chore(deps): update ktor monorepo to v3 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.ktor:ktor-server-test-host	2.3.7 -> 3.0.3
io.ktor:ktor-serialization-kotlinx-json	2.3.7 -> 3.0.3
io.ktor:ktor-server-content-negotiation	2.3.7 -> 3.0.3
io.ktor:ktor-server-swagger	2.3.7 -> 3.0.3
io.ktor:ktor-server-netty	2.3.7 -> 3.0.3
io.ktor:ktor-server-core	2.3.7 -> 3.0.3

---

Release Notes

ktorio/ktor (io.ktor:ktor-server-test-host)

v3.0.3

Compare Source

Published 18 December 2024

Bugfixes

• "Module not found" errors when executing browserProductionWebpack task since 3.0.2 (KTOR-7912)
• Darwin: "IllegalStateException: Content-Length mismatch" on requesting gzipped content (KTOR-7943)
• JS/WASM fails with "IllegalStateException: Content-Length mismatch" on requesting gzipped content (KTOR-7934)
• FormFieldLimit is overwritten by default arg (KTOR-7946)
• A Performance issue reading with ByteReadChannel.readUTF8LineTo request body (KTOR-7941)
• Installing HttpCache before ContentEncoding prevents response body to be decoded (KTOR-7830)
• TestApplication.stop() doesn't stop the application anymore (KTOR-7682)
• File is not commited after closing writeChannel() of the file (KTOR-7845)

v3.0.2

Compare Source

Published 3 December 2024

Bugfixes

• ServletResponseBody is corrupted due to the wrong offset (KTOR-7904)
• File is not commited after closing writeChannel() of the file (KTOR-7845)
• CIO: Response body truncated because read amount of bytes isn't compared against Content-Length (KTOR-7828)
• HttpCache: IndexOutOfBoundsException on malformed Cache-Control header (KTOR-7172)
• call.respondSource returns empty response but passes in tests (KTOR-7683)
• ByteReadChannel.{readShort/readInt/readLong} leads to infinite loop when required bytes distributed in flush and read buffers (KTOR-7746)
• Routing: ContentType.match doesn't match wildcard content types (KTOR-7278)
• Connections aren't released properly if there are multiple parallel connections to the same address (KTOR-7777)
• FileItem.streamProvider is deprecated and doesn't have implementation (KTOR-7731)
• MergedApplicationConfig.toMap replaces nested configs completely without merging (KTOR-7008)
• Digest Auth: Ktor 3.0.1 uses the wrong "nc" value to calculate digest (KTOR-7681)
• JS: "ReferenceError: require is not defined" when compiling to ES Module (KTOR-6158)
• Chunked transfer encoding failure not caught with retry (KTOR-7618)
• HttpCookies: IllegalArgumentException when server returns a raw cookie with not allowed characters (KTOR-7469)
• DefaultRequest: Content-Type header of default request is not overridable (KTOR-6946)

Improvements

• Support binary (Smile) encoding in JacksonConverter (KTOR-7726)
• ServiceLoader.load call is slow on Android (KTOR-7698)

v3.0.1

Compare Source

Published 29 October 2024

Bugfixes

• Remove space from the default client user agent (KTOR-7655)
• Url.segments throws on URLs with root path (KTOR-7625)
• Digest Auth does not implement nc parameter correctly according to RFC 7616 (KTOR-4318)
• about:blank URL should be parsed correctly as about:blank (KTOR-7410)
• ByteReadChannel.{readShort/readInt/readLong} could lead to CPU-bound indefinite loop since 3.0.0 (KTOR-7571)
• CIO: Requests face connection timeouts when executed on the Android main dispatcher (KTOR-6803)
• receiveMultipart fails with "IOException: Failed to parse multipart" when content-type is capitalized (KTOR-7596)

Improvements

• WebSockets logging: The plugin calls toString() unnecessarily on transformed response body (KTOR-7623)
• INFO log message with all server interceptors on server startup (KTOR-7326)
• Digest auth: username and cnonce parameters aren't surrounded with quotes (KTOR-7561)
• ContentType.fromFilePath for newer file formats HEIC, AVIF, HEIF (KTOR-7536)
• Support missing native targets in ktor-serialization-kotlinx-xml (KTOR-7583)

v3.0.0

Compare Source

Published 9 October 2024

Bugfixes

• Darwin: The maxFrameSize option has no effect (KTOR-6963)
• KotlinReflectionInternalError (createClientPlugin) when running release APK on Android (KTOR-7479)
• Netty: UnsupportedOperationException is thrown when responding in CallSetup and CORS plugin is installed (KTOR-4433)
• MicrometerMetrics: Prometheus meter registry 1.13.0 generates configuration warning (KTOR-7035)
• Websockets/Auth: ProtocolException when requesting protected WebSockets endpoint (KTOR-7363)
• Data truncated in receiveParameters and receiveMultipart (KTOR-7201)
• The pathSegments returns empty strings for trailing slashes (KTOR-4402)
• HttpRequestRetry: exponential delay doesn't work for delays <= 1 second (KTOR-7294)
• JS browser: "Error: HttpClientCall expected" on HTTP request when targeting es2015 (KTOR-6882)
• Incomplete write using io.ktor.util.cio.FileChannelsKt#writeChannel (KTOR-1618)
• response.content.copyAndClose(targetFile.writeChannel()) sometimes loses some bytes (KTOR-3003)
• ByteWriteChannel.flush is not Waiting Until Flushing the Internal Buffer to the Destination (KTOR-3102)
• CORS check fails when the Origin header has a value without trailing slash (KTOR-5936)
• Closing socket and selector leaks descriptor on native (KTOR-7255)
• ConnectionUtilsNative leaks descriptors on error (KTOR-6977)
• withTimeout doesn't cancel socket connection on native (KTOR-5289)
• MockEngine: the ability to set dispatcher is removed (KTOR-6417)

Improvements

• Misleading readBytes method name (KTOR-6596)
• Remove reflection utils used only on JVM target from common source set (KTOR-7540)
• Weak security algorithm (MD5) in FileCacheStorage (KTOR-6589)
• Missing constants for AcceptEncoding (KTOR-6412)
• Add respondFile overload with Path parameters (KTOR-7202)
• MalformedInputException confusingly is a Throwable but not an Exception (KTOR-7316)
• CSRF: The allowOrigin method enables the Origin Header validation (KTOR-6695)
• Auth: Drop marker interface requirements (KTOR-7323)
• Routing: Support accessing the request body in RouteSelector (KTOR-7084)
• Make Cookie class Serializable (KTOR-6258)
• Make the internal Route.swaggerUI method public (KTOR-6491)
• Ktor clients and servers should use Dispatchers.IO.limitedParallelism(...) wherever possible (KTOR-6462)

Features

• Support androidNative targets (KTOR-7289)
• Provide the API that simplifies disabling CORS for testing purposes (KTOR-3329)
• Add support for mingw to ktor-network in order to make server and client work on windows (KTOR-4080)

v2.3.13

Compare Source

Published 20 November 2024

Bugfixes

• CIO: Requests face connection timeouts when executed on the Android main dispatcher (KTOR-6803)
• io.ktor.util.TextKt.chomp doesn't work on strings with more than one character (KTOR-7209)
• "java.lang.IllegalArgumentException: Failed requirement." in SelectorManagerSupport (KTOR-2914)
• Backport fix for CVE-2024-49580 to Ktor 2 (KTOR-7727)

Improvements

• Replace custom withTimeout implementation using WeakTimeoutQueue with coroutines.withTimeout (KTOR-3658)
• Add watchosDeviceArm64 target (KTOR-6368)

v2.3.12

Compare Source

Published 20 June 2024

Bugfixes

• NoSuchMethodError when using coroutines 1.9.0-RC (KTOR-7054)
• Server: Content-Type header for static js, css and svg resources misses charset (KTOR-6655)
• Embedded Linux device without iso-8859-1 and UTF-16 cannot use ktor-network (KTOR-7016)

Improvements

• Update netty to 4.1.111.Final (KTOR-7094)
• Update netty due to CVE-2024-29025 (KTOR-7014)
• Update dependency on swagger (KTOR-7019)

v2.3.11

Compare Source

Published 8 May 2024

Bugfixes

• Test client ignores socket timeout (KTOR-6909)

v2.3.10

Compare Source

Published 8 April 2024

Bugfixes

• CallLogging, StatusPages: response logged twice when status handler is used (KTOR-6839)
• NodeJS WebSocket client sometimes drops a frame received immediately after handshake (KTOR-6883)
• IPv6 addresses are not supported in NettyConnectionPoint and CIOConnectionPoint (KTOR-5383)
• JS browser: "Maximum call stack size exceeded" on HTTP request when targeting es2015 (KTOR-6878)
• CIO: File upload fails with NumberFormatException when uploading file larger than INT_MAX bytes (~2.1 GiB) since 2.3.0 (KTOR-6851)
• CallLogging: the plugin completely overrides MDC if at least one entry is configured (KTOR-6642)
• SSE plugin: Duplicated "Content-Type: text/event-stream" headers (KTOR-6735)
• CIO: "getSubjectAlternativeNames(...) must not be null" when IP-addresses are verified and no SAN in the certificate (KTOR-6746)

Improvements

• Inconsistent behavior of Netty and rest engines by returning null or empty string for query parameters without values (KTOR-6850)
• Android: no logs are present in Logcat with Logger.ANDROID (KTOR-1219)

v2.3.9

Compare Source

Published 4 March 2024

Improvements

• Allow to set secure cookie even with http scheme (KTOR-3159)

Bugfixes

• ContentNegotiation: the plugin appends duplicated MIME type to Accept header (KTOR-6684)

v2.3.8

Compare Source

Published 31 January 2024

Bugfixes

• "KeyStoreException: JKS not found" exception on Android when configuring secure connection (KTOR-6720)
• URLBuilder crashes on React Native platforms (KTOR-6576)
• CIO: Unable to perform WebSocket upgrade when Content-Type header is sent in the request (KTOR-6366)
• ContentNegotiation: Adding charset to content type of JacksonConverter breaks request matching (KTOR-6420)
• High Native Server Memory Usage (KTOR-6321)
• Server ContentNegotiation no longer allows multiple decoders for one Content-Type (KTOR-5410)
• Logging plugin blocks response body streaming when level is BODY (KTOR-6482)
• WebSockets: Confusing error message when server doesn't respond with Upgrade (KTOR-6397)
• {...} (tailcard) does not match URLs ending with '/' (KTOR-2121)
• HttpCache: NumberFormatException for cache-control with max age more than Int.MAX_VALUE (KTOR-6505)
• CORS: allowHost without the second argument doesn't allow the secure host (KTOR-6494)
• "ReferenceError: 'self' is not defined" when using URLBuilder in a custom JS engine (KTOR-5978)
• MDC diagnostic value is changed during logging of the request (KTOR-6528)
• WebSocket doesn't get terminated when runBlocking is used (KTOR-6664)
• CIO: "getSubjectAlternativeNames(...) must not be null" error on Android when using CA without SAN since 2.3.5 (KTOR-6396)
• RequestConnectionPoint should implement toString() (KTOR-6577)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud