v3.6.0 — Chunked request bodies and Expect: 100-continue; static-file jail hardened; MCP dispatcher fixes; pool leak diagnostics; multi-value parameters

Cintix Application Server v3.6.0

Type: minor release
Date: 2026-11-02

Description

Chunked request bodies and Expect: 100-continue; static-file jail hardened; MCP dispatcher fixes; pool leak diagnostics; multi-value parameters

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.6.0 (minor): Chunked request bodies and Expect: 100-continue; static-file jail hardened; MCP dispatcher fixes; pool leak diagnostics; multi-value parameters\n- v3.5.0 (minor): Request parsing fixed (URL-decoding, multi-line bodies, Content-Length assembly, UTF-8); PooledDataSource close() returns connection to pool; Server: header version and charset fixes\n- v3.4.0 (minor): MCP protocol status and authentication planning documented; javadoc build fix\n- v3.3.0 (minor): Security and hardning of GraphQL\n- v3.2.1 (bugfix): 3.2.1\n- v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.5.0 — Request parsing fixed (URL-decoding, multi-line bodies, Content-Length assembly, UTF-8); PooledDataSource close() returns connection to pool; Server: header version and charset fixes

Cintix Application Server v3.5.0

Type: minor release
Date: 2026-09-27

Description

Request parsing fixed (URL-decoding, multi-line bodies, Content-Length assembly, UTF-8); PooledDataSource close() returns connection to pool; Server: header version and charset fixes

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.5.0 (minor): Request parsing fixed (URL-decoding, multi-line bodies, Content-Length assembly, UTF-8); PooledDataSource close() returns connection to pool; Server: header version and charset fixes\n- v3.4.0 (minor): MCP protocol status and authentication planning documented; javadoc build fix\n- v3.3.0 (minor): Security and hardning of GraphQL\n- v3.2.1 (bugfix): 3.2.1\n- v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.4.0 — MCP protocol status and authentication planning documented; javadoc build fix

Cintix Application Server v3.4.0

Type: minor release
Date: 2026-09-26

Description

MCP protocol status and authentication planning documented; javadoc build fix

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.4.0 (minor): MCP protocol status and authentication planning documented; javadoc build fix\n- v3.3.0 (minor): Security and hardning of GraphQL\n- v3.2.1 (bugfix): 3.2.1\n- v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.3.0 — Security and hardning of GraphQL

Cintix Application Server v3.3.0

Type: minor release
Date: 2026-08-21

Description

Security and hardning of GraphQL

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.3.0 (minor): Security and hardning of GraphQL\n- v3.2.1 (bugfix): 3.2.1\n- v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.2.1 — 3.2.1 | 2026-08-02 | bugfix | Root path routing fixes — @Action(path = "/"), RequestFilter for unmatched paths

Cintix Application Server v3.2.1

Type: bugfix release
Date: 2026-08-02

Description

3.2.1 | 2026-08-02 | bugfix | Root path routing fixes — @action(path = "/"), RequestFilter for unmatched paths

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.2.1 (bugfix): 3.2.1\n- v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.2.0 — Erros regarding ActionPaths

Cintix Application Server v3.2.0

Type: minor release
Date: 2026-08-02

Description

Erros regarding ActionPaths

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.2.0 (minor): Erros regarding ActionPaths\n- v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.1.2 — Fixed variables in response

Cintix Application Server v3.1.2

Type: bugfix release
Date: 2026-06-19

Description

Fixed variables in response

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.1.2 (bugfix): Fixed variables in response\n- v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.1.1 — Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset

Cintix Application Server v3.1.1

Type: bugfix release
Date: 2026-06-07

Description

Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.1.1 (bugfix): Catch SocketException in HTTP read path — prevent endless loop and SEVERE log spam on client connection reset\n- v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.1.0 — OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth

Cintix Application Server v3.1.0

Type: minor release
Date: 2026-06-06

Description

OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.1.0 (minor): OpenAPI: auto-generated request body schemas, @ApiParam, @ApiSchema, configurable auth\n- v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n

v3.0.2 — Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix

Cintix Application Server v3.0.2

Type: bugfix release
Date: 2026-06-05

Description

Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix

Assets

• cintix-application-server-all.jar — fat jar with all dependencies (gson, html-engine)
• cintix-application-server.jar — slim jar (requires lib/ on classpath)

Recent releases

• v3.0.2 (bugfix): Value tag now resolves @variables without @ prefix; non-greedy {id} path parameter fix\n- v3.0.1 (bugfix): Bugfix merge\n- v3.0.0 (major): Now with OpenAPI and MCP\n- v2.0.0 (major): Production hardening — worker pool, thread safety, logging, connection pool, HTTP/1.1, rate limiting, graceful shutdown, health checks, request timeout\n- v1.5.0 (minor): Production hardening: worker-thread pool, thread safety, proper logging, connection pool validation, HTTP/1.1 compliance, rate limiting (opt-in), graceful shutdown, health-check endpoint, request timeout\n- v1.4.0 (minor): NIO keep-alive, partial write handling, WebSocket lifecycle robustness (broadcaster resilience, keepalive ping/pong, IOException cleanup), removed InputStream.available()\n- v1.3.0 (minor): WebSocket support — annotation-driven, RFC 6455 frame handling, built-in broadcaster, query string passthrough\n- v1.2.0 (minor): GraphQL plugin with lexer/parser/AST/executor, plugin architecture (ServiceLoader, PluginContext), rate limit plugin, scheduler plugin\n- v1.1.0 (minor): REST action dispatch, JSON service description, response caching, parameter injection, mixed path+body params, header case-insensitivity\n- v1.0.0 (major): Initial release: NIO event loop, annotation-driven routing, static file serving, HTML server-page rendering, JDBC utilities\n