc -Xmx4g"
 
       # Create directory structure upfront since rsync does not create intermediate directories otherwise
       - name: Create directory structure
         run: |-
-          mkdir -p target/nightly-docs/docs/pekko-http/1.4.0/
+          mkdir -p target/nightly-docs/docs/pekko-http/1.4.1/
           mkdir -p target/nightly-docs/docs/pekko-http/1.4/
-          cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4.0/docs
+          cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4.1/docs
           cp -r docs/target/paradox/site/main/ target/nightly-docs/docs/pekko-http/1.4/docs
           rm -r docs/target/paradox/site/main/
-          cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4.0/api
+          cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4.1/api
           cp -r target/scala-2.13/unidoc target/nightly-docs/docs/pekko-http/1.4/api
           rm -r target/scala-2.13/unidoc
-          cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4.0/japi
+          cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4.1/japi
           cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4/japi
           rm -r target/javaunidoc
 
@@ -71,7 +71,7 @@ jobs:
         with:
           upload: true
           switches: --archive --compress --update --delete --progress --relative
-          local_path: target/nightly-docs/./docs/pekko-http/1.4.0 # The intermediate dot is to show `--relative` which paths to operate on
+          local_path: target/nightly-docs/./docs/pekko-http/1.4.1 # The intermediate dot is to show `--relative` which paths to operate on
           remote_path: ${{ secrets.NIGHTLIES_RSYNC_PATH }}/pekko/
           remote_host: ${{ secrets.NIGHTLIES_RSYNC_HOST }}
           remote_port: ${{ secrets.NIGHTLIES_RSYNC_PORT }}

docs/src/main/paradox/release-notes/releases-1.4.md

@@ -1,5 +1,27 @@
 # 0. Release Notes (1.4.x)
 
+## 1.4.1
+
+Release notes for Apache Pekko HTTP 1.4.1. See [GitHub Milestone for 1.4.1](https://github.com/apache/pekko-http/milestone/16?closed=1) for a fuller list of changes.
+
+This is a bug fix release. It includes a number of hardening changes to the HTTP parsing and rendering code.
+
+### Bug Fixes
+* SSE: allow Unicode line terminators ([PR1186](https://github.com/apache/pekko-http/pull/1186))
+* Use `Locale.ROOT` for `toLowerCase`/`toUpperCase` and in the `RouteTest` header lookup ([PR1224](https://github.com/apache/pekko-http/pull/1224))
+* Parse `Content-Length` as digits with surrounding whitespace only ([PR1243](https://github.com/apache/pekko-http/pull/1243))
+* Render `Content-Length` for HEAD responses with a declared length ([PR1244](https://github.com/apache/pekko-http/pull/1244))
+* HTTP/2: bound incoming header blocks with `max-header-list-size` ([PR1247](https://github.com/apache/pekko-http/pull/1247))
+* Count repeated `Connection` headers towards `max-header-count` ([PR1268](https://github.com/apache/pekko-http/pull/1268))
+* Compare path elements when checking that a served file is below the base directory ([PR1269](https://github.com/apache/pekko-http/pull/1269))
+* Prevent CRLF injection through chunk trailers and extensions ([PR1270](https://github.com/apache/pekko-http/pull/1270))
+* HTTP/2: drop header fields containing CR, LF or NUL ([PR1271](https://github.com/apache/pekko-http/pull/1271))
+* Drop rendered headers containing NUL as well as CR and LF ([PR1272](https://github.com/apache/pekko-http/pull/1272))
+
+### Dependency Changes
+
+There are no dependency changes in this release.
+
 ## 1.4.0
 
 Release notes for Apache Pekko HTTP 1.4.0. See [GitHub Milestone for 1.4.0](https://github.com/apache/pekko-http/milestone/13?closed=1) for a fuller list of changes.