fix(deps): update helidon.version (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.helidon.media:helidon-media-jackson (source)	2.6.9 -> 3.2.10
io.helidon.webserver:helidon-webserver-static-content (source)	2.6.9 -> 4.1.2
io.helidon.webserver:helidon-webserver (source)	2.6.9 -> 4.1.2
io.helidon.config:helidon-config-yaml (source)	2.6.9 -> 4.1.2

---

Release Notes

oracle/helidon (io.helidon.media:helidon-media-jackson)

v3.2.10

Compare Source

This release contains bugfixes and is recommended for all users of Helidon 3.

A minimum of Java 17 is required to use Helidon 3.

CHANGES

For a list of changes please see the Helidon 3.2.10 CHANGELOG.

v3.2.9

Compare Source

This release contains important bugfixes and is recommended for all users of Helidon 3.

A minimum of Java 17 is required to use Helidon 3.

CHANGES

For a list of changes please see the Helidon 3.2.9 CHANGELOG.

v3.2.8

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

For a list of changes please see the Helidon 3.2.8 CHANGELOG.

v3.2.7

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

For a list of changes please see the Helidon 3.2.7 CHANGELOG.

v3.2.6

Compare Source

This release contains important bugfixes and ehancements and is recommended for all users of Helidon 3.

Java 17 is required to use Helidon 3.2.6.

CHANGES

For a list of changes please see the Helidon 3.2.6 CHANGELOG.

v3.2.5

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

For a list of changes please see the Helidon 3.2.5 CHANGELOG.

v3.2.4

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

For a list of changes please see the Helidon 3.2.4 CHANGELOG.

v3.2.3

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

For a list of changes please see the Helidon 3.2.3 CHANGELOG.

v3.2.2

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

• Config: Filter complex environment properties configuration 6994
• DB: Update serial config for ojdbc driver 7116
• JWT: Security propagation is now disabled with not configured 6806
• LRA: Fix LRA Logging 6733
• LRA: LRA coordinator docker fix 6725
• Messaging: 6847 WLS JMS connector doesn't support named factory bean 6922
• Metrics: Improved performance of metric lookups in MetricProducer 6842
• Metrics: Remove metrics app registry clear-out code from metrics extension; add doc 6956
• MicroProfile: Support for injection of ServerRequest and ServerResponse also via CDI 6798
• MultiPart: Avoid calling MimeParser.offer with empty buffers 6898
• MultiPart: MultiPart Builder improvements 6900
• Tracing: Add support for multiple baggage items 7022
• Tracing: Fix OpenTracingSpan Baggage propagation issue 6987
• Tracing: Make Jaeger Tracer OpenTelemetry Agent aware. 6537
• Tracing: Make Zipkin baggage aware 7004
• Tracing: Move tracer tags to process 7027
• WebServer: Avoid reflecting back user data coming from exception messages 6988
• WebServer: Fix websocket close event propagation on unclean disconnect 7013
• WebServer: Make ByteBufferDataChunk.isReleased and ByteBufDataChunk.isReleased thread-safe 6899
• WebServer: Release Netty ByteBuf after it is consumed by Tyrus 7042
• WebServer: Reset channel auto-read config before upgrading websocket connection 7050
• Dependencies: Integrate build tools 3.0.5 6903
• Dependencies: Upgrade Jackson to 2.15.2 7124
• Dependencies: Upgrade graphql to 18.6 6974
• Dependencies: Upgrade grpc, guava, netty, snappy-java, use slim neo4j driver 7057
• Dependencies: Upgrade maven-dependency-plugin to 3.6.0 6912
• Dependencies: upgrade Weld 6794
• Docs: Documentation enhancements for WebClient 6736
• Docs: Draft of the integration doc for 3.x 6864
• Docs: Fix table formatting 6821
• Examples: Fix params of ExampleObject annotations in examples (#​6040) 6782
• Test: 6524 Intermittent watermark test fix 6835
• Test: Add target(ElementType.METHOD) for annotation mptest 6490
• Test: CipherSuiteTest intermittent failure 6949

v3.2.1

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

This release upgrades Kafka Clients from 2.8.1 to 3.4.0. If you encounter issues running against older Kafka servers or the OCI Streaming Service you might need to use the work-around documented in 6718

• FT: Switch metrics API jar scope to compile from provided 6666
• JPA: Adds an enabled flag to JpaExtension to permit subsequent refactoring and replacement 6512
• JPA: Adds more classes as part of overall JPA refactoring effort 6584
• JPA: Improving JPA pom.xml as part of overall JPA refactoring 6508
• MicroProfile: RestClient and FT intergration changes 6665
• Native image: native-image configuration for Jackson in Helidon MP. 6607
• Security: Unauthenticated status code fix 6482
• Tracing: Add baggage to Helidon Span 6692
• Tracing: Support for different propagators for Jaeger OpenTelemetry 6611
• WebClient: Add option to disable DNS Resolver for WebClient 6492
• WebClient: Proxy now properly selects proxy settings from system properties 6526
• WebServer: Fixed problem in AUTO_FLUSH backpressure strategy 6556
• WebServer: Response should not be chunked if there is no entity 6637
• WebServer: Use checkNested(Throwable) for req.next(Throwable) 6699
• Build: Use GitHub Action for helidon-3.x branch 6500
• Builds: update helidon-version-is-release in doc files when updating release to fix links 6689
• Dependencies: Kafka bump up 2.8.1 > 3.4.0 6706
• Dependencies: Update grpc-java version to 1.54.1 and clean up grpc tests 6685
• Dependencies: Upgrade graphql to 17.5 6533
• Dependencies: Upgrade hibernate to 6.1.7.Final and eclipselink asm to 9.4.0 6514
• Dependencies: upgrade netty to 4.1.90.Final 6511
• Docs: Fix Openapi links issue 6605 6678
• Docs: Update documentation of composite provider flag. (#​6597) 6635
• Docs: Updated doc to reflect current support for FT thread pool properties 6621
• Examples: Add await timeout and replace thenAccept to forSingle 6558
• Examples: Create file validations 6609
• Examples: Fix Helidon Archetype generates broken projects 6721
• Examples: archetypes generating poorly formatted code 6623
• Examples: Update streaming example to use IoMulti 6604
• Test: Use Hamcrest assertions instead of JUnit 6449 6638

v3.2.0

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

This release upgrades SnakeYaml from 1.32 to 2.0. Because of incompatible API changes in SnakeYaml 2 it is possible your application might be impacted if you use SnakeYaml directly. While we recommend you do the upgrade, if that is not possible you may force downgrade SnakeYaml to 1.32 and Helidon 3.2.0 will still work.

CHANGES

• Config: Escape the key when copying a config node 6304
• JMS: JNDI destination support 6301
• JPA: Minor JPA cleanups 6435
• JTA: Fixes erroneous closing behavior in JtaConnection.java 6321
• Logging: Remove FileHandler from logging.properties 6363
• Metrics: Change default exemplar behavior to conform to OpenMetrics spec; allow users to choose former non-standard behavior 6387
• MultiPart: Fix MultiPartDecoder lazy inner publisher subscription 6225
• MultiPart: WritableMultiPart create methods fixed 6390
• Native image: Dockerfile.native fixes. 6424
• Native image: Fix native-image build-time initialization 6426 6438
• Security: OIDC original uri resolving leaving out query params 6342
• WebServer: Support for non-GET HTTP/2 upgrades 6383
• Build: Use https in pom.xml schemaLocation 6313 and others
• Dependencies: Adapt to SnakeYAML 2.0 changes 5793
• Dependencies: Upgrade OCI SDK to 3.8.0 6427
• Docs: Fix {h1-prefix} unreplaced token in SE metrics guide preamble 6409
• Docs: Remove claim that metrics are automatically propagated from the webserver to the webclient 6319
• Docs: TOC - #​5828 6270
• Docs: Toc tasks from #​5828 6146
• Docs: Typo in metrics guide 3.x 6271
• Docs: [3.x] Describe disabling config token replacement 6166
• Examples: Update mustache format in archetype files 6287
• Tests: Fix RC in JMS error test 6376
• Tests: Fix intermittent issue on OciMetricsSupportTest 6177
• Tests: JMS intermittent test fix 6393
• Tests: Use Hamcrest assertions instead of JUnit 6292 and others

v3.1.2

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3. Helidon 3 requires Java 17 or newer.

CHANGES

• Config: Configuration fixes 6150
• OpenAPI: Fix OpenAPI UI options processing 6110
• Security: OIDC logout functionality fixed 6118
• Security: OIDC tenant SPI default priority changed 6127
• Tracing: Fix parent handling in OpenTelemetry (#​6092) 6128
• WebServer: BodyPart deprecate name() and filename() ; add isNamed 6097
• Dependencies: Update build-tools to 3.0.4 6139
• Docs: changes for tracing and tracing guide 6113

v3.1.1

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3.

Prerequistes

• Helidon 3 requires Java 17 or newer
• Native image support requires GraalVM Java 17 22.3

Changes

• Config: Add built-in support for converting config strings to enum values 5732
• JPA: Adds connection unwrapping abilities to CDISEPlatform.java 5790
• JTA: Introduces JtaConnection.java 5905
• JTA: Introduces LocalXAResource and a few support classes in jta/jdbc 5733
• Messaging: 6035 AQ connector @​ConnectorAttribute 6036
• Messaging: WLS JMS Object-Based Security 5854
• Metrics: Fix improper handling of metrics global tags 5812
• MicroProfile: Fix order of initialization of tracing and security. 5987
• OCI: Add Helidon Metrics integration with OCI 5829
• OCI: Add OCI MP Archetype 5939
• OCI: Register OciMetricsSupport service only when enable flag is set to true 6032
• Security: Accidentally removed updateRequest method returned 5844
• Security: Default tenant is not included for propagation 5898
• Security: Oidc tenant name now properly escaped 5872
• Security: Support for customization of 'logout uri' in OIDC provider 5784
• WebServer: 100 continue triggered by content request 5714
• WebServer: Add allow-list handling to requested URI behavior 5668
• WebServer: Suppress incorrect start-up log message related to requested URI discovery 5862
• WebServer: Switch default back-pressure strategy to AUTO_FLUSH from LINEAR #​5943 5944
• WebSocket: Enhancement to allow different WebSocket applications to be registered on different ports. 5822
• Build: Cleanup Helidon BOM by removing obsolete and internal artifacts 6017
• Dependencies: Bump testng from 7.5 to 7.7.0 5918
• Dependencies: Neo4j Driver update 5752
• Dependencies: Upgrade jersey to 3.0.9 5787
• Dependencies: Upgrade OCI SDK to 3.2.1 5954
• Docs: DOC add Histogram to SE Metrics 6059
• Docs: Doc fixes for Issue 4673 5614
• Docs: Documentation updates to correct wrong instructions for HOCON config parsing 5972
• Docs: Fix for #​5771 - updates to SE WebServer toc 5772
• Docs: Fix incorrectly reverted icons 5761
• Docs: New subsection describing enhancement to support WebSocket application bindings on different ports 5835
• Docs: TOC updates to include additional levels 6003
• Docs: Updated sitegen.yaml for #​5076 5952
• Docs: Updates to MP TOCs 5923
• Docs: WLS connector doc typo 5803
• Docs: fix tracing docs with incorrect webclient artifact ids 6029
• Examples: Archetype generates wrong Jaeger configuration (SE) 5920
• Examples: Fix parent poms in example 5736
• Test: Follow-up to PR #​5822 5845
• Test: Use Hamcrest assertions instead of JUnit 5962 and Others

v3.1.0

Compare Source

This is a minor release of Helidon and is recommended for all users of Helidon 3. In addition to bug fixes and minor enhancements, this release contains two dependency upgrades that could have a small impact on compatibility. These are:

• OCI SDK 3.0. Note that if you are using Helidon MP OCI SDK integration then you will not need to specify an HTTP Client Library as the Helidon support will do that for you.
• GraalVM Native Image 22.3.0.

CHANGES

• Common: Add info to CharBuf exceptions 5375
• Common: Fix inconsistent status name 5642
• Common: WebServer.Builder media support methods with Supplier variants 5632
• Config: Provide MP config profile support for application.yaml (#​5565) 5585
• DBClient: Handle exception on inTransaction apply 5699
• Docker: remove -Ddocker.build=true 5484
• Fault Tolerance: Additional @​Retry strategies 5165
• Grpc: Grpc component Does not handle package directive in proto files. 5283
• JPA: Improves integrations/jdbc/jdbc to better support future JPA improvements 5654
• LRA: LRA false warning 5555
• Messaging: JMS connector update 5327
• Messaging: Kafka producer nacking fix 5510 5524
• Messaging: Message body operator matching with parameters 5574
• Metrics: Fix incorrect tags comparison when trying to match metric IDs 5544
• MicroProfile: Add null check to MP Server.Builder.config() (#​5363) 5372
• Native Image: Adding feature file for MP native image. 5652
• OCI: Replace OCI Java SDK shaded jar with v3 for OCI integration 5704
• OpenAPI: Add OpenAPI U/I integration [3.x] 5568
• OpenAPI: Fix error in OpenAPI handling of default values' types 5289
• Reactive: Multi.forEachCS 5527
• Security: Jwt now support multiple issuers and multi issuer validation 5648
• Security: Jwt scope handling extended over array support 5521
• Security: OIDC multi-tenant and lazy loading implementation 5619
• Security: Use only public APIs to read PKCS#1 keys (#​5240) 5258
• Tracing: Client tracing interceptor no longer clears exception 5601
• WebClient: Add relativeUris flag in OidcConfig to allow Oidc webclient to use relative path on the request URI 5335
• WebServer: Broad changes to handle case properly in headers and parameters 5221
• WebServer: Log an entry in warning level for a 400 or 413 response 5295
• WebServer: Log simple message for a 400 or a 413 and more under FINE 5355
• WebServer: NullPointerException when there is an illegal character in the request 5471
• Webserver: Support for requested URI for web server requests. 5330
• Dependencies: Bump-up reactive messaging/ops to 3.0 5525
• Dependencies: Fix Guava version to match that required by the grpc-java libraries 5503
• Dependencies: Upgrade GraalVM native image to 22.3.0 5308
• Dependencies: Upgrade Netty to 4.1.86.Final 5703
• Dependencies: Upgrade PostgreSQL JDBC driver dependency to 42.4.3 5560
• Dependencies: Upgrade Helidon build-tools to 3.0.3 5726
• Dependencies: Upgrade grpc-java to 1.49.2 5348
• Dependencies: Upgrade to jackson-databind-2.13.4.2 via bom 2.13.4.20221013 5302
• Docs: Declare h1-prefix as early as possible so it is used for the title prefix 5667
• Docs: Document config.require-encryption 5188
• Docs: Fix inadvertent changes in attributes.adoc 5334
• Docs: JAXRS doc updates for 3611 5225
• Docs: Openapi generator doc 3.x 5263
• Docs: flatMapCompletionStage javadoc fix 5622
• Examples: Make JSON-B a default option for Helidon MP projects (backport) 5208
• Examples: OpenAPI generator examples 5649
• Examples: Remove license report from maven lifecycle 5244
• Examples: Use property to skip execution of eclipselink weave 5313
• Examples: database choices should be before packaging (backport) 5294
• Tests: Use Hamcrest assertions instead of JUnit (#​1749) 5189 and others
• Tests: Fix Intermittent TestJBatchEndpoint.runJob 5557
• Tests: Fix intermittent jBatch test 5247
• Tests: Simplify named socket WebTarget injection in Tests 5269
• Tests: Use Hamcrest assertions instead of JUnit in tests/functional/jax-rs-multiple-apps (#​1749) 5634
• Tests: Various metrics test improvements to avoid intermittent failures 5621

v3.0.2

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3.

CHANGES

• CORS: Fix CORS annotation handling error in certain cases 5104
• Config: @​ConfigProperties without bean defining annotation - 3x 4853
• DBClient: Issue #​4719 - Helidon DBClient does not trigger an Exception when no sane DB connection can be obtained 4771
• Health: Use lazy values to initialized HealthSupport FT handlers 5146
• JAX-RS: Make Application subclasses available via our context during Feature executions (3.x) 4786
• Jersey: Register a low-priority exception mapper to log internal errors 5073
• Messaging: AQ Connector - JEP 290 4672
• Metrics: Fix OpenMetrics formatting error (3.x) 4900
• MicroProfile: Fix identification of parallel startup of CDI 4993
• MicroProfile: MP path based static content should use index.html (3.x) 4736
• Native-image: add serial config required for oracle driver (3.x) 4960
• Reactive: MultiFromBlockingInputStream RC fix 3x 3597
• RestClient proxy test exclusion removed 4769
• Security: Access token refresh - 3.x 4821
• Security: JWT-Auth implementation encrypted token recognition fixed 4811
• WebClient: DNS resolver should not be possible to set per request 4814
• WebClient: Dns resolver type method on webclient builder 4838
• WebClient: Round Robin added as DNS resolver option 4798
• WebServer: Default header size increased to 16K - Helidon 3.x 5016
• WebServer: Watermarked response backpressure 3x 4724
• Dependencies: Update graphql-java to 17.4 4966
• Dependencies: Upgrade Hibernate to 6.1.4.Final, EclipseLink to 3.0.3 5100
• Dependencies: Upgrade Postgre driver 4742
• Dependencies: Upgrade protobuf-java 5133
• Dependencies: Upgrade reactive-streams to 1.0.4 5045
• Dependencies: Upgrade snakeyaml to 1.32 4922
• Dependencies: Upgrades OCI to 2.45.0 on helidon-3.x 4827
• Docs: Fix for issue 4793 in tracing doc 4795
• Docs: editorial updates to DB Client guide 4499
• Docs: 4184 logging for an MP app 4903
• Docs: Documentation minor fix 4902
• Docs: Fix broken links for Oracle Universal Connection Pool (#​4781) 4862
• Docs: Fix broken links for ServerThreadPoolSupplier and ScheduledThreadPoolSupplier in mp/fault-tolerance.adoc (#​4899) 4909
• Docs: Fix invalid example in se/config/advanced-configuration.adoc (#​4775) 4920
• Docs: Fix misplaced attribute settings 4954
• Docs: Fix the structure of the table in the section "Traced spans" (#​4792) 4859
• Docs: Replace deprecated ServerConfiguration.builder() on WebServer.builder() in docs - backport 3.x (#​5025) 5117
• Docs: Update a few icons in the docs 4937
• Docs: Updated supported version of MicroProfile to 5.0 4917
• Docs: update old K8s deployment yaml 4760
• Docs: updates for PR 4520 language review 4731
• Examples: 4857 arch fix minor issues (backport) 4874
• Examples: Formatting of generated Helidon SE quickstart (backport) 4969
• Examples: Quickstart MP with Jackson fix JSON message 4905
• Examples: Remove module-info files from examples (3.x) 4894
• Examples: Tracing config updates in archetype 5137
• Examples: WebClient dependency in generated Helidon SE Quickstart should be in test scope (backport) 5020
• Examples: change beans.xml 4845
• Examples: k8s and v8o support in archetype (3.x) 4887
• Examples: Do not generate CDS archive when using Dockerfile.jlink 5158
• Test: 4980 EchoServiceTest timeout 5005
• Test: 5068 mock connector beans xml 3x 5069
• Test: Add robustness to some of the timing-susceptible metrics tests; add util matcher with retry 5047
• Test: Add some retries because post-request metrics updates occur after the response is sent 5136
• Test: Do not use retry to fix the test; stats are approximate; just check for existence, not values 5112
• Test: Fix FT intermittent failure - archetype build (backport) 4934
• Test: Fix for failing GraphQL tests on Windows 4732
• Test: HelidonTest doesn't start container properly with TestInstance.Lifecycle.PER_CLASS #​4663 4865
• Test: Intermittent test fix, using random port for tests. 4800
• Test: Issue 4740 - JPA integration tests should run on every build 5027
• Test: Special Windows build Config TCK profile no longer needed 4816
• Test: Use Hamcrest assertions instead of JUnit in tests 5057 (and others)

v3.0.1

Compare Source

This is a bugfix release of Helidon and is recommended for all users of Helidon 3.

CHANGES

• Common: Change log level to fine for exception caught while intercepting 4640
• Config: Map injection behavior restored 4653
• Config: Obtaining parent dir for watcher service fixed 4665
• Config: Unescape the keys when config is returned as a map 4715
• Deps: Upgrade protobuf to support osx-aarch_64 architecture 4662
• FT: Changes to FT implementation to support interception of proxy methods 4650
• Messaging: JMS Shim wraps null message fix 4671
• Metrics: Config metadata should be optional and provided 4728
• OCI: Undo manual shaded jar tasks 4619
• Security: Configuration parameter 'cookie-encryption-password' takes only a single character rather than a string 4675
• Test: Coordinator test fix 4610
• Test: Fix location of JDK to use a link and not installation 4661
• Test: Fixed orphaned modules. 4658
• WebServer: WebServerTls parts should not be initialized when disabled 4652
• WebSocket: Updated WebSocketHandler to correctly propagate query params from weberver to Tyrus 4647
• Build: Fix all copyright warnings. 4660
• Build: Fix release.sh to update version in attributes.adoc 4689
• Docs: various documentation updates 4727 4627 4707 4713 4714 4623 4726 4689 4687 4692 4676 4637 4723 4730
• Examples: Add examples for SE and MP to update counters of HTTP response status ranges (1xx, 2xx, etc.) 4617
• Examples: Fix JDK base image in Dockerfiles 4634
• Examples: Remove redundant pkg folder in a project generated by helidon CLI 4642

v3.0.0

Compare Source

We are pleased to announce Helidon 3.0.0 a major release that includes significant new features and fixes. As a major release it also includes some backward incompatible API changes.

Notable Changes

• MicroProfile 5.0
• Jakarta EE 9.1 with javax to jakarta Java package namespace change
• Java 17 minimum JDK. Java 11 no longer supported.
• JEP-290 security hardening
• Updated Helidon SE routing API
• Numerous other enhancements and fixes

Upgrading from Helidon 2

For information concerning upgrading your Helidon 2 application to Helidon 3 please see:

• Helidon MP 3.x Upgrade Guide
• Helidon SE 3.x Upgrade Guide

CHANGES

For the list of changes please see the the 3.0.0 CHANGELOG

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher

🚮 Removed packages: maven/io.helidon.config/helidon-config-yaml@2.6.9, maven/io.helidon.media/helidon-media-jackson@2.6.9, maven/io.helidon.webserver/helidon-webserver-static-content@2.6.9, maven/io.helidon.webserver/helidon-webserver@2.6.9

View full report↗︎