Release 2.1.0

This release supports the latest Spring Boot 3.4.0 version along with Spring Framework version 6.2.0.
Note: Changes in parameter decoding may lead to changed behavior (encoded variable seen before, now correctly decoded - see #1084).

Features

• Spring Boot 3.4.0 and Spring Framework 6.2.0 support.

Bugfixes

• Added GraalVM Runtime Hints for HttpApiV2 - thanks to @maschnetwork
• decode body if base64 is enable (#1085) - thanks to @npeters
• Fixed NPE when using PathVariable in native image (#1084)
• Update cookie handling to align with rfc6265 specifications (#867, #1056) - thanks to @2012160085
• Native sample: remove --enable-preview (#1061)
• Remove logging of credentials - thanks to @mbfreder
• Query parameter values not URL decoded when using a RequestStreamHandler implementation (#976, #1084) - thanks to @jpfennelly
• avoid ClassCastException for non-web application contexts (e.g. webflux) (#904)

Dependencies

• Update Spring dependencies (framework to 6.2.0, security to 6.4.1, boot to 3.4.0, spring-cloud-function-serverless-web to 4.1.4)
• Update Log4J dependencies to 2.24.2
• Update SLF4J version to 2.0.16
• Update Jackson version to 2.18.1
• Update Jersey dependency to 3.1.9
• Update maven-dependency-plugin to 3.8.1
• Update JUnit version to 5.11.3
• Update to Apache HttpClient 5.4.1
• Update maven-archetype-plugin and archetype-packaging to 3.3.1 (#563)

Release 2.0.3

This release contains one bugfix and dependency updates.

Bugfixes

• Regression: NPE when multi-value headers are used with ALB (#909, #910) - thanks to @mbfreder

Dependencies (only mentioning major dependencies)

• Update Spring dependencies (framework to 6.1.10, security to 6.2.5, boot to 3.2.7)

Release 2.0.2

This release contains bugfixes and several dependency updates.

Bugfixes

• reuse AsyncInitializationWrapper in SpringDelegatingLambdaContainerHandler (#758, #883)
• getRemoteHost and getRemotePort for ALB (#816, #827) - thanks to @mbfreder
• SpringDelegatingLambdaContainerHandler unable to respond with rendered templates (#858) - thanks to @olegz

Dependencies (only mentioning major dependencies)

• Update Spring dependencies (framework to 6.1.8, security to 6.2.4, boot to 3.2.6)
• Update Jersey to 3.1.7
• Update spring-cloud-function-serverless-web to 4.1.2
• Update Jackson to 2.17.1
• Update commons-codec to 1.17.0
• Update SLF4J to 2.0.13
• Update aws-lambda-java-events to 3.11.5

Release 2.0.1

This release contains bugfixes and several dependency updates.

Bugfixes

• Add support for IAM Authorizers in combination with 2.0 payload (#780, #815) - thanks to @jonife
• Fix web context initialization during Snapstart (#805, #814) - thanks to @olegz

Dependencies (only mentioning major dependencies)

• Update Spring dependencies (framework to 6.1.5, security to 6.2.3, boot to 3.2.4)
• Update Jersey to 3.1.6
• Update spring-cloud-function-serverless-web to 4.1.1
• Update Log4J to 2.23.1
• Update Jackson to 2.17.0
• Update maven-shade-plugin to 3.5.2
• Update maven-assembly-plugin to 3.7.0
• Update com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.0 to 4.8.3.1
• Update commons-codec:commons-codec from 1.16.0 to 1.16.1
• Update com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0
• Update org.mockito:mockito-core from 5.10.0 to 5.11.0
• Update jakarta.activation:jakarta.activation-api from 2.1.2 to 2.1.3
• Update org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.1
• Update org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0
• Update org.apache.maven.plugins:maven-gpg-plugin from 3.2.1 to 3.2.2
• Update org.owasp:dependency-check-maven from 9.0.9 to 9.1.0
• Update org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12
• Update com.github.spotbugs:spotbugs-annotations from 4.8.3 to 4.8.4
• Update org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Release 2.0.0

After two milestones we're finally releasing the next major version 2.0.0 with support for Spring Framework 6.x, Spring Boot 3.x and JAX-RS/ Jersey 3.x.

Features

• GraalVM native image support for Spring Web workloads (#739, #760) - thanks to @olegz (and @maschnetwork for improving the related sample)
• Added SpringBoot3-GraphQL sample (#751) - thanks to @mbfreder
• Use of Kong as alternative API-Gateway - thanks to @seshubaws

Bugfixes

• Fix typos in FilterChainManager (#625) - thanks to @2012160085
• Modify algorithm for parameter transformation logic (#616) - thanks to @valerena
• Deprecate asyncInit & account for other initialization types (#659) - thanks to @richarddd
• Fix multipart files processing when Array of files with same fieldName is sent in request (#675) - thanks to @mbfreder
• Fix Incorrect ServerName with ALB (#684) - thanks to @mbfreder
• handle Spring's ErrorResponse in separate default ExceptionHandlers (#691)
• Changed Maven version range to resolve both SNAPSHOTs and released versions for samples (#750) - thanks to @Neves97
• Fix Asynchronous Dispatch Logic in AwsAsyncContext with Spring's DispatcherServlet (#631) - thanks to @2012160085
• Fix request parameter parsing (#754, #755) - thanks to @olegz

Dependencies (only mentioning major dependencies)

• Update SLF4J to 2.0.12
• Update Jackson dependency to 2.16.1
• Update Spring dependencies (framework to 6.1.3, security to 6.2.1, boot to 3.2.2)
• Update Jersey dependency to 3.1.5

Release 1.9.4

Release 1.9.4 is a maintenance release. Main development happens in the main branch for the 2.x versions therefore releases in 1.x branch contain only dependency and security related updates.

Fixes

• Modify version range for archetypes and samples to avoid 2.x release is picked up for 1.x

Dependencies

• Update Spring dependencies (framework to 5.3.31, security to 5.7.11, boot to 2.7.18)
• Update Jersey dependency to 2.41
• Update Struts dependency to 6.3.0.2
• Update Jackson dependency to 2.16.1
• Update aws-lambda-java-core dependency to 1.2.3

Release 2.0.0-M2

Release 2.0.0-M2 is the second milestone release for our next major release 2.0.0.

Features

• Re-enabled multi-part upload functionality using Commons Fileupload 2
• Add implementation of delegating RequestStreamHandler (#603) - thanks to @olegz

Bugfixes

• Ensure listeners are notified after dispatch (#577, #588) - thanks to @olegz
• as per Servlet spec getSession() creates a session if none exists (see https://stackoverflow.com/a/75471488/3156607)

Dependencies (only mentioning major dependencies)

• Update archetypes to use JUnit 5 (#561) thanks to @salmansharifov
• Update Jackson dependency to 2.15.2
• Update Spring dependencies (framework to 6.0.11, security to 6.1.2, boot to 3.1.2)

Release 2.0.0-M1

Release 2.0.0-M1 is the first milestone release for our next major release 2.0.0 and contains several breaking changes. That's why we will support both 1.x and 2.x for some time.
The following table provides an overview about the supported specs and frameworks:

Version	Branch	Java Enterprise support	Spring versions	JAX-RS/ Jersey version	Struts support	Spark support
1.x	1.x	Java EE (javax.*)	5.x (Boot 2.x)	2.x	✅	✅
2.x	main	Jakarta EE (jakarta.*)	6.x (Boot 3.x)	3.x	❌	❌

Please note that multipart upload functionality is currently not supported as we are waiting for a release of Apache Commons Fileupload 2 (see https://issues.apache.org/jira/browse/FILEUPLOAD-309).

Features

• Jakarta EE, Spring 6.x and Spring Boot 3.x support #477, #478, #487, #510, #549 - thanks to @farazhv, @mbfreder and @valerena for contributing

Improvements

• reduce number of transitive dependencies/ move test-classes to separate test-jar
• move to Apache HTTP Client 5 for testing

Bugfixes

• content-type resolution - we return null instead of application/octet-stream if content type cannot be resolved (as per servlet-api docs), a fix to make probeContentType work in Lambda execution environment is being worked on by the Lambda service team #504 - thanks to @Artur- for contributing
• Servlet class loaded with the wrong class loader #506 - thanks to @Artur- for contributing

Dependencies (only mentioning major dependencies)

• Update Jersey dependency to 3.1.2
• Update Jackson dependency to 2.15.1
• Update Spring dependencies (framework to 6.0.9, security to 6.1.0, boot to 3.1.0)

Release 1.9.3

Release 1.9.3 contains one fix and several dependency updates.

Fixes

• AwsProxyHttpServletRequest#getLocale incorrect for locales with country subtag (#511, #512) - thanks to @kerkhofsd for contributing

Dependencies

• Update Spring dependencies (framework to 5.3.27, security to 5.7.8, boot to 2.7.11)
• Update Apache HttpComponents dependencies (httpmime, httpclient to 4.5.14, httpcore to 4.4.16)
• Update Jackson dependency to 2.15.0

Release 1.9.2

Release 1.9.2 contains two fixes and several dependency updates.

Fixes

• Dispatch to the given servlet when using getNamedDispatcher (#502) - thanks to @Artur- for contributing
• Write resources using the charset defined in a Content-Type header (#501) - thanks to @Artur- for contributing

Dependencies

• Update OWASP dependency check to 8.1.2
• Update JUnit to 5.9.2
• Update Spring dependencies (framework to 5.3.26, security to 5.7.7, boot to 2.7.10)
• Update Jackson to 2.14.2
• Update Commons Fileupload to 1.5
• Update SLF4J to 2.0.7
• Update Struts to 6.1.2
• Update Mockito to 4.11.0
• Update Jersey to 2.39.1 along with JAX-RS API to 2.1.1