3.10.0

Full Changelog

Fixed bugs:

• UnsupportedOperationException in LogbookHttpRequestInterceptor with Spring Boot 3.2.2 and Apache Http Client 5 (how to fix test?) #1884
• ktor-client: response replaces request body #1868
• Quarkus Resteasy endpoint returning 500 to client after HEAD request because of Logbook NullPointerException #1384

Merged pull requests:

• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.10.1 to 3.11.1 #1952 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.1 to 3.5.2 #1951 (dependabot[bot])
• Bump ktor.version from 2.3.12 to 3.0.1 #1949 (dependabot[bot])
• Bump jackson.version from 2.18.0 to 2.18.1 #1948 (dependabot[bot])
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.4.1 #1947 (dependabot[bot])
• Bump logback-classic.version from 1.5.11 to 1.5.12 #1946 (dependabot[bot])
• Bump spring-boot.version from 3.3.4 to 3.3.5 #1945 (dependabot[bot])
• Bump org.wiremock:wiremock-standalone from 3.9.1 to 3.9.2 #1944 (dependabot[bot])
• Bump junit.version from 5.10.2 to 5.11.3 #1943 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.13 to 6.1.14 #1941 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.22 to 1.1.23 #1939 (dependabot[bot])
• Bump logback-classic.version from 1.5.9 to 1.5.11 #1938 (dependabot[bot])
• Bump kotlin.version from 2.0.20 to 2.0.21 #1935 (dependabot[bot])
• Bump io.github.openfeign:feign-core from 13.4 to 13.5 #1933 (dependabot[bot])
• Bump logback-classic.version from 1.5.8 to 1.5.9 #1932 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.0 to 3.5.1 #1931 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.16.2 to 3.17.1 #1929 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.10.0 to 3.10.1 #1928 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.113.Final to 4.1.114.Final #1927 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.6 to 3.2.7 #1925 (dependabot[bot])
• Bump jackson.version from 2.17.2 to 2.18.0 #1923 (dependabot[bot])
• Bump com.google.guava:guava from 33.3.0-jre to 33.3.1-jre #1919 (dependabot[bot])
• Improve README.md: Define the unit of the max-body-size property #1918 (bwaldvogel)
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.0 #1917 (dependabot[bot])
• Bump org.wiremock:wiremock-standalone from 3.6.0 to 3.9.1 #1916 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.112.Final to 4.1.113.Final #1915 (dependabot[bot])
• Bump org.assertj:assertj-core from 3.26.0 to 3.26.3 #1914 (dependabot[bot])
• Bump org.projectlombok:lombok from 1.18.32 to 1.18.34 #1912 (dependabot[bot])
• Use Grizzly instead of JDK-HTTP to improve test speed by 15X #1910 (msdousti)
• Fix JAX-RS filter NPE for empty entities #1909 (msdousti)
• Bump io.github.openfeign:feign-core from 13.2.1 to 13.4 #1908 (dependabot[bot])
• Bump org.codehaus.mojo:versions-maven-plugin from 2.16.2 to 2.17.1 #1907 (dependabot[bot])
• Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 #1906 (dependabot[bot])
• Bump spring-boot.version from 3.2.3 to 3.3.4 #1905 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.12 to 6.1.13 #1903 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.4 to 3.2.6 #1902 (dependabot[bot])
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 #1901 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.1 to 3.4.2 #1900 (dependabot[bot])
• Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1896 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.0 #1895 (dependabot[bot])
• Bump ktor.version from 2.3.11 to 2.3.12 #1894 (dependabot[bot])
• Bump slf4j.version from 2.0.13 to 2.0.16 #1893 (dependabot[bot])
• Bump jackson.version from 2.17.1 to 2.17.2 #1892 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.9.0 to 3.9.1 #1891 (dependabot[bot])
• Bump kotlin.version from 2.0.0 to 2.0.20 #1890 (dependabot[bot])
• Bump net.logstash.logback:logstash-logback-encoder from 7.4 to 8.0 #1889 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.16.1 to 3.16.2 #1888 (dependabot[bot])
• Add mandatory properties to .zappr #1886 (kasmarian)
• Close resources in FeignLogbookLogger #1883 (Nazukin-Dmitry)
• Bump com.google.guava:guava from 33.2.0-jre to 33.3.0-jre #1879 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.8 to 6.1.12 #1878 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.19 to 1.1.22 #1877 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.110.Final to 4.1.112.Final #1872 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.8.0 #1871 (dependabot[bot])
• Fix for #1868 - make State subclasses real classes #1869 (noffke)
• Bump jakarta.servlet:jakarta.servlet-api from 6.0.0 to 6.1.0 [#1859](https://github.com...

3.9.0

Full Changelog

Fixed bugs:

• Default QueryFilter has a very slow RegEx on certain inputs #1838
• [logbook-ktor-server] Content-Type header not parsed correctly from the request #1823
• [logbook-ktor-client] Dead locks on large request/response bodies #1822
• [logbook-ktor-client] removes Content-Type request header #1821
• logbook-ktor-server removes Content-Type header from response #1627

Merged pull requests:

• Bump org.assertj:assertj-core from 3.25.3 to 3.26.0 #1849 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.6 to 6.1.8 #1846 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.109.Final to 4.1.110.Final #1845 (dependabot[bot])
• Bump org.wiremock:wiremock-standalone from 3.4.2 to 3.6.0 #1844 (dependabot[bot])
• Bump kotlin.version from 1.9.24 to 2.0.0 #1843 (dependabot[bot])
• Bump org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0 #1842 (dependabot[bot])
• Improve performance of query filters (especially on large bodies) #1839 (aukevanleeuwen)
• Fix minor typo in documentation #1837 (aukevanleeuwen)
• Bump io.projectreactor.netty:reactor-netty from 1.1.18 to 1.1.19 #1836 (dependabot[bot])
• issues/1823 use full content type in Ktor's ServerRequest #1834 (kasmarian)
• issues/1821 retrieve content-type from Ktor's OutgoingContent #1833 (kasmarian)
• wrap ktor client response handling into HttpClient context #1832 (kasmarian)
• Bump jakarta.ws.rs:jakarta.ws.rs-api from 3.1.0 to 4.0.0 #1830 (dependabot[bot])
• Bump ktor.version from 2.3.10 to 2.3.11 #1829 (dependabot[bot])
• Bump jackson.version from 2.16.1 to 2.17.1 #1828 (dependabot[bot])
• Bump kotlin.version from 1.9.23 to 1.9.24 #1827 (dependabot[bot])
• Bump com.google.guava:guava from 33.1.0-jre to 33.2.0-jre #1826 (dependabot[bot])
• Bump commons-codec:commons-codec from 1.16.1 to 1.17.0 #1820 (dependabot[bot])
• Fix Ktor plugin to handle requests with empty body #1819 (msdousti)
• Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.2 to 3.5.3 #1818 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.1 #1816 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.3 to 3.2.4 #1815 (dependabot[bot])
• Bump logback-classic.version from 1.5.4 to 1.5.6 #1812 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.5 to 6.1.6 #1810 (dependabot[bot])
• Bump slf4j.version from 2.0.12 to 2.0.13 #1808 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.107.Final to 4.1.109.Final #1806 (dependabot[bot])
• Return original attributes from webflux ClientRequest #1805 (Dyuvarov)
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.2 to 3.2.3 #1804 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.8 to 3.16.1 #1802 (dependabot[bot])
• Bump logback-classic.version from 1.5.3 to 1.5.4 #1800 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1 #1799 (dependabot[bot])
• Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 #1798 (dependabot[bot])
• Bump ktor.version from 2.3.9 to 2.3.10 #1796 (dependabot[bot])

3.8.0

Full Changelog

Fixed bugs:

• URI in request log is missing slash character before path #1793
• UnsupportedOperationException: null when using logbook-httpclient (4.0) #1734
• No traceId for SpringCloudGateway request in SpringBoot 3.2.0 #1694

Closed issues:

• Does setting the log level to debug enable log output? #1729
• Eliminate superfluous filter execution #1713
• Make Logbook interceptors fault tolerant #1702
• Obfuscate json body fields using json path or json pointer #1641
• Allow to obfuscate body #1366

Merged pull requests:

• Bump io.projectreactor.netty:reactor-netty from 1.1.15 to 1.1.18 #1795 (dependabot[bot])
• Add slash to path if it's not present #1794 (kasmarian)
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.2 #1792 (dependabot[bot])
• Bump org.projectlombok:lombok from 1.18.30 to 1.18.32 #1790 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 #1789 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.4 to 6.1.5 #1787 (dependabot[bot])
• Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre #1786 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.8.0 to 3.9.0 #1784 (dependabot[bot])
• Bump kotlin.version from 1.9.21 to 1.9.23 #1780 (dependabot[bot])
• Bump logback-classic.version from 1.5.2 to 1.5.3 #1779 (dependabot[bot])
• Bump ktor.version from 2.3.8 to 2.3.9 #1778 (dependabot[bot])
• Add a warning about logbook.write.max-body-size not preventing the buffering #1777 (kasmarian)
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.6 to 3.15.8 #1776 (dependabot[bot])
• Bump logback-classic.version from 1.4.14 to 1.5.2 #1775 (dependabot[bot])
• Bump org.wiremock:wiremock-standalone from 3.3.1 to 3.4.2 #1772 (dependabot[bot])
• Bump spring-boot.version from 3.2.2 to 3.2.3 #1770 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.1 to 3.5.2 #1769 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.1.3 to 6.1.4 #1765 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.106.Final to 4.1.107.Final #1764 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.7.0 to 3.8.0 #1763 (dependabot[bot])
• Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #1762 (dependabot[bot])
• Bump io.github.openfeign:feign-core from 13.2 to 13.2.1 #1761 (dependabot[bot])
• Bump slf4j.version from 2.0.11 to 2.0.12 #1760 (dependabot[bot])
• Bump junit.version from 5.10.1 to 5.10.2 #1758 (dependabot[bot])
• Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 #1757 (dependabot[bot])
• Refactor HTTP status codes with HttpStatus Enum #1756 (achhibi)
• Bump ktor.version from 2.3.7 to 2.3.8 #1755 (dependabot[bot])
• Improve InputStream and OutputStream copying #1753 (achhibi)
• Bump io.github.openfeign:feign-core from 13.1 to 13.2 #1752 (dependabot[bot])
• Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 #1751 (dependabot[bot])
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.3 to 5.3.1 #1750 (dependabot[bot])
• Bump spring-boot.version from 3.2.1 to 3.2.2 #1749 (dependabot[bot])
• Bump org.assertj:assertj-core from 3.24.2 to 3.25.1 #1748 (dependabot[bot])
• Bump jackson.version from 2.16.0 to 2.16.1 #1747 (dependabot[bot])
• Bump slf4j.version from 2.0.9 to 2.0.11 #1746 (dependabot[bot])
• Check for Vulnerabilities via GHE Action #1744 (lukasniemeier-zalando)
• Update MAINTAINERS #1743 (kasmarian)
• Check for Vulnerabilities via GHE Action #1742 (lukasniemeier-zalando)
• Bump io.netty:netty-bom from 4.1.101.Final to 4.1.106.Final #1741 (dependabot[bot])
• Bump json-path to 2.9.0 to address CVE-2023-51074 #1740 (kasmarian)
• Logbook fault tolerancy #1739 (kasmarian)
• Request body only once in ChunkedSink #1737 (kasmarian)
• Use writeTo() to buffer HttpEntity in httpclient #1736 (kasmarian)
• Bump org.springframework:spring-framework-bom from 6.1.1 to 6.1.3 #1733 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.13 to 1.1.15 #1732 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.4 to 3.15.6 #1731 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.5 #1730 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.1 #1728 (dependabot[bot])
• Bump spring-boot.version from 3.2.0 to 3.2.1 #1725 (dependabot[bot])
• Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre #1723 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.6.0 to 3.7.0 #1722 (dependabot[bot])
• Add custom log level support in LogstashLogbackSink constructor #1719 (achhibi)

3.7.2

Full Changelog

Fixed bugs:

• Logbook 3.7.1 pulls in a whole bunch of test dependencies to the production classpath #1711
• Logbook 3.7.0 pulls in Lombok as transitive dependency #1705

Merged pull requests:

• Fix dependency scopes #1712 (msdousti)

3.7.1

Full Changelog

Closed issues:

• Do not mention issues with "not-a-bug" label in release notes #1703

Merged pull requests:

• Bump ktor.version from 2.3.6 to 2.3.7 #1709 (dependabot[bot])
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.3 to 5.3 #1707 (dependabot[bot])
• Fix the scope for "provided" dependencies #1706 (msdousti)
• Exclude issues with no-a-bug label from release #1704 (kasmarian)

3.7.0

Full Changelog

Fixed bugs:

• UnsupportedOperationException in LogbookHttpRequestInterceptor with Spring Boot 3.2.0 and Apache Http Client 5 #1693
• UnsupportedClassVersionError when running on Java 8 and JAX-RS 2.X #1566

Closed issues:

• Spring boot 3 reactive with micrometer - no traceId in logs for service calls and webclient #1513
• Tracing not working for LogbookClientHandler #1512

Merged pull requests:

• Use writeTo() to buffer HttpEntity in httpclient5 #1701 (kasmarian)
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.2 to 5.2.3 #1700 (dependabot[bot])
• Bump ch.qos.logback:logback-classic from 1.4.11 to 1.4.14 #1699 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 #1698 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.3 to 3.15.4 #1696 (dependabot[bot])
• Bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0 #1689 (dependabot[bot])
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.2.2 #1688 (dependabot[bot])
• Bump kotlin.version from 1.9.20 to 1.9.21 #1687 (dependabot[bot])
• Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 #1684 (dependabot[bot])
• Bump org.springframework.security:spring-security-web from 6.1.5 to 6.2.0 #1683 (dependabot[bot])
• Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 #1682 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.0.13 to 6.1.0 #1681 (dependabot[bot])
• Bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 #1680 (dependabot[bot])
• Bump jackson.version from 2.15.3 to 2.16.0 #1679 (dependabot[bot])
• Bump io.github.openfeign:feign-core from 13.0 to 13.1 #1676 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.12 to 1.1.13 #1675 (dependabot[bot])
• Add support for traditional JAX-RS 2.x #1674 (msdousti)
• Call close() on closeable ClientHttpResponse within BufferingClientHttpResponseWrapper.java #1668 (luc-leclerc)
• Bump io.netty:netty-bom from 4.1.100.Final to 4.1.101.Final #1667 (dependabot[bot])
• Bump ktor.version from 2.3.5 to 2.3.6 #1666 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.2 #1664 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.2 #1663 (dependabot[bot])
• Bump junit.version from 5.10.0 to 5.10.1 #1662 (dependabot[bot])
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.2 to 3.15.3 #1661 (dependabot[bot])
• Bump io.github.openfeign:feign-core from 12.5 to 13.0 #1660 (dependabot[bot])
• Bump kotlin.version from 1.9.10 to 1.9.20 #1658 (dependabot[bot])
• Bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 #1657 (dependabot[bot])

3.6.0

Full Changelog

Merged pull requests:

• Fix dependency check issues #1656 (msdousti)
• Bump spring-boot.version from 3.1.4 to 3.1.5 #1654 (dependabot[bot])
• Bump com.squareup.okhttp3:okhttp from 4.11.0 to 4.12.0 #1651 (dependabot[bot])
• Bump org.springframework.security:spring-security-web from 6.1.4 to 6.1.5 #1650 (dependabot[bot])
• Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 #1649 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.0.12 to 6.0.13 #1647 (dependabot[bot])
• Bump jackson.version from 2.15.2 to 2.15.3 #1646 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.11 to 1.1.12 #1645 (dependabot[bot])
• Bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre #1644 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.5.0 to 3.6.0 #1640 (dependabot[bot])

3.5.0

Full Changelog

Closed issues:

• Question: how to propagate Sleuth trace/span ids to logbook Sink.write #1625
• Unresolvable Spring properties #1574
• Can we have filter to exclude by Http method name #1556
• Extract client identifier from authorization token #381

Merged pull requests:

• Bump io.netty:netty-bom from 4.1.98.Final to 4.1.99.Final #1639 (dependabot[bot])
• Fix hints from configuration-metadata.json #1638 (kasmarian)
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.1 to 3.15.2 #1637 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.0 to 3.5.1 #1636 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.97.Final to 4.1.98.Final #1635 (dependabot[bot])
• Bump spring-boot.version from 3.1.3 to 3.1.4 #1634 (dependabot[bot])
• Bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 #1633 (dependabot[bot])
• Bump org.projectlombok:lombok from 1.18.28 to 1.18.30 #1632 (dependabot[bot])
• Bump org.springframework.security:spring-security-web from 6.1.3 to 6.1.4 #1631 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0 #1630 (dependabot[bot])
• Bump org.springframework:spring-framework-bom from 6.0.11 to 6.0.12 #1629 (dependabot[bot])
• Bump io.projectreactor.netty:reactor-netty from 1.1.10 to 1.1.11 #1628 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.0 to 3.4.1 #1626 (dependabot[bot])
• Bump slf4j.version from 2.0.7 to 2.0.9 #1623 (dependabot[bot])
• Bump ktor.version from 2.3.3 to 2.3.4 #1622 (dependabot[bot])
• Bump io.github.openfeign:feign-core from 12.4 to 12.5 #1621 (dependabot[bot])
• Add Method predicates #1606 (kasmarian)
• Extract subject claim from JWT token #1589 (msdousti)

3.4.0

Full Changelog

Fixed bugs:

• Changelog Contains Issues Closed Due to Inactivity #1597
• "logbook.write.max-body-size" not working when creating own BodyFilter that includes defaultValue() #1202

Closed issues:

• Be Compliant with Zalando Open Source Rules #1596
• Springboot configuration file prompt: Cannot resolve configuration property 'logbook.include' #1506
• Add a property to define fields in body to be obfuscated #1266

Merged pull requests:

• Suppress CVE-2023-4586 #1624 (kasmarian)
• Bring back default constructor to LogbookHttpResponseInterceptor #1620 (kasmarian)
• Bump spring-boot.version from 3.1.2 to 3.1.3 #1618 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.96.Final to 4.1.97.Final #1617 (dependabot[bot])
• Bump kotlin.version from 1.9.0 to 1.9.10 #1616 (dependabot[bot])
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.4.0 #1615 (dependabot[bot])
• Bump org.springframework.security:spring-security-web from 6.1.2 to 6.1.3 #1614 (dependabot[bot])
• Bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 #1613 (dependabot[bot])
• Prevent Pull Request Self Approvals #1612 (lukasniemeier-zalando)
• Bump io.projectreactor.netty:reactor-netty from 1.1.9 to 1.1.10 #1611 (dependabot[bot])
• Bump ch.qos.logback:logback-classic from 1.4.9 to 1.4.11 #1609 (dependabot[bot])
• ensure truncation body filter is always last one #1608 (kasmarian)
• Bump ch.qos.logback:logback-classic from 1.4.8 to 1.4.9 #1605 (dependabot[bot])
• Bump jmh.version from 1.36 to 1.37 #1604 (dependabot[bot])
• Bump com.squareup.okio:okio from 3.4.0 to 3.5.0 #1603 (dependabot[bot])
• Bump ktor.version from 2.3.2 to 2.3.3 #1602 (dependabot[bot])
• suppress not applicable CVE #1601 (lukasniemeier-zalando)
• exclude stale issues from changelog #1600 (lukasniemeier-zalando)
• Bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre #1599 (dependabot[bot])
• Add repository map link to README.md #1598 (alexkarezin)
• Update Release Script #1595 (lukasniemeier-zalando)
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 #1594 (dependabot[bot])
• Bump io.netty:netty-bom from 4.1.95.Final to 4.1.96.Final #1593 (dependabot[bot])
• Define json body obfuscation fields via configuration #1592 (kasmarian)

3.3.0

What's Changed

• log request/response without body for POST (#1571) by @MatthiasDrews in #1572
• Bump spring-security-web from 6.1.1 to 6.1.2 by @dependabot in #1584
• log request/response for rejected requests by @MatthiasDrews in #1588
• Bump spring-boot.version from 3.1.1 to 3.1.2 by @dependabot in #1585
• Bump io.netty:netty-bom from 4.1.94.Final to 4.1.95.Final by @dependabot in #1586
• Httpclient gzipped response handling by @lcostela in #1505
• Bump junit.version from 5.9.3 to 5.10.0 by @dependabot in #1590

New Contributors

• @MatthiasDrews made their first contribution in #1572
• @lcostela made their first contribution in #1505

Full Changelog: 3.2.0...3.3.0