Skip to content

Releases: vapor/vapor

4.92.5 - Fix some Sendable warnings on 5.10

20 Mar 13:19
11cdb29
Compare
Choose a tag to compare

What's Changed

Fix some Sendable warnings on 5.10 by @sidepelican in #3158

Fix a number of warnings in Swift 5.10 like below.

Fix simple issues that can be addressed by simply adding Sendable.

New Contributor

This patch was released by @0xTim

Full Changelog: 4.92.4...4.92.5

4.92.4 - Allow `HTTPServer`'s configuration to be dynamically updatable

20 Feb 13:51
3a7da19
Compare
Choose a tag to compare

What's Changed

Allow HTTPServer's configuration to be dynamically updatable by @dimitribouniol in #3132

This allows many aspects of the HTTP server configuration to be changed after the server starts without needing to stop and restart it, or drop existing connections in the process.

Some things that can now be re-configured include request/response configuration options, HTTP version support, HTTP pipelining, TLS configuration (ie. enabling/disabling, rotating certificates, etc…), server name, metrics reporting, the logger, and the shutdown timer.

Fixes #3130.

New Contributor

This patch was released by @0xTim

Full Changelog: 4.92.3...4.92.4

4.92.3 - Fix issue when client disconnects midway through a stream

14 Feb 11:35
9da9d14
Compare
Choose a tag to compare

What's Changed

Fix issue when client disconnects midway through a stream by @0xTim in #3102

Fixes an issue when a client disconnects mid way through streaming a request in a Swift concurrency context. In certain cases this would trigger a de-init off the event loop, leading to a crash.

This fixes the issue by using a lock instead of a loop bound wrapper

Reviewers

Thanks to the reviewers for their help:

This patch was released by @0xTim

Full Changelog: 4.92.2...4.92.3

4.92.2 - Fix handling of "flag" URL query params

07 Feb 14:02
664a063
Compare
Choose a tag to compare

What's Changed

Fix handling of "flag" URL query params by @gwynne in #3151

Flag query parameters (e.g. /foo?bar&baz) were broken by 4.75.0, and apparently no one noticed for quite awhile. They now work again. Many thanks to @daveanderson for reporting this!

Fixes #3150.

This patch was released by @gwynne

Full Changelog: 4.92.1...4.92.2

4.92.1 - Fix URI handling with multiple slashes and variable components.

24 Jan 12:20
4942d74
Compare
Choose a tag to compare

What's Changed

Fix URI handling with multiple slashes and variable components. by @gwynne in #3143

Resolves some more subtle remaining issues in how URI is handled with respect to HTTP requests.

Fixes #3142.

This patch was released by @gwynne

Full Changelog: 4.92.0...4.92.1

4.92.0 - Fix broken URI behaviors

22 Jan 23:17
d5025b3
Compare
Choose a tag to compare

What's Changed

Fix broken URI behaviors by @gwynne in #3140

Numerous issues have arisen with the changes made to URI as a result of the fix for GHSA-r6r4-5pr8-gjcp. This update fixes all known issues and restores several changed URI behaviors (although, quite deliberately, not all of them), including new tests. Fixes #3133, #3135, #3137, and #3138.

Also addresses Sendable warnings in ContentEncoder, ContentDecoder, ContentContainer, PlaintextDecoder, PlaintextEncoder, URLQueryDecoder, URLQueryEncoder, URLQueryContainer, URLEncodedFormDecoder, and URLEncodedFormEncoder.

Shoutout to @weissi, @grahamburgsma, and @finestructure for their help tracking down the various problems, thank you all!

Reviewers

Thanks to the reviewers for their help:

This patch was released by @gwynne

Full Changelog: 4.91.1...4.92.0

4.91.1 - Update routing-kit version

07 Jan 21:14
0680f9f
Compare
Choose a tag to compare

What's Changed

Update routing-kit version by @marius-se in #3131

Update routing-kit version to get Equatable conformance for PathComponents

Related to vapor/routing-kit#129
and swift-server/swift-openapi-vapor#13 (comment)

New Contributor

This patch was released by @gwynne

Full Changelog: 4.91.0...4.91.1

4.91.0 - Use `singleton` `EventLoopGroup`

07 Jan 17:05
5f7c5a3
Compare
Choose a tag to compare

What's Changed

Use singleton EventLoopGroup by @MahdiBM in #3128

Use the new singleton EventLoopGroup for more convenient and sometimes more performant APIs.

Reviewers

Thanks to the reviewers for their help:

This patch was released by @MahdiBM

Full Changelog: 4.90.0...4.91.0

4.90.0

03 Jan 16:36
6db3d91
Compare
Choose a tag to compare

⚠️ Security Update ⚠️

This release fixes a long standing issue in Vapor's URI parsing if users attempt to parse untrusted input that could lead to potential host spoofing. This was caused by using a C implementation with a uint16_t index with no bounds checking. For more details see the security advisory GHSA-qvxg-wjxc-r4gg.

This vulnerability has been designated as CVE-2024-21631. Thank you to baarde for reporting!

4.89.3 - Fix setting public folder for `FileMiddleware` when using bundles

14 Dec 02:56
67fe736
Compare
Choose a tag to compare

What's Changed

Fix setting public folder for FileMiddleware when using bundles by @grantjbutler in #3113

This PR fixes an issue where, if you provided a subfolder within a bundle’s resources, the wrong path would be provided to the FileMiddleware, causing the resources to not be loaded.

For example, given a bundle with the following structure:

App.app/
└── Contents/
    β”œβ”€β”€ MacOS/
    β”‚   └── App
    └── Resources/
        └── web-app/
            └── Public
                └── index.html

If you tried to create an instance of FileMiddleware that tried to use web-app/Public/ as the folder to serve files from, FileMiddleware would incorrectly use the resource path of the bundle (App.app/Resources/) instead of the full path to the specified folder (App.app/Resources/web-app/Public/).

New Contributor

This patch was released by @gwynne

Full Changelog: 4.89.2...4.89.3