v7.7.0

Improvements

• XML Schema, WSDL and Schematron validation no longer queue behind a fixed-size validator pool; schemas and the Schematron XSLT are compiled once at startup #3360
• Faster Basic Authentication #3364
• JSONPath expressions are compiled once instead of per request #3363
• oauth2: keep the user session when the authorization server is briefly unreachable #3293
• Correct status codes for ACME challenge and STOMP errors #3401
• wsdl2openapi validates the structure of WSDL documents and flags errors

Fixes

• call now honors httpClientConfig #3404
• clamav: a detected virus was reported as "Could not reach clamav daemon" #3397
• rateLimiter: fix the reset time computation #3398
• cors: fix the preflight error message #3396
• choose: handle exceptions in the executing case #3395
• balancer: HTTPS support when calculating a node's destination URL #3414
• wsdl2openapi: JSON-to-SOAP conversion is thread safe; it broke under concurrent load #3361
• soap2Json: no longer drops a root-level scalar response #3304
• Fix OpenAPI rendering in the Swagger UI #3370
• OAuth2: fix lost session updates that broke the CSRF state #3261
• OAuth2: the refresh token monitor is shared between requests #3356
• Fix XML parsing when the Content-Type charset conflicts with the XML declaration #3305

HTTP protocol conformance

• Handle 1xx/204/205/304 responses without a body #3343
• Reject headers with whitespace before the colon (RFC 9112) #3337
• Fix Accept q-value tie order, Keep-Alive overflow and timeout cap #3348
• Drain unknown-length bodies on EOF in Body.discard() [#3342](https://github.com/membran
• Fix the length of an empty chunked body #3340, #3351
• A backend response without a reason phrase is no longer forwarded with a literal "null" [/pull/3344)
• Fix Header.setValue() reordering other headers, and a header hash issue #3345, #3339

Dependencies

• Jackson 2.22.3 #3419

Full changelog: v7.6.2...v7.7.0