AHC v3.0.14 Release

What's Changed

• fix(netty): fail fast when InputStream body cannot be reset by @arimu1 in #2312
• Arm request timeouts on an event loop by @pavel-ptashyts in #2313
• Make TimeoutsHolder.start idempotent by @hyperxpro in #2319
• Bound an exchange by one request timeout by @pavel-ptashyts in #2314
• Add response body flow control by @mkurz in #2318
• fix(netty): preserve all redirect body types by @mkurz in #2316
• Bump the dependencies group with 5 updates by @dependabot[bot] in #2323
• Bump actions/setup-java from 5.6.0 to 6.0.0 in the actions group by @dependabot[bot] in #2324
• fix(netty): preserve QUERY across redirects by @mkurz in #2317
• fix(netty): preserve non-POST redirect methods by @mkurz in #2325
• Dependency Updates by @hyperxpro in #2327
• Provide an opt-in zero-copy response body view by @pavel-ptashyts in #2322
• Fix response body accessors for bodyless and rebuilt responses by @hyperxpro in #2329
• Tell the handler about a failure before completing its future by @hyperxpro in #2328
• Mark an HTTP/2 connection instead of looking it up by @pavel-ptashyts in #2320
• Reject invalid HTTP/2 settings when the client is built by @hyperxpro in #2331
• Fail fast when the scheme rules out HTTP/2 by @hyperxpro in #2334
• Cache Maven distribution and dependencies in CI by @hyperxpro in #2335
• Bump actions/setup-java from 6.0.0 to 6.0.1 in the actions group by @dependabot[bot] in #2336
• Bump the dependencies group with 5 updates by @dependabot[bot] in #2337
• Add opt-in refusals for downgrade and body replay by @hyperxpro in #2333
• Reject fully qualified names and wildcard imports by @hyperxpro in #2338
• Keep credentials out of logs and exception messages by @hyperxpro in #2339
• Detect transport of external event loop group by IoHandler by @hyperxpro in #2340
• Fix redirect and HTTP/2 follow-up defects by @hyperxpro in #2341
• Keep connection-authenticated sockets off the HTTP/2 registry by @hyperxpro in #2342
• Drop RepeatedIfExceptionsTest and fix the races it hid by @hyperxpro in #2343
• Test cookie expiry with an injected clock by @hyperxpro in #2344
• Fix the defects the rerunner removal uncovered by @hyperxpro in #2345
• Send proxy custom headers only to the proxy by @hyperxpro in #2346
• Attach the write listener before writing the request by @hyperxpro in #2347
• Stop redirects reusing cookies from before the response by @hyperxpro in #2348
• Close with 1009 when a WebSocket message is too big by @hyperxpro in #2352
• Fix/auth retry stale cookies by @hyperxpro in #2351
• Treat Domain=. as a host-only cookie by @hyperxpro in #2350
• Keep a caller's cookie when the store refuses Set-Cookie by @hyperxpro in #2349

Security Advisory

GHSA-v2j5-22fr-j62r
GHSA-qjr7-w8pj-pmv9
GHSA-x8v2-478q-2hvg
GHSA-p2jm-6hj6-9rjg
GHSA-2jwh-9rmr-j4xf

New Contributors

• @arimu1 made their first contribution in #2312

Full Changelog: async-http-client-project-3.0.13...async-http-client-project-3.0.14