CHANGELOG.md

<h2 class="github">Changelog</h2>

This list is not intended to be all-encompassing - it will document major and breaking API
changes with their rationale when appropriate:

### v5.41.1.0 (uncut)
- **http4k-*** : Upgrade some dependency versions.
- **http4k-connect-amazon-iamidentitycenter*** :[Fix 1239] CredentialsProvider.SSO - Credentials caching issue.

### v5.41.0.0
- **http4k-format-xml** : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration.
  **Note:** This change affects how XML entity references are handled. If your code relies on XML entity expansion (like
  replacing &entity; references with their defined content), it will need to be updated to provide the correct configuration when deserialising the XML body.
  Entity references will now remain as unexpanded text in the document.

Full details at: https://www.http4k.org/security/cve-2024-12345/

H/T to @@JAckLosingHeart for the report.

### v5.40.0.0
- **http4k-core** : Allow invalidation of cookie with a path. H/T @ollieabbey
- **http4k-core** : Allow setting cookie value without quotes. H/T @ollieabbey
- **http4k-core** : Fix cookie format for cookie with no attributes. H/T @ollieabbey
- **http4k-testing-webdriver** : Remove usages of deprecated getAttribute API. Now use getDomAttribute instead.
- **http4k-cloudnative** : [Breaking] Deprecation of various functions and re-homing into http4k-platform-k8s module. Some classes and functions have been repackaged.
- **http4k-*** : [PRE RELEASE PREPARATION] As a part of the upcoming V6, several modules are being rehoused to new Maven coordinates within http4k Community edition (and retaining the Apache2 license). In preparation, we have introduced these modules to give users the time to migrate without taking on-board other breaking changes from v6 - essentially allowing the upgrade cycle to be:

1. Upgrade to latest v5 release. Deal with deprecations and module changes.
2. Upgrade to v6 when it is released. Deal with other breaking changes. We expect these to be mainly imports and will be detailed in the v6 release note when we have the chance. In the meantime, this is the list of modules that are being rehoused:

| SOURCE MODULE - v5.X.X.X   | DESTINATION MODULE(S) - v6.X.X.X                                    |
|----------------------------|---------------------------------------------------------------------|
| http4k-aws                 | http4k-platform-aws                                                 |
| http4k-azure               | http4k-platform-azure                                               |
| http4k-cloudevents         | http4k-api-cloudevents                                              |
| http4k-cloudnative         | Split into http4k-config, http4k-platform-core, http4k-platform-k8s |
| http4k-contract            | http4k-api-openapi                                                  |
| http4k-contract-jsonschema | http4k-api-jsonschema                                               |
| http4k-contract-ui-redoc   | http4k-api-ui-redoc                                                 |
| http4k-contract-ui-swagger | http4k-api-ui-swagger                                               |
| http4k-failsafe            | http4k-ops-failsafe                                                 |
| http4k-gcp                 | http4k-platform-gcp                                                 |
| http4k-graphql             | http4k-api-graphql                                                  |
| http4k-htmx                | http4k-web-htmx                                                     |
| http4k-jsonrpc             | http4k-api-jsonrpc                                                  |
| http4k-metrics-micrometer  | http4k-ops-micrometer                                               |
| http4k-opentelemetry       | http4k-ops-opentelemetry                                            |
| http4k-resilience4j        | http4k-ops-resilience4j                                             |

### v5.39.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-amazon-*-fake** : [Unlikely break] Rename `AmazonRestfulFake` to `AmazonRestJsonFake`
- **http4k-amazon-evidently-fake** : Fixed Project status value to be a valid value instead of an empty string

### v5.38.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Unlikely break] Split of RequestWithRoute into Request and RoutedMessage 
- **http4k-realtime-core-*** : Further rework on Sse and Ws to add functionalities missing (which are present in HTTP)

### v5.37.1.1
- **http4k-format-*** : [Fix 1225] Issue with Datastar module being required on the classpath. Causes NoClassDefFoundError.

### v5.37.1.0
- **http4k-format-jackson** : Fixed issue with Jackson pulling in a dependency that it didn't need.

### v5.37.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract-*** :  Ability to model binary downloads in OpenAPI format. H/T @hektorKS
- **http4k-server-*** : [Possible Break] The return type to sse.send() is now `Sse` instead of `Unit`
- **http4k-server-helidon** : Add WebSocket support.
- **http4k-server-*** : Fixes to SSE support for various servers.

### v5.36.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-realtime-core*** : [Possible Break] SSE responses now contain a "handled" flag, so we can now fallback from SSE to HTTP if the route is unbound in SSE. SSE now also returns a 404 if the route is unbound.
- **http4k-server-helidon*** : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
- **http4k-server-helidon*** : [Possible Break] Throw exception if configured with `Immediate` stop mode as it's not supported.
- **http4k-server-jetty*** : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
- **http4k-server-jetty11*** : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback
- **http4k-server-netty*** : [Possible Break] Throw exception if configured with `Immediate` stop mode as it's not supported.
- **http4k-server-undertow*** : [Possible Break] Slight refactor of SSE code to support SSE -> HTTP fallback

### v5.35.5.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-helidon*** : Fixes to SSE support
- **http4k-server-helidon*** : Throw exception if configured with `Graceful` stop mode as it's not supported.
- **http4k-server-undertow*** : Fixes to SSE support

### v5.35.4.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-helidon*** : Add support for SSE. There are some limitations - see HelidonSseTest for details. 
- **http4k-server-helidon*** : Add support for SSE. There are some limitations - see HelidonSseTest for details. 

### v5.35.4.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-helidon*** : Add support for SSE. There are some limitations - see HeliconSseTest for details. 
- **http4k-realtime-core*** : Added Debugging for Websocket and SSE connections.
- **http4k-realtime-core*** : Can now route SSE based on the method as well as the path.

### v5.35.3.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-gcp** : [New module!] SDK support for GCP services.

### v5.35.2.0
- **http4k-server-ktorcio** : Upgrade to Ktor 3
- **http4k-server-ktornetty** : Upgrade to Ktor 3
- **http4k-*** : Upgrade some dependency versions.

### v5.35.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** - [Fix again!] Missing dependencies in various modules
- **http4k-connect*** - [Fix again!] Missing dependencies in various modules

### v5.35.0.0
- **http4k-bom** : Now includes all http4k-connect modules.  

### v5.34.1.0
- **http4k-*** : Upgrade some dependency versions.

### v5.34.0.0
- **http4k-core** : [Unlikely break] Fix parsing of accept header. It may break direct usages of `Accept` class
- **http4k-core** : Fix tracking of uri templates during in-memory request redirection
- **http4k-core** : Make LocalCookie serialisable
- **http4k-testing-tracerbullet** : Render other types of participant in PlantUML diagrams

### v5.33.1.0
- **http4k-*** : Upgrade some dependency versions.

### v5.33.0.1
- **http4k-multipart*** : [Fix #1188] MultiPartFormBody reads body into memory even when stream is available

### v5.33.0.0
- **http4k-*** : Upgrade some dependency versions, including Kotlin to 2.0.21
- **http4k-core** : [Unlikely break] Adding start time to HTTP Transaction. Should be a simple fix if you are already creating your own for some reason. :) H/T @npryce
- **http4k-resilience4j** : Add resilience4j timeout filter. H/T @ollieabbey
- **http4k-format-*** : Adding ability to create BiDiMapping lens. H/T @potfur
- **http4k-server-apache** - [Fix] Apache httpcomponents server throws when returning 204.

### v5.32.4.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** Better diffing of failures in the IDE. @H/T @frednordin
- **http4k-core** Gzip mixed compression mode H/T @IlyaNerd
- 
### v5.32.3.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** Support for binary comparisons using BinaryApprovalTest. @H/T @oharaandrew314

### v5.32.2.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** : Fix `withNameSuffix` which wasn't checking the content type when you overrode the name suffix.§

### v5.32.1.0
- **http4k-core** : Fix ordering of params on `Body.webForm()`
- **http4k-*** : Tightened up nullable types and data class constructor visibility on various APIs

### v5.32.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-apache*** : [Unlikely break]: Removed `insecureApacheHttpClient()` due to deprecated API.
- **http4k-webdriver*** : [Unlikely break]: New Nullable types on WebDriver API led to tightening up our implementations.

### v5.31.1.0
- **http4k-*** : Upgrade some dependency versions.

### v5.31.0.0
- **http4k-server-apache** : [Possible Break] Upgrade httpcore to 5.3, which introduces stricter authority validation. This may break projects with custom version of ApacheServer.

### v5.30.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-jetty** : [Fix] encoding of binary content in Jetty client. H/T @kwydler
- **http4k-client-*** : All websocket implementations implement a unified `WebsocketFactory`. @H/T @oharaandrew314

### v5.30.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-multipart** : [Fix] Further fixes to deletion of temporary files. Should fix memory leak. @H/T @oharaandrew314
- **http4k-server-jetty11** : [Fix] Received binary Websocket frames will no longer have their content coerced to text. @H/T @oharaandrew314
- **http4k-*** : [Breaking] Make `WsMessage` mode explicit. @H/T @oharaandrew314

#### Migration Guide

Previously, a `WsMessage` was sent in either `TEXT` or `BINARY` mode based on whether the `Body` was a `MemoryBody` or `StreamBody`, respectively.

:warning: **Warning:** If you were using the primary constructor of `WsMessage`, you will need to explicitly provide a `WsMessage.Mode` to resolve the new compiler errors.

```kotlin
val textMessage = WsMessage(MemoryBody("hi"), WsMessage.Mode.Text)
val binaryMessage = WsMessage(StreamBody(imageStream), WsMessage.Mode.Binary)
```

:bulb: **Note:** If you were using the secondary `WsMessage` constructors, no changes are necessary.

```kotlin
val textMessage = WsMessage("hi") // Text like before
val binaryMessage = WsMessage(imageStream) // Binary like before
```

:bulb: **Note:** You now have full control over how content is sent.

```kotlin
// have a very long string?  Stream it!
val lotsOfText = WsMessage(StreamBody(imageStream), WsMessage.Mode.Text)

// have your binary buffered already?  Send it as is!
val bufferedBinary = WsMessage(MemoryBody(imageBytes), WsMessage.Mode.Binary)
```

### v5.29.0.0
- **http4k-*** : Upgrade some dependency versions including Kotlin to 2.0.20
- **http4k-security-oauth** : [Breaking] OAuthProvider support for PKCE. This may break code because of the addition of an extra parameter in the OAuth construction. H/T @dkandalov
- **http4k-*** : [New module] Azure SDK integration - use an http4k client with the official libraries
- **http4k-server-*** : [Fix #1163] Request.version is always HTTP/1.1 for server requests, even when using HTTP/2.0

### v5.28.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-multipart** : [Fix] Further fixes to deletion of temporary files. @H/T @oharaandrew314

### v5.28.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Include Vary header on CORS responses. H/T @ollieabbey
- **http4k-multipart** : [Fix Break] Multipart form files were all calling deleteOnExit() instead of being deleted when the Body is closed. Possible memory leak for long running processes. The fix MAY be a change of OS files-system usage if you are not closing your MultiPart form body. @H/T @oharaandrew314 for the report.

### v5.27.0.0
- **http4k-*** : Upgrade some dependency versions including Kotlin to 2.0.10
- **http4k-core** New HTTP status codes. H/T @torfinnberset
- **http4k-core** Added helper method for dealing with forms. H/T @tim-mortimer
- **http4k-core** [Fix] Close backing DiskLocation when MultipartForm closed. H/T @oharaandrew314
- **http4k-testing-kotest** Fix haveSetCookie and haveCookie to work when cookie isn't present. H/T @bagguley

### v5.26.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** : Fix transformer is lost when adding name suffix to Approver H/T @ilya.aliaksandrovich

### v5.26.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Response caching extensions. H/T @ollieabbey
- **http4k-config** : [New Module!] Extraction of typesafe configuration module from http4k-cloudnative.
- **http4k-cloudnative** : [Breaking!] Repackaging of typesafe configuration module classes (org.http4k.cloudnative.env) to http4k-config (org.http4k.config). New imports are required.
- **http4k-contract** : Adds ApiKeySecurity that identifies a consumer and makes it available for later use. H/T @dhs3000

### v5.25.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-lambda*** : [Breaking Fix] Incorrect lambda request context variable is passed - we now pass the incoming reqeust object instead of the converted http4k request. If you were using the LAMBDA_REQUEST_KEY, you can just use the request passed into the handler instead.

### v5.24.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-lambda*** : [Fix] AWS adapter throws on invalid URLs.
- **http4k-testing-webdriver** : [Fix] Base path replacement logic for same-dir-path and dot-path URLs. H/T jweidler

### v5.24.0.0 
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Allow removal of all queries for a URI. H/T @dhs3000
- **http4k-format-kondor** : Upgrade to new version of Kondor. H/T @uberto
- **http4k-testing-strikt** [Break] The upgrade to the latest version drops Java <17 support. If you are still using Java 8, you will need to stick with the previous version of this module.

### v5.23.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : [Approval test break]  Addition of "nullable" field to every model property. This improves JSON output compatability with various tooling for generating types from the definitions.

### v5.22.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-dataframe** : [Break] Move classes to alternative package to not clash with existing format objects. 

### v5.21.2.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-dataframe** : [New module] Support for KotlinX DataFrame. 

### v5.21.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-multipart*** : [Fix #1113] Disk-backed multipart form field data is now cleaned up when the body is closed, including the parent form directory.

### v5.21.0.0
- **http4k-*** : Upgrade some dependency versions including Kotlin to v2
- **http4k-testing-chaos** : [Breaking] Changed Trigger to be a fun interface instead of a typealias. Should be no-op or a simple fix to the type.
- **http4k-core** : [Possible Break] Renamed `CachingFilters.Request/Response`to `CachingFilters.CacheRequest/CacheResponse`. If you have imports then they may break and need to be updated. 

### v5.20.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-chaos*** : [Unlikely break]: remove Hamkrest dependency so that it does not appear randomly in your projects. If you were accidentally relying on this it will need to be re-added manually.

### v5.19.0.0
- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.24
- **http4k-core** : Add support for the timesource typealias `() -> Instant` where a Clock is used. H/T @kwydler

### v5.18.2.0
- **http4k-core** : Add convenience methods to read bodies from HttpMessages as JSON/XML/CSV etc.. `request.json<MyType>()`

### v5.18.1.0
- **http4k-core** : Add convenience methods to set common headers to HTTP message.

### v5.18.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Behaviour break] We now do not set the legacy Expires header in CachingFilters. Modern caches should use the Cache-Control header instead (max-age).

### v5.17.0.0
- **http4k-*** : Tweaks to make the K2 compiler happy
- **http4k** : Added convenience methods to set the body of an HTTP message. The works for both standard body types and with automarshallers. 
- **http4k-core** : Fix request source in SunHttp. H/T @dkandalov
- **http4k-contract** : Added top-level MetadataRetrieval to schema objects. H/T @BBB
- **http4k-format-*** : [Unlikely break] rename `with()` functions on auto-marshallers to match content type, so you can now do `req.json(myObj)` and get the content type and body set in one go. Likewise for other content types

### v5.16.2.0
- **http4k-*** : Upgrade some dependency versions.

### v5.16.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core**: Add support for surrogate-key headers in EtagSupport. H/T @jason-annadani-springer

### v5.16.0.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** : [Unlikely break] Rename typo in an ApprovalSource instance
- **http4k-testing-approval** : Addition of optional suffix to the approval file name, and added ApprovalTransformer for varying the compared content from the InputStream
- **http4k-core** : [Fix #1084] Route name without a beginning / works for everything except static resources. H/T @ArthurS1

### v5.15.1.0
- **http4k-core** : [Unlikely break] Change to Meta to remove default params 
- **http4k-testing-approval** : Add ability to add a suffix to the approval file name. 

### v5.15.0.0
- **http4k-core** : [Unlikely break] Change to Meta to remove default params 

### v5.14.5.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Make Lenses support metadata passed through the LensBuilder construction methods. H/T @BBB, @ivanmoore @jack-bolles
- **http4k-testing-tracerbullet** : Account for spans across traces with same spanId. H/T @IvanPavlov1995 

### v5.14.4.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-tracerbullet** : Improve identification of actor for incoming traces.
- **http4k-client-helidon** : Various fixes H/T @dkandalov

### v5.14.2.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-tracerbullet** : Improve identification of actor for incoming traces.
- **http4k-client-helidon** : Various fixes H/T @dkandalov

### v5.14.1.0
- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Validator optimisation. H/T @dkandalov
- **http4k-testing-webdriver** : Adding a space between method name and URI when naming spans  H/T @ReinholdsB
- **http4k-testing-webdriver** : Multipart forms in the webdriver, including sending files. H/T @gypsydave5
- **http4k-testing-webdriver** : Fix bug in webdriver form submission + a method for relative Uri resolution. H/T @gypsydave5

### v5.14.0.0
- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.23
- **http4k-*** : Static handlers serve an index.html file from a subdirectory. H/T @mbcltd

### v5.13.9.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-contract** : Implement Kondor Schema creator. H/T @tamj0rd2
- **http4k-cloudnative** : Read environment properties from yaml resources.  H/T @dzappold
- **http4k-webdriver** : [Fix] Bug when submitting with inputs of type submit. H/T @gypsydave5
- **http4k-testing-approval** : Allow adding a suffix to an approval test file name. H/T @becky-sequence

### v5.13.8.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-format-kondor** : Expose converterFor method. H/T @tamj0rd2

### v5.13.7.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-contract** : Allow user to provide schema creation implementation. H/T @tamj0rd2
- **http4k-core** : [Fix #1053]:  Add BiDiLensSpec defaulted with factory method
- **http4k-core** : [Fix #1059]:  Update kondor-json to 2.2.2. H/T @asadmanji

### v5.13.6.1
- **http4k-core** : FollowRedirects also sets port on redirect.

### v5.13.6.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-serverless-lambda** :[Fix #1057] Error when parsing AWS lambda event from S3 bucket
- **http4k-testing-webdriver** :[Fix #1050]  Http4kWebDriver does not work on Windows due to path issues. H/T @cmh-dev
- **http4k-core** :[Fix #1055]  Host header should contain host with port. H/T @obecker

### v5.13.5.0
- **http4k-client-core** : Ensure consistent content-length behaviour across clients
- **http4k-client-apache** : Ensure consistent content-length behaviour across clients
- **http4k-client-apache4** : Ensure consistent content-length behaviour across clients
- **http4k-client-fuel** : Ensure consistent content-length behaviour across clients
- **http4k-client-jetty** : Ensure consistent content-length behaviour across clients

### v5.13.4.1
- **http4k-*** : Fix broken POM dependencies.

### v5.13.4.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-contract** : Support for data4k progressive data models with field metadata via delegate properties

### v5.13.3.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-cloudnative*** : Ability to override separator in `Environment`.

### v5.13.2.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-contract*** : [Fix] Enums do not pick up custom prefixes in model naming. H/T @ashcor for the tip-off! 
- **http4k-opentelemetry*** : [Fix] Fix to set HTTP_REQUEST_BODY_SIZE attribute in OpenTelemetryTracing. H/T @dkandalov
- **http4k-contract*** : Added Canonical model-namer.

### v5.13.1.0
- **http4k-*** : Upgrade some dependency versions
- **http4k-client-helidon** : [Fix #1037] Improve support for query parameters. H/T @franckrasolo

### v5.13.0.1
- **http4k-testing-tracerbullet** : [Fix] Mermaid sequence diagram generation was constantly changing by default editorconfig files and people committing with
  different IDE settings
- **http4k-server-jetty** : [Fix #1023] Header values in quotes lose their quotes. H/T @efasel, @dhs3000

### v5.13.0.0

- **http4k-format-jade4j** : [Breaking] This module has been renamed due to the library Jade4J becoming Pug4J. Migration should be a no-op apart from switching
  the imported module, and renaming your templates from .jade to .pug. Please see [Pug4j docs](https://github.com/neuland/pug4j) for anything else.
- **http4k-format-pug4j** : [New module] Replacement for Jade4j

### v5.12.2.1

- **http4k-webhooks** : Move `VerifyWebhookSignature` filter to ServerFilters as it's not for HTTP clients!

### v5.12.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : [New module!] Support for the [Standard Webhooks](https://www.standardwebhooks.com/) format
- **http4k-core** [Fix #1022] For a request with matching `if-none-match header` the response lacks the etag header. H/T @efasel
- **http4k-core** [Fix #1030] Maven POM for http4k-format-jackson-xml is invalid: jackson-dataformat-xml is missing a version

### v5.12.1.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : Fix lens replacement of path parameter when there is a regular expression in the path segment
- **http4k-format-jackson** : Added lens support for deserialising [data4k](https://github.com/fork-handles/forkhandles/tree/trunk/data4k) containers directly
  from HTTP message bodies (via `Body.json(::JsonNodeDataContainer)).toLens()`

### v5.12.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.22, and Jetty 12 (see below).
- **http4k-server-jetty** - [Breaking] Upgrade to Jetty 12. This is a major rewrite of the Jetty engine and the API surface is incompatible with v11. If you are
  using vanilla Jetty backend then this is a NoOp replacement, otherwise fallback to using the new `Jetty11` module and then plan migration accordingly. Massive
  H/T to H/T @FredNordin for the implementation upgrade.
- **http4k-server-jetty11** - [New Module!] Drop-in replacement module for custom Jetty11 users. Constructor is now called `Jetty11()` instead of `Jetty()`, so
  migration should be very simple. Other renames as required (using `11`) to avoid API clashes in the http4k codebase.
- **http4k-aws** : [Breaking] Tweaks to the signature of `AwsPreSignRequests`. Use `AwsRequestPreSigner` instead. H/T @oharaandrew314

### v5.11.1.0

- **http4k-aws** : Pre-sign AWS requests with the new `AwsPreSignRequests` class. H/T @oharaandrew314
- **http4k-serverless-lambda** : [Fix #1013] Support multi value query parameters in ApiGatewayV2LambdaFunction (
  http4k-serverless/lambda)

### v5.11.0.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : [Unlikely Break: Fix #1011] Jackson does not honour serialisation of Enums when they are used as Map
  keys. The fix MAY break JSON serialisation (which actually is a bug as the expected behaviour is for the Enums to use
  the predefined mapping).

### v5.10.7.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : [Fix #1009] Extracting access token from non-standard AccessToken response fails

### v5.10.6.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : Make RouterDescription print-friendly

### v5.10.5.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-serverless-lambda** : Add support for custom EventBridgeEvent format

### v5.10.4.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.21

### v5.10.3.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-contract** [Fix #1002]: Ability to use RequestContexts for providing a User Principal with Security.

### v5.10.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core-** : [Fix] FollowRedirects now remove host header
- **http4k-testing-webdriver-** : Ability to inject clock into the Webdriver

### v5.10.1.0

- **http4k-testing-webdriver*** : Allow the originalUri method of the OAuthRedirectionFilter to be configured when
  constructing an OAuthProvider H/T @mbcltd
- **http4k-format-*** : Add alternative syntax for Automarshalling injection/extraction of bodies into and out of
  HttpMessages

### v5.10.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.20
- **http4k-testing-webdriver*** : Host header is populated in Http4kWebDriver H/T @mbcltd

### v5.9.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-helidon** : [Breaking] Upgrade to stable v4 of Helidon, API changes.
- **http4k-client-helidon** : [Breaking] Upgrade to stable v4 of Helidon, API changes.
- **http4k-*** : [Breaking - dev only] http4k is now built with Java 21, although Java 8 is still targeted.

### v5.8.6.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : New filter to validate zipkin headers. H/T @time4tea

### v5.8.5.1

- **http4k-*** : Fix maven dependencies marked as optional in various http4k modules

### v5.8.5.0

- **http4k-*** : Upgrade some dependency versions, including CVE fix for Jetty.
- **http4k-core** : Rename `Events.then()` with `Events.and()` for clarity.

### v5.8.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-lambda** : Add support to multiple query/header values with the same key

### v5.8.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-incubator*** : Added HTMX emulation on Http4kWebDriver H/T @mbcltd

### v5.8.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core*** : Added extension function `ExecutionService.withRequestTracing()` to propagate Zipkin traces across
  threads

### v5.8.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : BiDiLenses now implement LensInjectorExtractor

### v5.8.0.0

- **http4k-core** : BiDiLenses now implement LensInjectorExtractor
- **http4k-contract** : [Unlikely break] NoRenderer now returns a 404 instead of an empty JSON document.

### v5.7.5.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-aws** : Add support for AwsSdkAsyncClient. H/T @oharaandrew314

### v5.7.4.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-testing-playwright** : [New Module] Easily browser-test your http4k apps with this Playwright JUnit
  extension! H/T @dmcg for the inspiration.

### v5.7.3.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.10
- **http4k-htmx** : Added hyperscript.js webjar to the distribution.

### v5.7.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-htmx** : [New Module] Basic support for htmx development, including Webjar and custom lens types
- **http4k-testing-webdriver** : Improve support for radio buttons and radio groups in the http4k-testing-webdriver. H/T
  @mbcltd

### v5.7.1.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-contract*** : [Fix #964] ContractRoute - inconsistent behavior on route matching. H/T @potfur for the
  investigation.

### v5.7.0.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-server-undertow** : [Unlikely break] - Reverse removal of the connectRequest from the SSE interface. This
  should undo the break caused by the recent rewrite.
- **http4k-server-jetty** : [Unlikely break] - Reverse removal of the connectRequest from the SSE interface. This should
  undo the break caused by the recent rewrite.

### v5.6.5.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-testing-approval** : Whitespace is now trimmed from end of approval file content. Improves compatibility with
  IntelliJ (as final line endings might be added automatically)
- **http4k-testing-webdriver** : [Fix #963] Submitting empty textarea form element in the webdriver causes a validation
  error

### v5.6.4.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-server-apache4**: Upgrade compromised `commons-codec` version. H/T @oharaandrew314
- **http4k-template-jte** : [New module] JTE templating support

### v5.6.3.0

- **http4k-security-oauth** :Add ability to override response mode in OAuthProvider.

### v5.6.2.1

- **http4k-core** : [Fix] Extend URI now supports fragment parameters

### v5.6.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-security-oauth** : [Fix] In-memory request tracking for FakeOAuthServer now supports full AuthRequest.

### v5.7.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-core** : Add some filters for Serverless functions.

### v5.6.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added `nonBlank()` to set of standard BiDiMappings. H/T @dmcg
- **http4k-core** : [Unlikely break: Fix #956] Lenses don't really work for optional fields in HTML form parsing.
  Form-fields are now filtered for values which are not blank. This means that you may need to change form lenses to be
  optional and default to an empty string if they are missing.

### v5.5.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-cloudnative** - Add support for enums in EnvironmentKey
- **http4k-testing-tracerbullet** : [Breaking] Fixed SequenceDiagrams for Mermaid to be formatted correctly. This may
  break approval files for any tests.

### v5.4.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-helidon** : API changes from Helidon alpha to M1
- **http4k-server-helidon** : API changes from Helidon alpha to M1
- **http4k-contract** : [Fix #750] JacksonFieldMetadataRetrievalStrategy is incompatible with kotlinx.serialization
  @Serializable classes. H/T @krissrex
- **http4k-realtime-core** : [Fix #951] Add filters to initialise request context for SSE and WS.
- **http4k-realtime-core** : [Fix #885] Accept websocket subprotocols. Note that not all servers are currently supported
- **http4k-server-jetty** : [Fix #885] Support subprotocols for Websockets

### v5.4.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-aws**: [Fix #656] AWS request signing issue for URLs with special characters. H/T @krissrex
- **http4k-aws**: [Fix #947] AWS request signing issue for duplicated headers and header values with multiple spaces.
  H/T @krissrex
- **http4k-format-kondor-json**: [Unlikely Break] Upgrade kondor-json to 2.0.0. H/T @FredNordin

### v5.3.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.9.0.
- **http4k-core** : Surface root error messages in Body lenses when failure occurs on deserialisation.
- **http4k-template-thymeleaf** : [Unlikely Break] Use HTML rendering mode and .html suffix by default for Thymeleaf
  templates. H/T @mikaelstaldal

### v5.2.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Fix #939] Override all Request and Response mutators for routed messages. H/T @kwydler

### v5.2.0.0

- **http4k-contract-jsonschema** : [New module] Extracted this so we can reuse in non-OpenAPI scenarios
- **http4k-contract** : [Deprecation] Repackaging of JSON schema classes. Should only affect users if they have
  explicitly used/extended the standard behaviour.

### v5.1.2.1

- **http4k-serverless-lambda*** : [Fix #936] AWS SQS null deserialization issues

### v5.1.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth*** : Remove dependency on Kotlin-reflect by adding custom adapters. H/T

### v5.1.1.1

- **http4k-serverless-lambda*** : [Fix #933] AWS SQS deserialization issue when md5OfMessageAttributes is null. H/T
  @oharaandrew314

### v5.1.1.0

- **http4k-realtime-core*** : Readd test client methods for SSE and WS

### v5.1.0.0

- **http4k-server-realtime-core*** : [Breaking - Fix #931] Change Websocket and SSE interfaces to return `WsResponse`
  and `SseResponse` objects. This makes it easier to set response headers and control if a connection is made from the
  incoming request as it is no-longer hidden (it is exposed at the top level instead of being hidden in the SSE and
  Websocket objects). It also means that the interfaces for the protocols follow the same pattern.
- **http4k-server-jetty*** : As above
- **http4k-server-undertow*** : As above
- **http4k-core*** : [Fix #930] Update content-length header after GZipping it. H/T @bjornbugge

### v5.0.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** : [Breaking] Remove all previous deprecations from all modules for v4. To upgrade cleanly, first upgrade
  to `v4.48.0.0` and then re-upgrade to `v5.0.0.0`. This will ensure that you only have to deal with Deprecations
  between the major versions.
- **http4k-templates-dust**: [Breaking] Nashorn is finally removed, so we are dropping support for this module. If you
  are on-pre Java 19 you can continue to use the old module version with no breaking changes.
- **http4k-***: [Breaking] http4k is now built with Java 20. We are still compiling for older Java versions. New major
  versions will now be incoming with every major JDK release in order to track new and retired JVM features (6 month
  cycle).
- **http4k-server-jetty**: New Server Backend `JettyLoom`, based on Loom VirtualThreads. Requires Java 21 to use.
  Standard `Jetty` remains usable with any Java version.
- **http4k-core**: New Server Backend `SunHttpLoom`, based on Loom VirtualThreads. Requires Java 21 to use.
  Standard `SunHttp` remains usable with any Java version.
- **http4k-server-helidon**: [New Module] Helidon is a Loom-first rewrite of the popular server. Requires Java >= 19 to
  use.
- **http4k-server-websocket**: [New Module] A lightweight Websocket server built
  on  [TooTallNate/Java-Websocket](https://github.com/TooTallNate/Java-WebSocket). H/T @oharaandrew314
- **http4k-client-helidon**: [New Module] An HTTP client build from the ground up to take advantage of project Loom.
  Requires Java >= 19 to use.
- **http4k-format-kondor-json**: [New Module] Support for [KondorJson](https://github.com/uberto/kondor-json) , the
  reflection-free JSON library.
- **http4k-testing-tracerbullet**: [New Module] TracerBullet allows you to hook into the http4k `Events` implementation
  to visually document your applications through testing. See example in reference guide.
- **http4k-contract**: Allow RouteMetaDsl to be marked as hidden H/T @oharaandrew314

### v4.48.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.8.22.

### v4.47.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-incubator** Further simplifications of tracing algorithm

### v4.47.1.0

- **http4k-core** Make it easy to propagate or update trace spans in ZipkinStorage
- **http4k-incubator** Further simplifications of tracing algorithm

### v4.46.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added status lookup by code. H/T @jhult
- **http4k-core** : [Unlikely break] Client request tracing now sets and resets the ThreadLocal containing the current
  Zipkin traces. Possible break
  if you were relying on Zipkin state in a downstream handler. This change will allow better in-memory testing as traces
  will be reported correctly inside the context of the filter.
- **http4k-incubator** : [Break] Changes to improve how we create Tracing trees, and this the signature of the Tracer to
  take EventNode which is a tree node.

### v4.45.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core**: [Breaking] Fix #912 - CatchLensFailure filter now can pass the Request object into the receiver. H/T
  @mikaelstaldal
- **http4k-server-format-moshi**: Add support for Sets
- **http4k-security-oauth**: [Breaking] AccessTokens create method took an unnecessary duplicate parameter. To fix, just
  remove the `authorizationCode` parameter from your implementations and use the code from the `tokenRequest`

### v4.44.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core**: SameSite cookie is now lax when it comes to casing.

### v4.44.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Breaking] Allow setting of compression level on GZip filter in both Streaming and Memory mode. To
  fix, simply change from `GzipCompressionMode.Memory/Streaming` to `GzipCompressionMode.Memory()/Streaming()`

### v4.43.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Fix] #901. Improve performance of GZip in streaming mode.

### v4.43.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-undertow** : Upgrade websocket requests based on other common headers. H/T @endofhome
- **http4k-security-oauth** : [Breaking] Make full callback URI available as part `AuthorizationCodeMissing` error.
  Fixes #895
- **http4k-core** : Static resources now return directives as well as content type on served assets.

### v4.42.1.0

- **http4k-*** : Upgrade some dependency versions.

### v4.42.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-kotest** : [Possible break] Fix of [this Kotest issue](https://github.com/kotest/kotest/issues/3130)
  in new dependency release might lead to some surprising changes in behaviour of matchers for comparing JSON nodes

### v4.41.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract-ui-redoc**: [New Module] Serve Redoc with the `redocUiWebjar` function.
- **http4k-contract**: [New Feature] Serve Redoc with the `redocUiLite` function.
- **http4k-contract-ui-swagger**: [Fix] #880. `swaggerUiWebjar` now works properly with a non-root path. Plus
  performance improvements.

### v4.41.3.0

- **http4k-incubator** TracerBullet diagrams have more options for reporting errors.

### v4.41.2.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.8.20.
- **http4k-incubator** TracerBullet diagrams have added colours.

### v4.41.1.1

- **http4k-contract-ui-swagger** Fix dependency from provided -> api

### v4.41.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-opentelemetry*** :Fix #867. OpenTelemetry tracing uses bad default span naming. H/T @krissrex for the report.
- **http4k-contract-ui-swagger** : [New Module] Serve a customized Swagger UI via a bundled WebJar with the
  new `swaggerUiWebjar` function. H/T @oharaandrew314
- **http4k-contract** : Deprecate `swaggerUI` in favor of new `swaggerUiLite` function, which uses a new config format.
  H/T @oharaandrew314

### v4.41.0.0

- **http4k-core*** : [Unlikely break] Fix creation of UriTemplate when it starts/ends with multiple slashes. This
  shouldn't cause any problems that we know about, but we are bumping the breaking version number just in case.

### v4.40.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-apache*** : Fix #866 - ApacheClient does not handle SocketException.

### v4.40.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-incubator** : TracerBullet now renders results of tests by default. Use `RenderingMode` to switch off this
  default behaviour.

### v4.40.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi-yaml** : [Possible clash/break] Upgrade to v2.0 of SnakeYaml (CVE fixes etc) may break
  dependencies which previously used v1.3X.X. It is safe to pin your SnakeYaml version to 1.3X.X if there is a clash
  with other libraries in your stack.

### v4.39.0.0

- **http4k-contract** : [Breaking] Support for HTTP webhooks and callbacks in OpenApi3 models. Note that the Swagger UIs
  do not support OA 3.1.0 yet so we have limited the OA version number to 3.0.0.

### v4.38.0.1

- **http4k-core** : [Fix] Header parsing to split correctly.

### v4.38.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.8.10.
- **http4k-core** : [Unlikely break] Header values now trim leading space (as per RFC)
- **http4k-incubator**: Added D2 support for tracing diagrams.
- **http4k-testing-approval**: Make tests line-ending-agnostic. H/T @oharaandrew314
- **http4k-format-*** : Various tweaks to modules to standardise behaviour. H/T @oharaandrew314

### v4.37.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.8.0.
- **http4k-core** : [Fix] #846 - Status.hashCode is inconsistent with Status.equals.
- **http4k-contract** : Add new endpoint security type: `OpenIdConnectSecurity`. H/T @oharaandrew314
- **http4k-contract** : `swaggerUi` now supports Oauth2 redirects. H/T @oharaandrew314

### v4.36.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-multipart** : Add lensing of Multipart form fields using JSON and Automarshalling
- **http4k-server-jetty** : Add support for serving SSE. H/T @FredNordin
- **http4k-contract** : [Breaking Fix] Fix #842 - Map OpenAPI implementation adds all properties as required H/T @BBB

### v4.35.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Allow access-control-max-age header to be set from cors policy. H/T @moddular
- **http4k-contract** : [Fix] Or security renderer was not rendering properly when the component parts are themselves
  composite securities.

### v4.35.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-incubator**: Trace diagram improvements for PUML, Mermaid and Markdown.

### v4.35.2.0

- **http4k-incubator** : More diagram tweaking.

### v4.35.1.0

- **http4k-incubator** : Tweak of some diagramming.

### v4.35.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-failsafe** : [New Module!] Failsafe is a lightweight, zero-dependency library for handling failures.
  H/T @FredNordin
- **http4k-incubator** : [Breaking] Rewrite of infrastructure for generating tracing diagrams, including new interfaces
  and support for rendering to various formats. Initial support for PUML and Mermaid.

### v4.34.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-undertow** : Remove extra dependencies which aren't needed.
- **http4k-contract**: fix Path value resolution it starts with same string as the prefix URL segment. H/T @tkint

### v4.34.3.1

- **http4k-*** : Fix #827 - Requests with unknown HTTP method result in uncaught exceptions

### v4.34.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Support for arrays of enums in OA3.

### v4.34.2.0

- **http4k-*** : Upgrade some dependency versions.

### v4.34.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-template-rocker** : [New module] Compile-time templating with Rocker!

### v4.34.0.4

- **http4k-contract-** : Fix errant import which broke multipart Openapi V3 spec.

### v4.34.0.3

- **http4k-format-*** : Remove `Json` extension method on `MultipartFormField.Companion` due to problem in JUnit.
  Re-re-fix.

### v4.34.0.2

- **http4k-format-*** : Remove `Json` extension method on `MultipartFormField.Companion` due to problem in JUnit. Refix.

### v4.34.0.1

- **http4k-format-*** : Remove `Json` extension method on `MultipartFormField.Companion` due to problem in JUnit.

### v4.34.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.7.21.
- **http4k-format-*** : Added `auto()` methods to arbitrary lenses (so Query, Header, FormField etc..)
- **http4k-core** : [Unlikely break] `reverseProxy()` now takes the authority into account instead of just the hostname
  from the request. This should only impact you if you are doing reverse proxy operational on client side and using
  localhost without a port as a proxy. To fix - simply add the port to your proxying setup and all should be good.
- **http4k-contract*** : Fix: Remove duplicate content type header.

### v4.33.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-ktor*** : Fix: Remove duplicate content type header.

### v4.33.2.1

- **http4k-contract** : Fix OpenApi rendering for enums when there isn't reflection.

### v4.33.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-resilience4j-jetty** : Fix #804 - CircuitBreaker counts error twice, once as an error and once as a success
- **http4k-client-okhttp** : Added websocket client. H/T @FredNordin.
- **http4k-format-argo** : Fix problem with duplicate keys when creating objects.
- **http4k-security-oauth** : Ability to add scopes to the OAuth refresh token. H/T @p10r

### v4.33.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-jetty** : Added websocket client. H/T @FredNordin.
- **http4k-format-moshi** : Add facility to use lightweight metadata adapter instead of Kotlin reflect. H/T
  @oharaandrew314

### v4.33.0.0

- **http4k-*** : Upgrade some dependency versions, including CVE fix for Handlebars.
- **http4k-multipart**: [Breaking] Add `DiskLocation` and the ability to keep uploaded files permanently stored on disk.
  H/T @jippeholwerda

### v4.32.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Move Jakarta Servlet code from Jetty as is now shared.
- **http4k-contract** : Add `UserCredentialsOAuthSecurity`. This allows the OpenApi spec to define a Resource Owner
  Password Credentials grant. It also includes a shortcut to load the principal into a `RequestContextLens`. H/T
  @oharaandrew314
- **http4k-core**: Add `StringBiDiMappings.csv` to map between string and list, with a configurable delimiter and
  element mapping. H/T @oharaandrew314
- **http4k-multipart**: [Breaking] Add `DiskLocation` and the ability to keep uploaded files permanently stored on disk.
  H/T @jippeholwerda

### v4.32.3.0

- **http4k-*** : Upgrade some dependency versions including CVE fix for Undertow backend.

### v4.32.2.0

- **http4k-core** : Add `StringBidDiMapping.basicCredentials` to easily convert between `Credentials` and basic auth.
  H/T oharaandrew314
- **http4k-core**: Add `Header.AUTHORIZATION_BASIC` lens to easily get and set basic `Credentials` for a message. H/T
  oharaandrew314
- **http4k-contract**: `BasicAuthSecurity` now supports a `RequestContextLens` to store the principal. H/T
  oharaandrew314

### v4.32.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi*** : Added ability to make Automarshallers strict.

### v4.32.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.7.20.
- **http4k-testing-webdriver** : [Unlikely Break] Upgrade has removed deprecated method.

### v4.31.0.0

- **http4k-core** : [Unlikely Break] Added `ZipkinTraceStorage`, defaulting to ThreadLocal implementation. This allows
  centralised storage of trace information in non-standard threading environments (eg. coroutines).

### v4.30.10.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : YAML is now a recognised content type.

### v4.30.9.0

- **http4k-cloudevents** : Add custom lenses to retrieve data from a cloud event and an extension function to set it.

### v4.30.8.0

- **http4k-cloudevents** : Add `Jackson.cloudEventsFormat()` so we can use custom formats in cloud events lenses

### v4.30.7.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix #779: SunHttp does not blow up if you add a ll value.

### v4.30.6.0

- **http4k-*** : Upgrade some dependency versions.

### v4.30.5.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-websocket**: Fix #775 - WebsocketClient.nonBlocking cannot receive messages in binary mode. H/T
  oharaandrew314

### v4.30.4.0

- **http4k-*** : Upgrade some dependency versions.

### v4.30.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** : RefreshingOAuthToken does not blow up when no expiry returned by server.

### v4.30.2.1

- **http4k-format-moshi-yaml** : [Fix] Re-fix YAML defaults for over greedy boolean values (regression caused by upgrade
  to SnakeYaml).

### v4.30.2.0

- **http4k-security-oauth** : Make `FakeOAuthServer` more configurable, and removed the need for passing in an auth-code
  generator.

### v4.30.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** : [Unlikely Break] Converted AccessToken to be an interface, and internalised a lens which
  shouldn't have been used by anyone. To fix uses of `accessTokenResponseBody`, replace
  with `Body.auto<AccessTokenResponse>().toLens()`, importing from OAuthServerMoshi.

### v4.29.1.0

- **http4k-*** : Upgrade some dependency versions.

### v4.29.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** : [Unlikely Break] Slight changes to CSRF generator interface. Should be easy to fix.

### v4.28.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** : Internal refactoring

### v4.28.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-client-okhttp** : Handle previously escapable HTTP client timeout case.
- **http4k-contract** : Added Swagger UI helper route. H/T @oharaandrew314

### v4.28.0.0

- **http4k-*** : Upgrade some dependency versions, including CVE fix for Undertow backend.
- **http4k-contract** : [Unlikely break] Remove direct dependency on kotlin-reflect JAR, as it is brought in
  my `http4k-format-jackson` anyway. This builds ok but we have bumped the version number just to be sure. H/T
  @oharaandrew314 for the inspiration.
- **http4k-format-core** : Add `ContentNegotiator` and auto versions to be plugged into `http4k-format-*` modules. H/T
  @oharaandrew314
- **http4k-core**: Add cors exposed headers property. H/T @oharaandrew314

### v4.27.4.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi*** : Upgrade Moshi to introduce a JSON node model, thus converting Moshi to be an
  AutoMarshallingJson. This should open the door to us eventually allowing Moshi to be used in http4k-contracts (and
  OpenAPI). Massive H/T to @oharaandrew314 for the work that went into this.

### v4.27.3.0

- **http4k-contract** : OpenApi3 Operation Ids now replace '-' with '_', as '-' interfere with generation of OpenAPI
  clients.

### v4.27.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-graphql** : Add GraphQL explorer for http4k-graphql. H/T @arnabkd
- **http4k-realtime-core** : Add helper for test Websocket. H/T @oharaandrew314
- **http4k-resilience4j*** : Fix #745: ResilienceFilters.CircuitBreak counts an error twice: once as successful, once as
  error.

### v4.27.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added support for Web Linking header standard
- **http4k-multipart**: Fix multipart upload failure if charset is included in content type. H/T @wickwirew
- **http4k-server-jetty**: Remove usage of deprecated status description API. H/T @@makowalski + @mandyvuong

### v4.27.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.7.0

### v4.26.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : [Unlikely break] Remove dependency on kotlin stdlib JDK 8 as we don't need it to compile. If this
  causes a problem, simply re-add `api(Kotlin.stdlib.jdk8)` to your project dependency list.
- **http4k-*** : Fix #744 - Provided dependencies included as runtime in http4k versions > 4.19.1.0.

### v4.25.16.2

- **http4k-core** : Fix query parameter parsing when value contained `=`. H/T @overfullstack
- **http4k-security-digest** : Fix digest challenge parsing when nonce contained `=`. H/T @oharaandrew314

### v4.25.16.1

- **http4k-contract** : [Revert fix] - File field is described as "string" instead of "file" in OA3 specification.

### v4.25.16.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Deprecate eTag filter in favour of ETagSupport.
- **http4k-contract** : [Fix] - File field is described as "string" instead of "file" in OA3 specification.

### v4.25.15.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix #738 - Calculating eTag ate body.
- **http4k-core** : Caching filters now replace headers instead of adding them.
- **http4k-server-jetty** : Change constructor to use supported shutdown mode. H/T @jshiell

### v4.25.14.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Refreshing Credentials Provider now does not block if there is more than half of the expiring time
  left.
- **http4k-core** : Fix #735 - use whole message body for etag hash. H/T @aSemy
- **http4k-metrics-micrometer** - Enable publishPercentileHistogram for Micrometer request timer H/T @jakubjanecek

### v4.25.13.0

- **http4k-server-***: Add support for graceful shutdown (available to most server implementations) H/T @nlochschmidt
- **http4k-core**: Simplify hex decoding H/T @dzappold

### v4.25.12.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi-yaml-***: Replace default YAML boolean resolver to be less greedy.

### v4.25.11.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.6.21.
- **http4k-core**: Fix #728 - No way to set the request timeout when using the JavaHttpClient. H/T @gmulders
- **http4k-oauth-security**: Add missing Moshi adapter

### v4.25.10.1

- **http4k-core**: Fix ServerFilters.BasicAuth handling of passwords containing colons H/T @robd

### v4.25.10.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Expand out values4k lens option
- **http4k-core** : Allow cookie values to be returned unquoted H/T @2x2xplz
- **http4k-format-*** : Throw a lens failure if a valid locale was not parsed H/T @oharaandrew314
- **http4k-opentelemetry** : Fix #726 - OpenTelemetry: t.localizedMessage can't be null

### v4.25.9.0

- **http4k-*** : Upgrade some dependency versions, including Ktor to v2.0.0
- **http4k-format-jackson-csv*** : [New module] H/T @oharaandrew314 for the contribution.
- **http4k-core**: New standard mappings for Time primitives. H/T @oharaandrew314

### v4.25.8.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.6.20.
- **http4k-core**: Enable overridable behaviour for CatchAll filter. H/T @dcmg
- **http4k-multipart**: Add disk cache path to MultipartFormBody.from() parameters. H/T @rny

### v4.25.7.0

- **http4k-client-fuel**: [New module] An http4k client based on [Fuel](https://github.com/kittinunf/Fuel) with both
  sync
  and async support.

### v4.25.6.0

- **http4k-*** : Upgrade some dependency versions, including Jackson to overcome CVE-2020-36518.

### v4.25.5.2

- **http4k-contract**: Don't output required fields into OpenAPI if there are none.

### v4.25.5.1

- **http4k-contract**: Small tweak to internal API

### v4.25.5.0

- **http4k-contract**: Add format OpenApi hints to Arrays and Maps

### v4.25.4.1

- **http4k-contract**: Remove println from AutoJsonToJsonSchema. Doh!

### v4.25.4.0

- **http4k-format-***: Correctly identify integer and number JSON types. This has a knock on effect in OpenApi
  specifications.

### v4.25.3.0

- **http4k-serverless-tencent** : Downgrade events library as is insecure.

### v4.25.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract**: Values4k metadata population for OpenApi3 specifications (via
  Values4kFieldMetadataRetrievalStrategy).

### v4.25.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract**: Values4k metadata population for OpenApi3 specifications (via
  Values4kFieldMetadataRetrievalStrategy).

### v4.25.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** [Breaking]: Rename `OauthCallbackError` to `OAuthCallbackError`

### v4.24.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-webdriver*** : [Breaking] Upgrade of webdriver to V4 has changed the APIS. The custom `By`
  implementation is no longer required so you can use the inbuilt Selenium version instead. The disabledCssSelector By
  implementation has been removed, although you can simply replicate this using the existing CSS selector model.

### v4.23.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract**: Support OA3 meta fields on properties if they are populated by a custom annotation.
- **http4k-graphql** : [Possible breaks] Due to upgrade of underlying graphql lib.

### v4.22.0.1

- **http4k-security-oauth**: Fix error messages for oauth callback failures

### v4.22.0.0

- **http4k-security-oauth** [Breaking]: apiBase path is now preserved when building auth and token uris
- **http4k-security-oauth** [Breaking]: provide reason when an oauth callback fails
- **http4k-security-oauth** [Breaking]: allow id token consumer to fail authentication flow

### v4.21.1.1

- **http4k-contract**: OpenApi3 - Expose new prefix-overriding in OpenApi definitions.

### v4.21.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract**: OpenApi3 - Ability to provide prefixes for all models in a tree. This allows you to have multiple
  versions of a single model in the specification (at the cost of duplicated schema models).

### v4.21.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core**: [Breaking] All metrics now include `path` when labelled and routed. For consistency, `.` in path
  names are now convert to underscores as well. Regexes are also removed from paths on both client and server. H/T
  @hektorKS
- **http4k-testing-strikt**: Fix #709 - Strikt assertion builder for Uri.path H/T @michaelbannister

### v4.20.2.0

- **http4k-contract**: OpenApi3 - Don't add required field if no fields are required!

### v4.20.1.0

- **http4k-contract**: Fix #706: Form "multi" lens's do not render an items field in contracts.
- **http4k-testing-chaos**: ChaoticHttpHandler disables Chaos API when reflection not available.

### v4.20.0.0

- **http4k-core**: Fix #704: Filters are recreated on every request/ H/T @hektorKS
- **http4k-core**: Fix #702: TrafficFilters.ReplayFrom doesn't correctly read from Replay.
- **http4k-server-netty**: Fix #703: Netty: null cannot be cast to non-null type java.net.InetSocketAddress
- **http4k-client-apache-async**: Remove usage of deprecated API
- **http4k-client-jetty**: Remove usage of deprecated API
- **http4k-testing-webdriver**: Remove usage of deprecated (internal) API
- **http4k-*** : Upgrade some dependency versions.

### v4.19.5.0

- **http4k-client-websocket** : Apply a timeout when creating a blocking client websocket connection

### v4.19.4.0

- **http4k-*** : Upgrade some dependency versions.

### v4.19.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-opentelemetry** : Fixes #697: Upgraded OpenTelemetry version to 1.11.0 H/T @jenarros

### v4.19.2.0

- **http4k-server-jetty** : Replace conscrypt with internal java for ALPN server

### v4.19.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added ContentDispositionAttachment server filter. H/T @jenarros
- **http4k-core** : Fix path conversion for static routing handlers with trailing. H/T @jenarros
- **http4k-contract** : Support non-JSON schema types in request definitions.

### v4.19.0.0

- **http4k-core** : [Potential Break] Fix #693 Cookie implementation uses LocalDateTime val which is implicitly turned
  into GMT time for cookie. Break is that Cookies now run from Instant instead of LocalDateTime. Thanks to
  @maedjyuk-ghoti for alerting us to chase down this 5y+ standing bug!
- **http4k-security-oauth** : Fixes to the `InsecureCookieBasedOAuthPersistence` to make it more user-friendly.
- **http4k-server-netty** : Keep-alive for Netty when not streaming. H/T @jakubjanecek for the contrib!

### v4.18.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fixed URLPathSegment encoding/decoding based on RFC 3986. H/T @jenarros for the thoughtful and
  through contribution!

### v4.17.9.0

- **http4k-core** : Added mapping for enum() in lenses.

### v4.17.8.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Fix #687 - OpenApiV3 object serialization. H/T @lawkai

### v4.17.7.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi-yaml** : Fix for serialising Maps with null values (the key should still be rendered!)
- **http4k-format-moshi-yaml** : Remove accidental stack trace dump.

### v4.17.6.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-moshi-yaml** : [New module] YAML marshalling with zero-reflection is now possible due to a combination
  of Moshi and SnakeYaml
- **http4k-core** : Fix to HttpEvent to use correct value in xUriTemplate instead of full path.
- **http4k-format-jackson-xml** : Add autoBody for ConfigurableJacksonXml. H/T @oharaandrew314

### v4.17.5.0

- **http4k-*** : Upgrade some dependency versions, including ForkHandles to 2.0.0.0.
- **http4k-core** : Fix to HttpEvent to use correct value in xUriTemplate instead of full path.

### v4.17.4.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.6.10
- **http4k-incubator** : Playing with TracerBullets... a generic interface for building TraceTrees from lists of
  MetadataEvents.

### v4.17.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** : Fix #679. Approval tests delete actual when passing.

### v4.17.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Added Servers to OpenApi renderer. H/T @zsambek and @MarcusDunn for making it happen.

### v4.17.1.0

- **http4k-core** : Make timeouts configurable for `Java8HttpClient`.

### v4.17.0.0

- **http4k-*** : [Careful] Upgrade some dependency versions, including Kotlin to 1.6.0.
- **http4k-*** : [Breaking] Removal of all previously deprecated methods and types. To ensure you get the smoothest
  experience, please upgrade to v4.16.3.0 first, deal with the replacements and then upgrade to 4.17.0.0

### v4.16.3.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-approval** : Check the content type after the content is checked.

### v4.16.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Support for top-level enums in schema.
- **http4k-contract** : Support for enums in Header/Query/Paths. Finally!

### v4.16.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** : Upgrade build process to Kotlin. H/T @franckrasolo

### v4.16.0.0

- **http4k-contract** : [Breaking] Added API-level tags to the contract rendering.
- **http4k-serverless-lambda** : Fix encoding of body to work with gzip filter

### v4.15.0.0

- **http4k-contract** : [Break] BearerAuthSecurity is now more typesafe when taking a lens.

### v4.14.1.4

- **http4k-serverless-lambda** : More fixing of deserialisation of SNS events.

### v4.14.1.3

- **http4k-serverless-lambda** : Fix deserialisation of SNS events.

### v4.14.1.2

- **http4k-contract** : Fix #667 - Jackson annotations being missed in FieldRetrieval.
- **http4k-undertow** : Server now handles HTTP requests gracefully when there is no HTTP handler set.

### v4.14.1.1

- **http4k-core** : ChaoticHttpHandler is now event better behaved when chaos is not enabled and respects routing
  templates when applying.
- **http4k-core** : Fix #665 - OpenAPI json is incorrect when multi string query lens with defaulted values is used. H/T
  @suyash192

### v4.14.1.0

- **http4k-core** : ChaoticHttpHandler is now better behaved when chaos is not enabled.

### v4.14.0.0

- **http4k-core** : Tidying up HttpEvents
- **http4k-graphql** : [Break] Handle null variables in calls.

### v4.13.4.0

- **http4k-core** : Added convenience HttpEvents

### v4.13.3.0

- **http4k-core** : ServerFilter request tracing now reinstates previous trace on exit instead of clearing it.

### v4.13.2.0

- **http4k-core** : Make MetadataEvent a data class.

### v4.13.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Rename AsyncHttpClient to AsyncHttpHandler (deprecation).
- **http4k-contract** : Fix #664 - Introduce OpenAPIJackson to not serialize nulls by default into OpenAPI specs. If you
  use your own Jackson instance, you can replicate this behaviour by using `.setSerializationInclusion(NON_NULL)` on
  your custom `ObjectMapper` implementation.

### v4.13.0.0

- **http4k-core** : Reverse Proxy available in both routing and non-routing version. Use reverseProxy() or
  reverseProxyRouting() accordingly

### v4.12.3.1

- **http4k-core** : Reverse Proxy router now falls back to URI host when Host header missing.

### v4.12.3.0

- **http4k-security-oauth** : Nicer OAuth client filters.

### v4.12.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Fix #657 Use jackson to serialize enum models for OpenApi.

### v4.12.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix TrafficFilters.RecordTo eating body stream when used on a server.

### v4.12.0.1

- **http4k-*** : Fix #652 - AWS event format adapters have fields with wrong cases.

### v4.12.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.5.30.
- **http4k-testing-chaos** : [Break] Behaviour is now an abstract class instead of a typealias. Super simple to fix. :)

### v4.11.0.1

- **http4k-graphql** : Fix - Downgrade graphql-java and fix Graphql reference example. 4.11.0.0 contained an
  incompatible version of graphql-java for generate use. H/T @razvn for spotting and fixing. :)

### v4.11.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-jackson** : Fix #646 - Boolean field can escape lens check without throwing
  MissingKotlinParameterException.
- **http4k-aws** : Set the query parameter to empty string if it's value is null, instead of "null". H/T @raelg for the
  PR.
- **http4k-contract** : [Possible (small) Break] Fix #644 - Lazy init contract without path params: Type mismatch.
  Contract routes with 0 parameters are now able to be constructed lazily - which has added (for consistency) a
  secondary `to(fn: () -> HttpHandler)` function to the construction DSL. This may cause overload ambiguity when routes
  are defined withtout the request input parameter. To fix, un-ambiguate you bindings! (eg. `to { Response(OK) }`
  becomes `to { _ -> Response(OK) }`). H/T @dbacinski for the investigation.

### v4.10.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix #638 - Revert changes to make Uri incompatible with <J10. H/T @pwteneyck.

### v4.10.0.1

- Mistakenly released version with wrong number of digits. Re-release for clatiry

### v4.10.0.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract*** : Spec Fix: OpenAPI2 cannot contain oneOf responses as is illegal in spec.
- **http4k-opentelemetry** : [Unlikely Break] API changes and renames due to library API changes.

### v4.9.10.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-digest*** : [New module] H/T @oharaandrew314 for the contribution!

### v4.9.9.0

- **http4k-contract** : Fix #626 - Non JSON bodies do not display examples.
- **http4k-*** : Upgrade some dependency versions.

### v4.9.8.0

- **http4k-testing-chaos*** : Added `ChaoticHttpHandler` to allow easy creation of HttpHandlers which have a Kotlin API
  for creating chaos.
- **http4k-format-moshi*** : Fix to support marshalling of exceptions and added IsAnInstanceOfAdapter to capture
- **http4k-*** : Upgrade some dependency versions.

### v4.9.7.0

- **http4k-*** : Upgrade some dependency versions.

### v4.9.6.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-strikt** : [New module] Matchers for Strikt assertion library.
- **http4k-core** : no longer exposing `UriTemplate.trimSlashes()` . H/T @PaulienVa

### v4.9.5.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-lambda** : Functions can now be matched on a pattern instead of an exact match.

### v4.9.4.0

- **http4k-serverless-lambda-runtime** : [New module] Sidestep the AWS Lambda Runtime with the super lightweight http4k
  version!

### v4.9.3.1

- **http4k-format-moshi** : Fix Moshi to use nullsafe value adapters.

### v4.9.3.0

- **http4k-serverless-lambda** : Move initialisation of Moshi into loading stage for AWS Lambda functions.

### v4.9.2.0

- **http4k-contract** : Fix #622. DELETE requests not rendered with Body in OpenApi
- **http4k-serverless-lambda** : Remove requirement for dependency on AWS Events JAR.
- **http4k-*** : Upgrade some dependency versions.

### v4.9.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-*** : Allow custom automarshallers to be used for marshalling events in `FnLoader`, `FnHandler`
  construction.
- **http4k-core** : (re)fix Body behaviour for ByteBuffers shorter than the array they wrap. This was taken out due to:
  H/T (again) @npryce
- **http4k-server-jetty** - Multi-frame websocket messages are handled in Jetty. H/T @endofhome

### v4.9.0.2

- **http4k-aws** : Fix AWS request signing when using stream body.

### v4.9.0.1

- **http4k-core** : Revert body buffer "fix".

### v4.9.0.0

- **http4k-serverless-** : Reworking of Serverless infrastructure to support calling Serverless Functions using
  automarshalled event classes. New concepts of FnHandler and FnLoader (analogues to existing HttpHandler and
  AppLoader). Docs and examples coming soon!
- **http4k-serverless-lambda*** : Support for FnHandlers, with super lightweight unmarshalling of event classes via
  Moshi. Conversion of all AWS functions to use RequestStreamHandlers under the covers instead of slow marshalling via
  Jackson. New FnHandlers should extend `AwsLambdaEventFunction` for events, or the existing `ApiGateway*Function`
  classes for HTTP functions. Automarshalling support for the following AWS event types, extensible by providing own
  Moshi adapter:
    - DynamodbEvent
    - KinesisEvent
    - KinesisFirehoseEvent
    - S3Event
    - ScheduledEvent
    - SNSEvent
    - SQSEvent
- **http4k-serverless-alibaba** : [Breaking] Support for FnHandlers. Old style HTTP Handlers should now
  extend `AlibabaCloudHttpFunction`. Event functions should extend `AlibabaCloudEventFunction`. Extensible
  automarshalling support for event types using Moshi.
- **http4k-serverless-gcf*** : Support for FnHandlers. Old style HTTP Handlers should now
  extend `GoogleCloudHttpFunction`. Event functions should extend `GoogleCloudEventFunction`. Extensible automarshalling
  support for event types using Moshi.

### v4.8.2.0

- **http4k-*** : Upgrade some dependency versions. Remove excess dependency on alibaba libraries which depend on
  vulnerable libs.

### v4.8.1.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix Body behaviour for ByteBuffers shorter than the array they wrap. H/T @npryce

### v4.8.0.0

- **http4k-format-moshi** : [Breaking] Add mappings for Map-type and List-like classes to use default serialisers. To
  get around this, create your own Moshi configuration, omitting the `CollectionEdgeCasesAdapter`
- **http4k-websocket-*** : [Breaking] Added support for filters with `WsFilter`, which can be wrapped around
  a `WsHandler` or `WsConsumer` to decorate them with behaviour. This has involved changing `WsHandler` to always return
  a `WsConsumer` even if it doesn't match - in the case of a non-match, the socket is closed immediately.
- **http4k-sse-*** : [Breaking] Added support for filters with `SseFilter`, which can be wrapped around a `SseHandler`
  or `SseConsumer` to decorate them with behaviour. This has involved changing `SseHandler` to always return
  a `SseConsumer` even if it doesn't match - in the case of a non-match, the socket is closed immediately.
- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Repackaging of non-core classes for SSE/WebSockets into new `http4k-realtime-core` module. No action
  required unless these classes are needed without an implementation.
- **http4k-core** : Repackaging of non-core classes for Serverless into new `http4k-serverless-core` module. No action
  required unless these classes are needed without an implementation.

### v4.7.1.0

- **http4k-*** : Upgrade some dependency versions.

### v4.7.0.2

- **http4k-security-oauth** : Added adapter for AccessTokenResponse, meaning you don't need to import Kotlin Reflection
  JAR when using the OAuthServer

### v4.7.0.0

- **http4k-core** : Fix #606 - SPA routers do not respond to OPTIONS requests.
- **http4k-security-oauth** : Replace Jackson with Moshi. This has had the effect of removing any reflection from the
  module (and thus saving 2.5Mb of Kotlin-Reflection dependency). If you still need Jackson, then you need to manually
  add it as a dependency as it was probably missing from your dependency list! :)
- **http4k-*** : Upgrade some dependency versions.

### v4.6.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.4.32 and Jetty to 11.
- **http4k-server-jetty** : [Breaking] The upgrade to Jetty 11.0.X has resulted in some repackaged classes in the Jetty
  source, most notably the Servlet dependency is now based on `jakarta.servlet.http.XXX` classes instead of the
  standard `javax.servlet` package.
- **http4k-opentelemetry** : [Breaking] API changes and renames due to library API changes.

### v4.5.0.1

- **http4k-core** : Fix `SunHttp` not complaining if the entire request body is not consumed.

### v4.5.0.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : [Slight break] Hide identity of `JavaHttpClient` and made the . You should be using `HttpHandler`
  anyway... ;)
- **http4k-core** : Fix #598 - Silent exception on 204 with SunHttp. H/T @ToastShaman
- **http4k-core** : Fix #594 - Conditional filter. H/T @jainsahab

### v4.4.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-format-*** : Add support for reading inputstreams directly in all automarshaller implementations

### v4.4.1.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-serverless-lambda** : Introduce ApiGatewayRestLambdaFunction to be used with REST Api Gateways

### v4.4.0.1

- **http4k-aws** : Add x-amz-content-sha256 to SignedHeaders (required for on-premise s3). H/T @tkint

### v4.4.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.4.31
- **http4k-opentelemetry** : [Break] OpenTelemetry has hit V1.0, so integrated API changes into filters for collecting
  data.
- **http4k-format-core** : [Break/Repackage] Format `value()` extension functions are now packaged properly.
- **http4k-server-jetty** : We have been alerted to some runtime changes around how Jetty parses paths containing .
  or /. Workaround is to use `HttpConfiguration.httpCompliance = HttpCompliance.RFC7230_LEGACY`, but this is marked as
  legacy and will be deprecated sooner or later. See details
  at: https://github.com/eclipse/jetty.project/issues/6001#issuecomment-786611040
- **http4k-format-moshi** : Moshi now supports AutoMarshallingEvents out of the box.

### v4.3.5.4

- **http4k-*** : Disable publishing of gradle module metadata files to Maven Central.

### v4.3.5.3

- **http4k-*** : Define groupId for all modules so release to Maven Central can use the value from root.

### v4.3.5.2

- **http4k-*** : Filter out irrelevant root artifact. Maven Central is very very annoying.

### v4.3.5.1

- **http4k-*** : Fix artefact signing for maven central.

### v4.3.5.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-core** : [New module] Add WebJars support. Activate WebJars with 1LOC!

### v4.3.4.1

- **http4k-bom** : Fix #588 - Maven Central version of BOM is empty

### v4.3.4.0

- **http4k-contract** : Support Array of parameters in OpenApi2/3 specs.
- **http4k-template-freemarker** : Improvements to configuration of engine.
- **http4k-*** : Upgrade some dependency versions

### v4.3.3.0

- **http4k-core** : Introduce `RequestWithRoute` and `ResponseWithRoute` to allow extending messages post-routing. H/T
  @jenarros

### v4.3.2.2

- **http4k-core** : Fix "and" logic when mixing handler + request routers.
- **http4k-core** : Extend #580 fix to cover absolute paths.

### v4.3.2.1

- **http4k-core** : Fix #580 - `ResourceLoader.Directory` can load resources outside of root directory.
- **http4k-core** : Added values4k extensions for Lenses.
- **http4k-cloudevents** : Jackson is now bundled with the JAR.

### v4.3.2.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-cloudevents** : [New module] Support for CloudEvents using Jackson and pluggable event formats.

### v4.3.0.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.4.30
- **http4k-core** : Removing dependency on JCenter for all compile dependencies.
- **http4k-core** : Add ETag filter. H/T @jshiell
- **http4k-core** : Add more useful filters for request/respons

### v4.2.0.0

- **http4k-server-undertow** : Add WebSocket and SSE support to Undertow.
- **http4k-core** : [Breaking] Related to above, `WsHandler` is now `PolyHandler`. The old type has been deprecated, but
  only API users who are implementing their own handlers may notice.

### v4.1.2.1

- (empty release for testing our automated release process)

### v4.1.2.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added view support for WebSocket messages.

### v4.1.1.2

- **http4k-core** : Fix cookie parsing for systems using non-English locale. H/T @dzappold for spotting it.

### v4.1.1.1

- **http4k-core** : `RequestTracing` should add a new `parent_id` even if a previous one wasn't previously set.

### v4.1.1.0

- **http4k-*** : Upgrade some dependency versions.

### v4.1.0.0

- **http4k-core** : [Breaking] Remove previously deprecated AutoJsonEvents which was mistakenly left in the 4.0.0.0
  release.
- **http4k-core** : Strip body of GET request in 303 (See Other) redirections in `FollowRedirects`. H/T @dgliosca
- **http4k-core** : Fix behaviour of `FollowRedirects` for in-memory routed handlers.
- **http4k-*** : Upgrade some dependency versions.

### v4.0.0.0

- New versioning scheme! See [announcement](https://www.http4k.org/news/http4k_v4/) for details.
- **http4k-*** : Remove all previous deprecations from all modules. To upgrade cleanly, follow the simple instructions
  in the [announcement](https://www.http4k.org/news/http4k_v4/#upgrading_library_api_changes)
- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-webdriver** : [Breaking] Upgrade of APIs to match new v4 Selenium APIs. It is quite safe to continue
  to use previous versions of the `http4k-testing-webdriver` JAR if you are unable to upgrade immediately. The API is
  reasonably the same, but some of the imports have changed. The main one is that instead of
  importing `org.openqa.selenium.By` you should import `org.http4k.webdriver.By`, which is the new custom
  implementation.
- **http4k-core** : Replace `hostDemux()` with `reverseProxy()`.

### v3.285.2

- **http4k-testing-servirtium** : Fixed #553 - Servirtium storage fix for multi-line bodies.
- **http4k-security-oauth** : Fixed #552 - AccessTokenFetcher initializes all AccessToken fields. H/T @@paraseba

### v3.285.1

- **http4k-format-moshi** : Undo change relating to reading Moshi body lenses from HTTP message streams.

### v3.285.0

- **http4k-*** : Upgrade some dependency versions, including Jetty to v10.
- **http4k-server-jetty* : [Unlikely API break] Caused by Jetty API change.
- **http4k-core* : Renamed AutoJsonEvents to AutoMarshallingEvents
- **http4k-serverless-lambda* : [Unlikely API break] Remove dependency on AWS Events JAR. We now use a Map<String, Any>
  instead. This will only affect you if you needed access to the raw ApiGateway events.

### v3.284.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-servirtium** : ServirtiumServer now only changes the base Url of proxied requests instead of the
  entire path.

### v3.283.1

- **http4k-core** : Fix handling of null status descriptions. H/T @Hakky54 for report and fix.
- **http4k-contract** : Fix #536 (again) - Path encoding fixed using lens. H/T @usand for the report and sticking with
  it!

### v3.283.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix #536 - Path encoding fixed using lens.
- **http4k-core** : Support multiple, nested RequestContexts.
- **http4k-format-moshi** : Add support for (de)serialising Unit.
- **http4k-security-oauth** : Ability to provide custom `RedirectionUriBuilder` for non-JWT cases.
- **http4k-testing-chaos** : Ability to name Chaos API in OpenApi document.
- **http4k-opentelemetry** : **Breaking (dependency change)** Upgrade to new 0.12.0 of OpenTelemetry Java API has caused
  some API changes.
- **http4k-format-jackson** : **Breaking (dependency change)** Upgrade to new version of Jackson.
  PropertyNamingStrategies will need to be replaced as old one could cause
  deadlock: https://github.com/FasterXML/jackson-databind/issues/2715
- **http4k-format-jackson-xml** : **Breaking** We recommend that users of this lib **DO NOT UPGRADE** to this release
  due to open bug with nullable fields. See: https://github.com/FasterXML/jackson-dataformat-xml/issues/435 . There is a
  workaround which is to add default values into the nullable fields in your DTO classes. eg.

 ```kotlin
data class MyDto(val field: String? = null)
```

### v3.282.0

- **http4k-serverless-*** : Tidy implementations to be consistent.
- **http4k-testing-webdriver-*** : Fixed radio buttons submitting even when not selected.

### v3.281.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** : Rework build to use refreshSrcVersions. Massive thanks to @jmfayard
- **http4k-serverless-lambda*** : Fix cookie handling in V2 Lambda adapter.

### v3.280.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-klaxon** : New format module for the lightweight Kotlin JSON library.

### v3.279.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.4.20
- **http4k-core** : Adding routing description to RouterMatch. Simplify Routing logic to remove duplication.
- **http4k-core** : [Breaking from Java] Improved API for Java clients for `Request` and `Response`. To fix, just
  replace `Request.Companion.create()` with `Request.create()`
- **http4k-format-*** : Add ability to override content type for auto-marshalling for JSON .
- **http4k-aws-*** : Fix AwsSdkClient to correctly pass body.

### v3.278.0

- **http4k-security-oauth** [Breaking]: extend `OAuthPersisence.assignToken` to receive an optional IdToken.

### v3.277.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Fix routing when it doesn't match both method and path.

### v3.276.0

- **http4k-graphql** : [New module] Adds integration with `GraphQL-Java` and the ability to serve/consume GQL using the
  standard routing patterns.

### v3.275.0

- **http4k-core** : Reimplemented core routing logic to be fully based on `Routers`. It is now possible to nest
  arbitrary levels of request matching in a mix-and-match way. And it's ace. :)
- **http4k-*** : Pulled out a set of core modules for the various module types (format, template). This has shrunk the
  core module by ~10% in size

### v3.274.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-format-kotlinx-serialization** : Now supports Automarshalling. H/T @zsambek for the PR.
- **http4k-core** : Added Markdown to static Mime-types. H/T @razvn for the PR.
- **http4k-security-oauth** [Breaking]: Don't store the original call that required authentication in the state as it
  runs the risk of being used in an open-redirector phishing attack, instead store it as a value in the oauth
  persistence and retrieved on successful requests H/T @tom

### v3.273.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** [Small break]: Rework of ParameterMatch to consolidate with RouterMatch as they are kind of the same
  thing. ParameterMatch methods are now floating extensions instead, so just import them.
- **http4k-metrics-micrometer** : Remove logging spam. H/T @NersesAM for tracking it down!

### v3.272.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-opentelemetry** : New module for integrating with OpenTelemetry platforms.

### v3.271.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-azure** : New serverless module for Azure Functions!

### v3.270.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-alibaba** : New serverless module for Alibaba Function Compute!
- **http4k-serverless-tencent** : New serverless module for Tencent Serverless Cloud Functions!

### v3.269.0

- **http4k-contract** : Fix #502 - OPTIONS requests not honoured for requests with body
- **http4k-contract** : Support for JavaBeans in OpenAPI descriptions.

### v3.268.0

- **http4k-core** : Add Parameter Match routing, so you can match on presence of parameters in a request
- **http4k-testing-kotest**: Re-add kotest matcher as is fixed in underlying kotest lib.

### v3.267.0

- **http4k-*** : Upgrade some dependency versions.

### v3.266.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Add CustomBasicAuth and ProxyBasicAuth filters. H/T @raymanoz for the PR
- **http4k-core** : Implemented OriginPolicy for CORS. H/T @kratostaine for the PR
- **http4k-server-netty** : Websocket support added. H/T @carbotaniuman for the PR

### v3.265.0

- **http4k-*** : Upgrade some dependency versions.
- [http4k-security-oauth] [Break (via repackaging of dependent JAR)] - Result4k changed published package structure.
  Changes made to accommodate new package `dev.forkhandles.result4k` instead of `com.natpryce`. To fix, simply
  find/replace the package names - everything else is identical.
- **http4k-serverless-lambda** : Work around various inconsistencies between the APIGateway V1 and V2.
- **http4k-core** : Lenses can now be restricted to inject/extract types. This has an effect on BodyLenses which can be
  tied to Request/Response.

### v3.264.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-serverless-lambda** : Support for ApiGateway V1 & v2 and AppLoadBalancer requests. Just extend the correct
  class. Converted functions to use the official AWS `RequestHandler` interfaces (which means that you can refer to just
  the name of the class when deploying lambda instead of `handle()`)

### v3.263.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-cloudnative** : Add support for loading config files and YAML files into Environments.

### v3.262.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.4.10
- **http4k-*** : Take advantage of Kotlin Functional Interfaces, including for Filter. Breaking change to creation of
  Filters **from Java code only** as they can just be lambdas
  eg. `Filter filter = next -> req -> next.invoke(request.header("foo", "bar"));`
- **http4k-testing-kotest - Possible Break**: DUE TO KOTLIN 1.4.10. Remove a `haveBody` matcher which
  uses `Matcher<JsonNode>` directly, because of a bug in Kotest:
  https://github.com/kotest/kotest/issues/1727
- **http4k-format-jackson - Possible Break**: DUE TO KOTLIN 1.4.10. Inline classes do not deserialise properly.
  See: https://github.com/FasterXML/jackson-module-kotlin/issues/356

### v3.261.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*** : Remove some example code which was mistakenly added to some main src dirs. No impact on anything other
  than JAR size.
- **http4k-aws*** : Add pluggable Amazon SDK client, allowing you to plug an HttpHandler into the Amazon SDK.

### v3.260.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*, Unlikely break** : Added some nicer naming and examples for when people are calling http4k via Java code.
- **http4k-core** : Fixed SunHttp server backend not setting content length, and hence responses are always chunked.

### v3.259.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-netty** : Fix #141 Http4k-netty performs really badly on all benchmarks. Massive H/T adam-arold!
- **http4k-server-ratpack** : Tweak to SO_BACKLOG size (1000).

### v3.258.0

- **http4k-testing-kotest** : [New module] A set of matchers for use with the `kotest` library. H/T @nlochschmidt for
  the
  PR.
- **http4k-*** : Upgrade some dependency versions.

### v3.257.0

- **http4k-serverless-\*** : Making the Serverless APIs consistent between flavours by ensuring that all Serverless
  functions act by class extension and not reflection based approach. Deprecated old approach. Hopefully this is
  simpler.. :)

### v3.256.1

- **http4k-core** : Fix #470. Path.of cannot decode path parameter values containing %/

### v3.256.0

- **http4k-security-oauth** : Add ability to handle form encoded responses in OAuth responses.

### v3.255.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*, Breaking (if you're not using it right!)** : - Fixed up Maven dependencies so that they are not exporting
  compileOnly libraries into POMs.
- **http4k-security-oauth** : Remove "user" from default list of GitHub scopes as it gives you write access to the
  profile. New default is empty (just public data).
- **http4k-core** : Improve defaults of SunHttp server. H/T @nlochschmidt for the PR.
- **http4k-contract** : Add description to OpenApi schema fields using Jackson annotations. H/T @env0der for the PR.

### v3.254.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Added `hostDemux()` routing for when you want to select an `HttpHandler` based on the Host header.

### v3.253.0

- **http4k-core** : Replaced implementation of `JavaHttpClient` with one from Java standard library. Should you not yet
  have access to the Java 11 SDK, we renamed the old implementation to `Java8HttpClient`. Note that some headers that
  are added by default by the old Java8 implementation will no longer be added.
- **http4k-core, Breaking** : Change `Body.binary()` lens to use an InputStream instead of a raw `Body`. To fix, just
  provide the InputStream by calling `Body.stream()` or similar.
- **http4k-client-websocket, Unlikely break** : Allow API users to pass in their own `Draft` object for custom
  protocols. If broken, simple fix is to just use named arguments in the construction call to the client.
- **http4k-*** : Upgrade some dependency versions.

### v3.252.0

- **http4k-server-apache, http4k-client-apache, http4k-client-apache-async, Breaking** : Updated to Apache HTTP 5.X.X.
  H/T to @jshiell. Note that the underlying Apache APIs have changed in the v5 release. For the clients, this should
  only break if you have customised the underlying HTTP `CloseableHttpClient` that is passed to the constructor of the
  http4k client. If you have, we have you covered with....
- **http4k-server-apache4, http4k-client-apache4, http4k-client-apache4-async** : New modules to maintain previous
  integration with Apache HTTP 4.X.X. Intended to reduce the impact on projects that are not ready to move to v5 yet. In
  these compatibility modules, renamed `ApacheClient` -> `Apache4Client` and `ApacheAsyncClient`
  to `Apache4AsyncClient` - which is the only change that should be required in end user code.
- **http4k-serverless-openwhisk** : Fixes to support binary content types and overcome issues with the request/response
  format of the OW Java runtime.
- **http4k-core** : Added some Filters for base64 encoding and decoding responses.
- **http4k-*** : Upgrade some dependency versions.

### v3.251.0

- **http4k-core** : Added support for multiple "cookie" headers. H/T @jshiell
- **http4k-serverless-openwhisk** : New serverless module!
- **http4k-serverless-*, Breaking** : - Repackage some functions to `org.http4k.serverless` package. Just change the
  package names to fix.

### v3.250.0

- **http4k-core** : Add `Request.source` to provide extra information about the request origin (address/port/scheme).
  H/T @kam1sh and @jshiell for the contributions.
- **http4k-security-oauth** : Add OAuth provider configuration for Facebook. H/T @knyttl for the PR.
- **http4k-server-netty** : Implement KeepAlive. H/T @carbotaniuman for the PR.
- **http4k-bom** : New Bill-Of-Materials module!
- **http4k-*** : Upgrade some dependency versions.

### v3.249.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-server-netty** : Add support for response streaming. H/T @carbotaniuman for the PR.
- **http4k-serverless-gcf** : New serverless module! H/T @ssijak for the PR.

### v3.248.0

- **http4k-server-ratpack** : New backend module!
- **http4k-format-jackson-yaml** : [New module]
- **http4k-*** : Upgrade some dependency versions.
- **http4k-cloudnative** : - Fix #418 - Fix separator propagation when adding values to an existing MapEnvironment. H/T
  @jshiell
- **http4k-contract** : - Add support for securing the API description endpoint. H/T @goodhoko for the PR.
- **http4k-client-websocket** : Added auto-reconnection support on blocking WsClient. H/T @alphaho for the PR.
- **http4k-format-\*** : Rename/deprecate `asXYZString(Any)` -> `asFormatString(Any)` in all modules

### v3.247.0

- **http4k-server-ktornetty** : New backend module! H/T @albertlatacz for the contribution!
- **http4k-*** : Upgrade some dependency versions.
- **http4k-security-oauth** : Fix #414 BasicAuth server filter to not throw an exception on invalid base64 input. H/T
  @Sebruck for the fix.

### v3.246.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-template-pebble** : Fix #411 - Non-root pebble templates when using CachingClasspath from a compiled JAR. H/T
  @alyphen

### v3.245.1

- **http4k-server-ktorcio** : Fix #410 - KtorCIO does not stop properly.

### v3.245.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : Factored out `Http4kServletAdapter` to allow usage of the Servlet API outside of creating a Servlet
  instance.
- **http4k-*, Breaking (prevent API abuse)** : Restricted generic `with()` method actual http4k types. Usage outside our
  API should not use this method.
- **http4k-contract** : Fix #404 - Rework of some `FieldRetrieval` classes to remove duplication and to support
  PropertyNamingStrategies set at the global level

### v3.244.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-*, Breaking (if you're not using it right!)** : Fix #397 - Fixed up Maven dependencies so that they are not
  bringing in runtime libraries.
- **http4k-core** : - Add enum StringBiDiMapping #395 - H/T @goodhoko

### v3.243.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to `1.3.72`.
- **http4k-security-oauth** : A strategy can now be passed into `AuthRequestWithRequestAuthRequestExtractor` to
  determine how to combine `AuthRequest` and `RequestObject` H/T @tom

### v3.242.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-testing-servirtium** : Improve error diagnostics. H/T @vchekan for the PR.
- **http4k-*, Unlikely Break** : Change `Router` to return `RouterMatch` instead of nullable `HttpHandler`. This allows
  us to support `METHOD_NOT_ALLOWED` (405) if we match a path but not a verb instead of just `NOT_FOUND` (404). This
  should break custom ro H/T @jshiell for the PR.

### v3.241.0

- **http4k-security-oauth, Breaking** : `client_id` along with the corresponding `TokenRequest` is passed into access
  and refresh token generators so additional validation can take place H/T @tom

### v3.240.0

- **http4k-*** : Upgrade Kotlin to `1.3.71`.
- **http4k-testing-servirtium** : Switch OkHttp client for Apache.
- **http4k-server-jetty** : Made some classes non-internal so they can be easily reused for custom `ServerConfig`
  implementations.

### v3.239.0

- **http4k-client-websocket, Breaking** : Added extra onError handler when creating a non-blocking websocket.
- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.3.70.

### v3.238.0

- **http4k-security-oauth** : Early work on supporting refresh tokens. H/T @tom

### v3.237.0

- **http4k-core** : Fix #377. `Added replaceHeaders()` method. Thanks to @bastman for the idea.
- **http4k-contract** : Fix nullability of references in OpenApi3

### v3.236.0

- **http4k-testing-servirtium** : Don't pass recording handler into non-test methods as a resolved parameter.

### v3.235.0

- **http4k-testing-chaos, Break/Rename** : ChaosEngine is now exposed when configuring API. Renamed `withChaosEngine()`
  to `withChaosApi()`, replaced `toggle()` and `update()` with `enable()/disable()`

### v3.234.0

- **http4k-testing-chaos, Break** : Tweaked API make it simpler to use the `ChaosEngine` via programmatically (as
  opposed to REST).
- **http4k-testing-servirtium, Tiny break** : Tweaks to `InteractionOptions` to make working with Servirtium tests a bit
  nicer.

### v3.233.0

- **http4k-testing-servirtium** : Upgrade ServirtiumServer to use OkHttp instead of JavaHttpClient (due to streaming
  restrictions on MiTM).
- **http4k-testing-servirtium, Break** : Rename `Github` to `GitHub`.

### v3.232.0

- **http4k-format-kotlinx-serialization** : New JSON module! H/T @joscha-alisch for the PR. :)
- **http4k-testing-servirtium** : Work around Kotlin @JvmOverloads problem in ServirtiumServer.
- **http4k-*** : Upgrade some dependency versions.

### v3.231.0

- **http4k-testing-servirtium** : Making API a bit more Java-compatible friendly. Ability to vary the Server
  implementation.
- **http4k-server-jetty** : Fix #362 - Websocket disconnect early causes lateinit reference race condition. H/T @fintara
  for the report/fix.

### v3.230.0

- **http4k-aws** : Improved efficiency of building AWS credentials (replace String.format).
- **http4k-testing-servirtium** : Making API a bit more Java-compatible friendly.
- **http4k-*** : Upgrade some dependency versions.

### v3.229.0

- **http4k-security-oauth** : Allowing for custom authenticate methods when fetching access tokens H/T @tom

### v3.228.0

- **http4k-testing-servirtium, Breaking** : API is still in beta, so moving to a more composed approach which will
  increase reuse and allow for running Servirtium infra without a dependency on http4k or Junit. Added loading from
  GitHub. :)
- **http4k-security-oauth, Breaking** : Audience on request object is now a list to support multiple audiences. H/T @tom
- **http4k-security-oauth** : Nonce is now also passed through on RequestJwts, so it can be added to request jwts. H/T
  @tom

### v3.227.0

- **http4k-core** : Implmement #340. Support SameSite cookies. H/T @danielwellman for the contribution.
- **http4k-format-jackson** : Made `JacksonJsonPropertyAnnotated` Kotlin 1.4 safe (call to superclass might return
  null). H/T @pyos for spotting this.

### v3.226.0

- **http4k-testing-servirtium** : Moved Servirtium code to new module - was previously [http4k-incubator].

### v3.225.0

- **http4k-incubator** : Rewrote Servirtium code to support manipulations.

### v3.224.0

- **http4k-security-oauth** : Fix issue where `AuthRequestWithRequestAuthRequestExtractor` doesn't take into account
  scopes not being nullable correctly. H/T @tom

### v3.223.0

- **http4k-security-oauth** : Adding `expiry` to `RequestObject`. H/T @tom
- **http4k-security-oauth** : Fixing issue where unknown fields cause extracting `RequestObject` from a jwt, fails due
  to unknown fields. H/T @tom

### v3.222.0

- **http4k-security-oauth, Breaking** : Error responses in the authorise endpoint now take into account values from
  the `request` parameter, this will require a validator for that jwt be implemented. H/T @tom
- **http4k-security-oauth, Breaking** : State is now its own type, and not just a string, so it can be validated. H/T
  @tom
- **http4k-security-oauth, Breaking** : `redirectUri` on `AuthRequest` is now nullable as it might come on a request
  jwt, this is validated to be always be present downstream. H/T @tom
- **http4k-security-oauth** : Allow parsing of request jwt. H/T @tom
- **http4k-security-oauth** : Adding `RequestObject` to `AuthRequest`. H/T @tom
- **http4k-security-oauth** : Adding `AuthRequestWithRequestAuthRequestExtractor` that will extract the request from the
  jwt, assuming the validator is implemented which can be used instead of just using `AuthRequestFromQueryParameters` if
  support for parsing a request jwt is required. H/T @tom

### v3.221.0

- **http4k-*, Unlikely break from Java only** : Make all custom http4k exceptions extend RuntimeException. This helps
  with Java compatibility so things like LensFailure inside Java Lambdas don't require catching (as they are
  caught/dealt with by other bits of http4k automatically)

### v3.220.0

- **http4k-moshi, Behaviour break** : Fix #353 Don't fail by default on unknown properties. This is the expected default
  behaviour for all JSON implementations. H/T cnusp for the report.

### v3.219.0

- **http4k-incubator** : Next iteration of Servirtium JUnit extensions. Improved API to support multiple storage
  engines.

### v3.218.0

- **http4k-incubator** : Next iteration of Servirtium JUnit extensions. Correct indexing of interactions.
- **http4k-security-oauth** : Authorisation rendering will now taking into account 'response_mode' of either query or
  fragment in responses and no longer just use the default fo the 'response_type'. H/T @tom
- **http4k-security-oauth, Breaking** : Error responses in the authorise endpoint will actually redirect back to '
  redirect_uri' assuming the validator correctly validates both the 'client_id' and 'redirect_uri' to be valid. H/T @tom

### v3.217.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-incubator** : Next iteration of Servirtium JUnit extensions. Only check content which is in the contract when
  replaying.

### v3.216.0

- **http4k-core, Breaking** : Removed clashing Events `then()` from deprecated (meaning it cannot be used as there is
  also another `then()` in that package). Use the one in `org.http4k.events` instead.
- **http4k-security-oauth** : Adding nonce to AuthorizationCodeDetails H/T @tom

### v3.215.0

- **http4k-core** : GZip client filters now send correct accept-encoding header. @jshiell
- **http4k-core** : New AcceptGZip client filter allows handling of remote GZip without compressing client requests.
  @jshiell

### v3.214.0

- **http4k-core** : Fix #344 H/T Streaming GZip encoder loses data. @jshiell

### v3.213.0

- **http4k-security-oauth** : Fixing wrong AuthRequestExtractor passed to AuthRequestTrackingFilter. H/T @tom

### v3.212.0

- **http4k-security-oauth** : allowing additional properties to be stored on auth request, if using additional
  extractors H/T @tom

### v3.211.0

- **http4k-core** : Fixes for #338 - Gzip filters send content-encoding of gzip even when body is empty. H/T @jshiell
- **http4k-security-oauth, Break** : OIDC callback urls using the ResponseType 'code id_token' will now have the
  parameters returned as a fragment not a query as per 3.3.2.5 of the OpenID Connect Core 1.0 spec H/T @tom
- **http4k-security-oauth, Break** : Initial support of nonce in OIDC requests H/T @tom

### v3.210.0

- **http4k-core** : Support for GZipping response streams. H/T @jshiell
- **http4k-security-oauth** : Adding expires_in to token endpoint response. H/T @tom

### v3.209.0

- **http4k-*** : Added `Status` to auto-marshalling JSON mappings.
- **http4k-security-oauth** : Adding token_type to token endpoint response, and strip out nulls in response. H/T @tom

### v3.208.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-core** : PR #333. Copy zipkin traces across threads. H/T @jshiell for the PR.
- **http4k-testing-approval** : Close Readers when reading from them.
- **http4k-incubator** : Next iteration of Servirtium JUnit extensions for recording and replaying.

### v3.207.0

- **http4k-*** : Upgrade some dependency versions
- **http4k-incubator** : Added first cut of Servirtium classes for recording and replaying traffic. Needs validating in
  the wild
- **http4k-format-jackson** : Fix #320. http4k-format-jackson incompatible with jackson-module-kotlin 2.10.1

### v3.206.0

- **http4k-*** : Upgrade some dependency versions.
- **http4k-contract** : Fix #323. Doc generation does not work with multipart lenses.
- **http4k-format-jackson** : Fix #313. Jackson serialization is not working properly with polymorphic types stored in a
  collection. H/T @alphaho for the PR :)
- **http4k-core, Break** : Renamed `value` on `ParamMeta` to `description`.

### v3.205.0

- **http4k-*** : Upgrade some dependency versions, including Kotlin to 1.3.61
- **http4k-security-oauth** : allowing setting scopes on AccessToken creation so they are set on the response. H/T @tom

### v3.204.0

- **http4k-core, http4k-aws** : - increase efficiency of Hex implementation for trace ids and HMAC. H/T @time4tea
- **http4k-cloudnative** : Reimplemented Environment to be more efficient. H/T @time4tea for noticing this.

### v3.203.0

- **http4k-security-oauth** : On generating tokens allowing for the client id to be based on the result of validation
  rather than just the form parameters of the request. To support client assertions. H/T @tom

### v3.202.0

- **http4k-security-oauth** : Adding new errors to support issues with client assertions. H/T @tom

### v3.201.0

- **http4k-security-oauth** : Allowing a scope to be set on AccessToken. Allowing for more low level validation of
  Authorise and Token Requests, by implementing `org.http4k.security.oauth.server.AuthoriseRequestValidator`
  and `org.http4k.security.oauth.server.accesstoken.AccessTokenRequestAuthentication` respectively. H/T @tom

### v3.200.0

- **http4k-contract** : Support multiple request bodies in OpenApi v3

### v3.199.1

- **http4k-format-jackson** : Fix #313 Part 2 - Revert default behaviour for collections of polymorphic types, but is
  now overridable by using `autoBody()` instead of `auto()`. Reopened #313.

### v3.199.0

- **http4k-format-jackson, Breaking** : Fix #313 - ConfigurableJackson.autoBody implementation would not work with
  collections of polymorphic types. This fix has the effect of blowing up auto-json behaviour when classes are defined
  inside functions (causing nasty `java.lang.reflect.GenericSignatureFormatError: Signature Parse error` exceptions). To
  remedy, just move inlined classes outside of the functions that they are defined in. H/T @alphaho for the PR.
- **http4k-*** : Update some dependency versions

### v3.198.0

- **http4k-core, Breaking** : Reworking of ContentType to support multiple directives. `directive` field is
  now `directives`, so just add the extra 's' to fix :)
- **http4k-security-oauth** : Moar options on `OAuthProviderConfig`. H/T @tom

### v3.197.0

- **http4k-*** : Update some dependency versions, including Kotlin to `1.3.60`.
- **http4k-core** : Make Query value optional when setting on a `Request`.
- **http4k-core, Breaking** : Fix #316. Optional Query lens handling is more accurate. See issue for details of change
  in behaviour.

### v3.196.0

- **http4k-*** : Update some dependency versions.
- **http4k-format-jackson, http4k-format-gson** : Add support for auto marshalling `Throwable` in a sensible way.
- **http4k-cloudnative** : Renamed badly named `UpstreamRequestFailed` to `RemoteRequestFailed`. Improved error
  handling.

### v3.195.1

- **http4k-cloudnative** : Fix adding value to overridden environment when using `set()`. H/T @jippeholwerda for the PR

### v3.195.0

- **http4k-security-oauth** : Tweak to handle Content-Type comparisons (with and without directive). H/T @jippeholwerda
  for the PR
- **http4k-multipart] - [Breaking** : Added support for setting custom headers in Multipart form fields and files. This
  has removed the `String` as the default field type (it is now `MultipartFormField`. Calls to create lenses
  using `MultipartFormField` will now require `MultipartFormField.string()` instead.

### v3.194.0

- **http4k-contract** : Useful tweaks to the contracts API

### v3.193.1

[http4k-cloudnative] Fix #304 - map `get()` does not respect fallback values in overridden environment.

### v3.193.0

- **http4k-contract** : Marking endpoints as deprecated in OpenApi3

### v3.192.0

- **http4k-template-jade4j** : [New module] H/T @RichyHBM for the contribution! :)

### v3.191.0

- **http4k-contract** : Better support for overriding of raw map definition id in JSON schema generation

### v3.190.0

- **http4k-core** : Added method to (immutably) modify status on `Response`. H/T @brandon-atkinson for the suggestion
- **http4k-core** : Added composite object support to lens system, allowing creation of simple lenses which draw from
  several different values (of the same location only - e.g Query/EnvironmentKey)
- **http4k-contract** : Support for overriding the entity definition id in JSON schema generation
- **http4k-*** : Update some dependency versions.

### v3.189.0

- **http4k-server-netty** : Fix reported port in `Netty`. H/T @fantayeneh for the PR :)
- **http4k-security-oauth** : Add `validateScopes()` to `ClientValidator`. H/T @tom

### v3.188.0

- **http4k-contract** : Support multiple-response models in OpenApi2 and 3. Note that this currently is unsupported in
  the OpenApi UI due to a bug (which doesn't display the schema for the response correctly). However, the JSON schema is
  generated correctly in these cases.
- **http4k-*** : Update some dependency versions.

### v3.187.0

- **http4k-*** : Update some dependency versions, and changes to various APIs involved (Jackson and Resilience4J)
- **http4k-core** : - Add YearMonth support to standard JSON mappings
- **http4k-format-jackson, http4k-format-gson, Possible break** : - Moved reified `NODE.asA()` method
  from `JsonLibAutoMarshallingJson` down onto the instances of the `Json` (`ConfigurableJackson`/`ConfigurableGson`).
  This is so that we can handle generified classes such as lists and maps correctly. (As per the problems fixed in
  3.181.0)

### v3.186.0

- **http4k-core** : - Rollback a couple of places which were using Java9+ APIs (for no good reason).

### v3.185.0

- **http4k-contract** : Improvements to rendering enums as their own objects in JSON Schema.

### v3.184.0

- **http4k-contract** : Add `Cookies` options to contract DSL

### v3.183.0

- **http4k-serverless-lambda** : Add ability to access Lambda context. H/T @ivoanjo for the PR.
- **http4k-contract** : Fix rendering of OrSecurity when there are more than 2 parts.

### v3.182.0

- **http4k-core** : Rename `EventsFilter` to `EventFilter` because sanity.
- **http4k-format-jackson, http4k-format-gson** : Reintroduce `autoBody()` method

### v3.181.0

- **http4k-core** : Added base events implementations for StructuredLogging.
- **http4k-core, Repackage** : Events classes are now in `org.http4k.events`.
- **http4k-core, Breaking** : `EventCategory` is no longer a field of `Event`. To fix, just remove `override` from
  your `Event` classes.
- **http4k-format-jackson, http4k-format-gson** : Fixed problem when attempting to deserialise generic Lists.

### v3.180.0

- **http4k-*** : Update various dependencies.
- **http4k-testing-hamcrest** : Improve messages of Hamkrest matchers. H/T @albertlatacz
- **http4k-cloudnative** : Fix #291 - Readiness check result when there are > 2 checks may not report the correct
  result. H/T @alfi
- **http4k-security-oauth, Possibly breaking** : Making client_secret optional in AuthorizationCodeAccessTokenRequest to
  support non client_secret flows. H/T @tom

### v3.179.1

- **http4k-client-okhttp** : Include status description in Response object.

### v3.179.0

- **http4k-contract** : Added `OpenApiExtension` interface, which allows the definition of extensions that will modify
  the OpenApi specification JSON. H/T @rgladwell for the inspiration.
- **http4k-contract** : Support composite security models using `or()` and `and()`. Once again, H/T @rgladwell :)

### v3.178.0

- **http4k-security-oauth, Possibly breaking** : Request is passed as a parameter to the ClientValidator. Just pass it
  in! :)  H/T @tom
- **http4k-contract, Behaviour change** : When specified, individual route security now replaces global security (this
  is as the security model in the OpenApi spec is specified) as opposed to both being applied.

### v3.177.0

- **http4k-security-oauth, Possibly breaking** : More support for OIDC, adding state to AuthorizationCodeDetails, and
  passing it into createForAccessToken on IdTokens. H/T @tom

### v3.176.0

- **http4k-security-oauth** : More support for OIDC. H/T @tom

### v3.175.0

- **http4k-*** : Update various dependencies, including Kotlin to 1.3.50.
- **http4k-security-oauth** : Some support for OIDC. H/T @tom

### v3.174.0

- **http4k-*** : Update various dependencies, including Jackson for a CVE.

### v3.173.0

- **http4k-core** : Fix #273 - parentSpanId trace incorrectly populated when no previous traces
- **http4k-contract, Unlikely Break** : Remodelled how Security is rendered, so it's possible that this may break
  slightly for customer implementations
- **http4k-contract** : Added support for Implicit OAuth flow, with suport for custom `googleCloudEndpoints` Security.
  H/T @rgladwell

### v3.172.0

- **http4k-core** : Added uni-directional serialization/deserialization options to JSON lib auto-conversion
  configuration.

### v3.171.0

- **http4k-core, Break (mitigation)** : Replaced default resource loader location for `singlePageApp()` to `/public`
  instead of root - this is for safety of NOT serving the root of the classpath by default.

### v3.170.0

- **http4k-core** : Add a warning when `static()` is used with no package path, thus exposing the contents of the
  classpath remotely.

### v3.169.0

- **http4k-*** : Update various dependencies.

### v3.168.0

- **http4k-contract** : Collect LensFailure causes into a single place when validating.

### v3.167.0

- **http4k-contract, Possibly Break** : Open out `ErrorResponseRenderer` interface to take LensFailure instead of the
  individual failures when rendering `badResponse()`. To fix, simply wrap the list of failures into a LensFailure.

### v3.166.1

- **http4k-core** : Tweak `singlePageApp()` routing handler, to correctly apply filters when fallback page is used.

### v3.166.0

- **http4k-core** : Added `singlePageApp()` routing handler, which matches both static content or falls back to the root
  path index file

### v3.165.0

- **http4k-contract** : Fix invalid OpenApi2 when root and base path match. H/T @rgladwell
- **http4k-contract** : `ContractRoute` is now an `HttpHandler`, so no need to wrap contract routes in a `contract {}`
  to test them. H/T @rgladwell for the inspiration.
- **http4k-contract** : Support Host/baseUri values in OpenApi2. H/T @rgladwell
- **http4k-contract** : Optionally add description route to route list H/T @rgladwell

### v3.164.0

- **http4k-*** : Update various dependencies, including Kotlin to 1.3.41.
- **http4k-testing-approval** : Upgrade of HTML library from above may have an effect on output of HTML approval tests.
- **http4k-contract** : Support for more Jackson annotations in JSON Schema rendering. H/T @tom for the PR contributing
  this.

### v3.163.0

- **http4k-testing-chaos** : Add detail to Chaos OpenApi interface.

### v3.162.0

- **http4k-testing-chaos** : Add detail to Chaos OpenApi interface.

### v3.161.0

- **http4k-cloudnative** : Added Forbidden request exception to HandleUpstreamRequestFailed.

### v3.160.1

- **http4k-testing-chaos** : Countdown chaos trigger fixed.

### v3.160.0

- **http4k-testing-chaos** : Slight fix to avoid consuming stream body when setting chaos.

### v3.159.0

- **http4k-*** : Update various dependencies.
- **http4k-client-okhttp** : Updated `OkHttp` to v4.0.0 (Kotlin edition).
- **http4k-contract** : Tweak to JSON Schema rendering to handle recursive objects better.

### v3.158.1

- **http4k-server-netty** : Fix #260 - cannot set multiple response headers with same name
- **http4k-server-undertow** : Fix #260 - cannot set multiple response headers with same name

### v3.158.0

- **http4k-contract** : POSSIBLE BEHAVIOUR CHANGE DUE TO BUG: Fix #259 - Contract blocks do not produce 400s if an
  external CatchAll is provided. This may have an effect on how errors are generated (a 400 is produced instead of the
  previous 500 from the CatchAll).

### v3.157.1

- **http4k-security-oauth** : Fix broken deprecation annotation.

### v3.157.0

- **http4k-security-oauth** : Default to JSON format response in Access Token response
- **http4k-security-oauth** : Renamed a couple of classes (AccessTokenContainer -> AccessToken), and removed `isValid`
  method from `AuthorizationCodes` because it doesn't make sense for this to be on the OAuthServer.

### v3.156.0

- **http4k-*** : Update Kotlin to 1.3.40
- **http4k-contract** : Support OAuthSecurity renderer.

### v3.155.2

- **http4k-*** : Update various dependencies.
- **http4k-*** : Dokka improvements. Does not mitigate #196 as we run the main build on OpenJdk11. H/T @ivoanjo

### v3.155.1

- DO NOT USE - broken

### v3.155.0

- DO NOT USE - broken

### v3.154.1

- **http4k-multipart** : Made the multipart header parser case-insensitive. H/T @tenniscp25

### v3.154.0

- **http4k-contract** : Add `SchemaModelNamer` to allow for custom JSON Schema model names.

### v3.153.0

- **http4k-contract** : OperationIds are generated without illegal characters `{}`.

### v3.152.0

- **http4k-contract** : Support non-string keys for "text convertible" values in maps for Auto-schema generation.

### v3.151.0

- **http4k-contract** : Fixed Auto-schema generation to detect and remove duplicate items from list schemas.

### v3.150.0

- **http4k-security-oauth** : Make authentication mechanism for grant types configurable.

### v3.149.0

- **http4k-security-oauth** : Initial support for `client_credentials` grant type.

### v3.148.0

- **http4k-contract** : Jackson property searching in OpenApi3 now searches superclasses.

### v3.147.0

- **http4k-contract** : Support custom `JsonProperty` annotation for OpenAPi3 generation
- **http4k-cloudnative** : New exception type for unuathorised. H/T @tom

### v3.146.0

- **http4k-contract** : Fix #228 - Support Map-based fields in OpenApi 3 Auto-schema generation
  as `additionalProperties`. H/T @noahbetzen-wk for the idea.

### v3.145.0

- **http4k-contract** : Reimplement Auto-schema generation using reflection. Added test cases to use
  the OpenApi generator to create valid code-based OpenApi clients using the OpenApi generator.
- **http4k-format-jackson** : Removed reflective JSON schema creator, since it was not actually OA3 compliant.

### v3.144.0

- **http4k-*** : Update various dependencies.
- **http4k-contract** : Improvements to better adhere to OA3 spec.
- **http4k-security-oauth** : Allow injecting OpenID's `request` parameter into the authorization request.
- **http4k-security-oauth** : Expose request to AuthRequestTracking.

### v3.143.1

- **http4k-core** : Replace RequestContexts with reference to Store<RequestContext>. H/T @amcghie
- **http4k-contract** : Added some missing deprecations.
- **http4k-contract** : Fix #243 - Nulls not allowed in OpenApi V3 JSON models.

### v3.143.0

- **http4k-contract** : Fix #239 - OpenApi v3 schemas for raw lists blow up when rendering.
- **http4k-*** : Update various dependencies.

### v3.142.0

- **http4k-contract** : Both OpenApi v2 and v3 are now supported, including automatic schema generation. Some classes
  for
  OpenApi2 have moved to a new package - Deprecations should provide most alternatives. See module docs for details. For
  OpenApi v3, optionally include `http4k-format-jackson` to get JSON schema models based on JVM objects.
- **http4k-format-jackson** : Added reflective JSON schema creator, to be used for generating named models from JVM
  objects.

### v3.141.0

- **http4k-core** : - Fix #233 - MemoryBody blows up with "java.nio.ReadOnlyBufferException"
- **http4k-core** : - Tighten up security on Basic and Bearer auth server filters. H/T @andymoody
- **http4k-security-oauth** : - Add filter to check bearer token is valid access token. H/T @andymoody

### v3.140.0

- **http4k-*** : Update dependencies (including Kotlin bump to 1.3.31)
- **http4k-security-oauth** : Handle user rejecting/failing authentication. H/T @andymoody

### v3.139.0

- **http4k-security-oauth** : Allow access token generation to explicitly reject an authorization code already used. H/T
  @andymoody

### v3.138.1

- **http4k-security-oauth** : Amend error responses from access token generation. H/T @andymoody

### v3.138.0

- **http4k-contracts** : Tweaks to Security model for `http4k-contracts`. (Renamed) `ApiKeySecurity` is now a proper
  class, and added `BasicAuthSecurity`. You can now also override the security model on a per-route basis.
- **http4k-contract** : Added ability to set the `Security` on each individual contract route. This overrides
  any `Security`
  set on a contract-level basis.

### v3.137.1

- **http4k-serverless** : Allow invocation of serverless functions locally. H/T @Charlyzzz
- **http4k-core** : Fix #226 - ResourceLoadingHandler not close stream

### v3.137.0

- **http4k-security-oauth** : Rename AuthRequestPersistence to AuthRequestTracking

### v3.136.0

- **http4k-security-oauth** : Allow the http request to be referenced when generating OAuth authorization codes. H/T
  @andymoody

### v3.135.0

- **http4k-core** : Change `mime.types` location so it doesn't conflic with other libraries. H/T @benusher and @dgliosca
- **http4k-testing-chaos** : Added `SnipRequestBody` behaviour.
- **http4k-core** : (Small) Breaking Fixed location of some extension files to be relevant to the particular package
  that they are referencing. This will require reimporting the new location into your source if you were using the
  imports.

### v3.134.0

- **http4k-testing-approval** : Made content-type aware approval tests check the content type after the content. This is
  friendlier for failing tests, as
  it is more important that the content is correct than the content-type (and often errors don't have content type set
  so you
  get an erroneous error message which masks the fact that the content was wrong).

### v3.133.0

- **http4k-cloudnative** : `HandleUpstreamRequestFailed` client filter now takes a predicate `(Response) -> Boolean`
  instead of a boolean. This allows for more fine grained custom control of which Responses are acceptable.
- **http4k-*** : Upgrade deps, including Kotlin to `1.3.30`.
- **http4k-contract** : Fix #221 - Contract path fixed segments cannot contain slash characters.

### v3.132.0

- **http4k-format-jackson** : Convert `Jackson` to use `readValue` instead of `convertValue`. This fixes some problems
  with type conversions.

### v3.131.0

- **http4k-core** : (Possible) Break: Made lense implementations `Query, Header etc` clear previous values by default
  instead of
  appending. This leads to a more consistent behaviour. In order to be able to set multiple values on an object
  using a lense, use the `multi` form instead - eg. `Header.required("foo")` -> `Header.multi.required("foo")`. We
  envisage the impact of this change is limited as it's only Queries that generally can have multiple possible
  values, and in the vast majority of cases a replace rather than append is expected.

### v3.130.0

- **http4k-contract** : Generify contract handling code to allow for custom `HttpMessageMeta<XYZ>`

### v3.129.0

- (Slight) Break: Collapsed `UpstreamRequestFailed` exceptions to contain the status, and thus removing non-special
  cases like `BadRequest` and `BadGateway`. This makes them much easier to use in practice as users have access
  to the the status. To migrate, simply replace previous classes with `UpstreamRequestFailed(Status.XYZ, message)`.
- **http4k-contract** : Open up `ContractRoute` API to facilitate extension when defining a custom `ContractRenderer`.
- **http4k-*** : Upgrade deps.

### v3.128.0

- **http4k-core** : Added base64 to the supported mappings for Query/Headers etc...
- **http4k-testing-approval** : Approver does not write actual output if there is none to write and there is no approved
  content

### v3.127.0

- **http4k-testing-approval** : Improved `Approver` interface to more closely match the traditional
  `assert<XYZ>` approach - this results in a more discoverable/obvious API.
- **http4k-testing-hamkrest** : Added ability to create a Hamkrest matcher directly from the `Approver` instance to be
  combined
  with other relevant matchers.

### v3.126.0

- **http4k-testing-approval** : Add support for XML and HTML approval tests.

### v3.125.0

- Added `http4k-testing-approval` module, which is compatible with JUnit5 tests and integrates with
  the [OkeyDoke](https://github.com/dmcg/okey-doke) approval testing files and IntelliJ plugin. H/T to
  @jshiell for the inspiration Gist containing the base Junit5 Extension.

### v3.124.0

- **http4k-security-oauth** : Make authentication response available when creating AuthorizationCode.

### v3.123.0

- **http4k-security-oauth** : Introduce OAuthServer to `http4k-security-oauth` to assist in the creation of
  authorization servers.

### v3.122.0

- Generified `GenerateXmlDataClasses` filter, and added default implementations for
  `http4k-format-jackson-xml` and `http4k-format-xml` modules.
- (Rename) Break: `GenerateXmlDataClasses` filter in `http4k-format-xml` is now `GsonGenerateXmlDataClasses`
- Removed superfluous `CatchLensFailure` filter from `http4k-contracts` module. This is not required
  as lens failures are already handled by the main contract handler.

### v3.121.0

- Moved Jackson XML support to new module `http4k-format-jackson-xml`. Note that this is for
  auto-marshalling of data-classes only and does not expose an XML DOM model.

### v3.120.0

- Deprecated `Body.view()` lens construction in favour of a `Body.viewModel()` call which removes the
  implicitly called `toLens()`. This allows further mapping from one `ViewModel` type to another,
  and brings the view lens construction into line with the rest of the extension functions on `Body`.
- Add auto-marshalling XML support to `http4k-format-jackson` module.
- Upgrade deps.

### v3.119.0

- Add `UpstreamRequestFailed` exceptions and `HandleUpstreamRequestFailed` filters to
  `http4k-cloudnative`. These allow apps to neatly deal with upstream failure in a sensible way.

### v3.118.0

- Tweak `contract()` DSL to add remaining options for configuration.

### v3.117.0

- Renamed `ChaosControls` (deprecated) to `ChaosEngine`.

### v3.116.0

- Added new templating module `http4k-templates-freemarker`. H/T @amcghie for the PR implementing this
- `http4k-contract` has a new DSL for construction of the contract which replaces the old one (now
  deprecated). This is consistent with the `meta` DSL used to construct individual contract routes
  and avoids repetition of the old API. We attempted to implement the standard replace-with deprecation, but IntelliJ
  didn't like it (too complex maybe), so we've hard coded the warning instead which code which should work.
- Added `PreFlightExtraction` to contract module, which adds the ability to disable body-checking for contract routes.
  This will allow refining of routes or entire contracts to be more efficient.
- Upgrade deps.

### v3.115.1

- Fix #217 - Cannot override the definitionId of a top-level array in OpenAPI
- Upgrade deps

### v3.115.0

- Chaos now do not blat `x-uri-template` when used with a `RoutingHttpHandler`
- Simplified usage of `Once` chaos trigger.
- (Slight break) Consistentified (!) construction of Chaos Behaviours, Stages and Triggers. Replaced
  singletons with function calls. Eg. `Always -> Always()`

### v3.114.0

- (Possible Break): Fix #215 - `LensFailure` does not always include target object. Only change to the API
  is that `IN` generic in Lenses is now bounded by `IN : Any`. This fix is a actually internally consistent as
  we could not always include the target otherwise (which is an `Any?`).
- Trim leading and trailing whitespace from extracted `EnvironmentKey` values.
- Secret value is now only usable once via the `use()` function.
- Upgrade to various deps.
- Removed deprecations.

### v3.113.0

- Added some common types for Environmental setup, and equivalent BiDiLens mappings
- Handle null response in Java Http client. H/T @FredNordin

### v3.112.2

- Fix #212 - allow null values in HTTP contract definitions. This does mean we lose the type definition for
  that field, but we don't blow up silently (which was the previous behaviour). H/T @xhanin

### v3.112.1

- Re-add `Path.nonEmptyString()` which was accidentally removed.

### v3.112.0

- Add support for prohibiting String unmarshalling in JSON auto-marshalling configuration.
- HTTP Contracts now use the underlying `ContractRenderer` to produce the BadRequest and NotFound responses.
  Made `OpenAPI`
  open so that these responses can be customised.

### v3.111.0

- Add support for JSON views in `Jackson` module. H/T @xhanin for the donkey work.

### v3.110.0

- Breaking: slight rearrangement of RouteMeta `receiving/returning` methods to provide consistency when defining route
  contracts.

### v3.109.0

- Moved the set of predefined String `BiDiMapping` instances to their own class. Bulked out the
  auto-mapping configuration options.

### v3.108.0

- Upgrade to various deps.
- Extracted out new `BiDiMapping` type, which encapsulates string <-> type conversions and removes a
  boatload of duplications. These conversions are now used consistently across all the various places
  (Lenses, auto-mapping).
- Improved configurability of `AutoMarshallingJson` instances.

### v3.107.0

- Upgrade to various deps.
- Fix #208 - Xml auto deserialisation incorrectly converting strings to numbers

### v3.106.1

- Fix #207 - repeating prefixes in static routes are not handled correctly. H/T @ruXlab for the PR to fix.

### v3.106.0

- Add `http4k-server-ktorcio` server backend. Note that whilst this module does allow http4k apps to plug into the
  Ktor-CIO engine, it does not provide fully front-to-back coroutine support.

### v3.105.0

- Preventing FallbackCacheControl from duplicating existing headers. H/T @leandronunes85
- Breaking: Make `Body.length` nullable instead of throwing exception when value is not available. H/T @zvozin

### v3.104.0

- Upgrade to various deps.
- Add session token support to AWS filter, and "credentials provider" to allow for rotating AWS sessions. H/T @dhobbs.
- Breaking: Moved WsClient from `org.http4k.testing` to `org.http4k.websocket`.

### v3.103.2

- Fix `access-control-allow-origin` returned when server supports multiple origins H/T @johnnorris

### v3.103.1

- (Properly) Fix #198 - Rewrote OpenApi contract to ensure it stays fixed. H/T @reik-wargaming for the help in tracking
  this down.

### v3.103.0

- "Fix" #198 - Breaking change made in `http4k-contracts` to clarify/deconfuse API. Hid `body` parameter in contract
  route meta DSL - it is now `receiving()`.
- Upgraded some dependencies, including Gradle to v5.0.
- Breaking: Resilience4j dependency upgrade causes a break when providing custom config. Simply insert the Config type
  generic to fix:
  e.g. `RetryConfig.custom()` -> `RetryConfig.custom<RetryConfig>()`

### v3.102.1

- Fix #197 - Swagger spec for form fields had incorrect description.

### v3.102.0

- Introduce interface for Environment

### v3.101.0

- Upgrades to dependencies
- Improved Client-side HTTP status descriptions
- Lenses now support Durations out of the box
- Environments now support multi-value keys (comma separated)

### v3.100.0

- Make `Undertow` API friendlier
- Fix to JsonReadinessCheckResultRenderer to actually implement the correct interface

### v3.99.0

- Enhancement of `http4k-cloudnative` - now supports extra-health check routes, and provide way to load app
  configuration via Properties files.

### v3.98.0

- Add filter allowing Gzipping based on an allowed set of content types. H/T @jshiell
- Change HttpHandler extending HttpClients to use `object invoke()` mechanism, as the individual clients have no visible
  API surface of their own. Introduced `DualSyncAsyncHttpHandler` interface.

### v3.97.0

- Webdriver checkbox handling improved. H/T @gypsydave5
- upgrade to various versions

### v3.96.0

- upgrade to Kotlin 1.3.0

### v3.95.1

- Tweak to K8S port variables.

### v3.95.0

- (Unlikely break): Change `Http4kServer` interface to return `Unit` from `stop()`. This affects all server
  implementations.
- Added DSL function for working with JSON objects (scopes JSON
  as `this`). `fun <T> Json<NODE>.invoke(Json<NODE>.() -> T)`
- New module `http4k-cloudnative` contains classes to help run http4k services inside cloud-native environments,
  including K8S.
- Upgrade some dependencies
- Deprecation: Moved `Header.Common` fields to main `Header` object. Extension properties should go there now.

### v3.94.1

- Use UTC when checking cookie expiry

### v3.94.0

- Deprecate String.toBody()
- Fix checkbox behaviour in webdriver

### ~v3.39.4~ v3.93.4

- Use Jetty latest release version (rather than RC one)

### v3.39.3

- Fix #189 - Uri toString now omits leading slash if the authority of a Uri is blank. This *could* be a potential break,
  but is actually more consistent as a Uri can currently be relative or absolute.

### v3.39.2

- Extend `SetBaseUriFrom` to support query parameters

### v3.39.1

- Added `SetBaseUriFrom` filter

### v3.39.0

- (Possible breaking change): `Json` is now only generified by a single type parameter instead of 2. For most usages,
  this type would have been identical anyway, but the upgrade of Argo has finally allowed the removal of this dead
  generic. Simply replace `Json<Node, Node>` with `Json<Node>`.
- Added Offset datetime types to all JSON auto-marshalling libraries
- Build logic for versioning is now in Kotlin. H/T @jmfayard for the PR
- Upgrade Kotlin, and various other dependencies

### v3.38.1

- Fix `withChaosControls` URL pattern so that it matches sub-routes ok on original handler

### v3.38.0

- Added `BearerAuth` and `BasicAuth` implementations which populate `RequestContexts`. Plus howto example :)

### v3.37.1

- Fix #177 - Make RequestContexts thread-safe.

### v3.37.0

- Upgrades to `http4k-testing-webdriver`. H/T @dickon for the PRs
- Added `ProxyHost` request filter which is useful for writing proxy-type apps.

### v3.36.1

- Fix #168 - Fix rest of hamkrest matchers caused by generics mishap.
- Upgrade HTTP client dependency versions.

### v3.36.0

- Added `http4k-testing-chaos` module, designed to enhance failure-mode testing for http4k apps. Massive H/T to
  @IgorPerikov for the PR which drove this module's creation.
- Added `http4k-incubator` module, for hosting developing projects and other code which might be promoted to top-level
  modules in the future.

### v3.35.2

- Fix #167 - Reintroduce `hasBody` compatibility with common matchers such as `containsString()`
- Remove deprecations.

### v3.35.1

- Fix #165 - AWS auth filter does not replace headers - it sets them (which breaks for request signing)
- Fix #164 - Webdriver internal state breaks when navigating to a full URL
- Fix #162 - `SetHostFrom` doesn't set 'Host' header correctly (missing port). H/T @elifarley

### v3.35.0

- Added some regex matchers to `http4k-testing-hamkrest`.
- Added `BearerAuth` authentication Server and Client Filters - these work similarly to `BasicAuth`.
- Added option for `defaulted()` lenses to fall back to another supplied lens in the case of missing value. Thanks to
  @dmcg for the inspiration. :)

### v3.34.3

- Fix #160 - `JavaHttpClient` does not copy body stream correctly onto URL connection.

### v3.34.2

- Fix #159 - Contracts should not have Security applied to the description route by default.

### v3.34.1

- Fix #158 - Static and contract routes filters are applied in the wrong order.

### v3.34.0

- Add default SamplingDecision param to ZipkinTraces - defaults to always sample.
- Fix #150 - StaticRoutingHandler filters being called twice.
- Fix #151 - POTENTIAL BREAK: Rework of Status objects to fix equality against the Status constant `vals` when a
  description has been overridden. This involves the following potential breaking change: The Status class is no longer
  a data class to tighten up encapsulation - user calls to copy() will have to be replaced.

### v3.33.2

- Raise SO_BACKLOG in Apache and Netty server implementations.
- Add PERMANENT_REDIRECT and UNPROCESSABLE_ENTITY Status object.

### v3.33.1

- No change from 3.33.0. Previous version couldn't be made available to maven central.

### v3.33.0

- Add convenient way to extract from as a Map from http message. H/T to @dmcg (this version is available in jcenter
  only)

### v3.32.1

- Fix #142 - Pebble templates don't load from JAR files.

### v3.32.0

- Add support for propagation of the Zipkin x-b3-sampled header

### v3.31.0

- Changes to the Netty factory to enable running http4k on GraalVM. H/T @RichyHBM

### v3.30.0

- Allow all server implementations to start on port 0 (ie. find a free port) and then report it back as a part of
  the `Http4kServer` interface

### v3.29.0

- Make HTTP clients resilient to unknown host and connection refused exceptions
- Implemented #134 - Added default (de)serialization for common JDK primitives to all Auto-marshalling JSON modules -
  eg. date times and UUIDs

### v3.28.0

- Fix #131 - Uri's created with paths that don't contain leading slashes.
- Added etag parser filter. H/T @dgliosca for the PR
- Fix #132 - Ensured that `disableDefaultTyping` is called in default Jackson implementation. This should be the default
  anyway, but has been added to ensure that we don't fall foul
  of [CVE-2017-7525](https://github.com/FasterXML/jackson-databind/issues/1723) and to surface awareness of this issue.

### v3.27.0

- OpenAPI now provides example values in the generated schema. H/T @skewwhiffy for the PR.

### v3.26.6

- Fix #126 - ResourceLoadingHandler can expose mapped resources into the root. <-- We think this is an important update,
  so please upgrade!

### v3.26.5

- Fix #125 - ApacheServer implementation now sets content length if present.

### v3.26.4

- Fix #123 - Multipart Body objects blow up when parsed after being debugged. As with all streams, care should be taken
  to not blow heap when internalising them for debugging purposes.

### v3.26.3

- Debugging filter now supports ignoring Multipart streams.

### v3.26.2

- Tweak: OpenAPI now doesn't return null values in the schema.

### v3.26.1

- Fix #124 - headers in WebSocket upgrade request are incorrectly joined.

### v3.26.0

- Removed `supportedContentTypes` field from OpenApi contract JSON, since this is a legacy field.

### v3.25.0

- Added option to Undertow to enable HTTP2 from main ServerConfig

### v3.24.0

- Upgrade various dependencies for Java 10 compatibility. H/T @tom
- Fix bug with repeated params in Websocket upgrade request. H/T @tom

### v3.23.1

- Composite LensFailures now capture (at least) the first failing cause (probably the body parameter in the case of
  an `http4k-contract` module.

### v3.23.0

- Fix #116 - Can provide a custom Response creation method for `CatchLensFailure`. H/T @elifarley for the inspiration!

### v3.22.4

- Added singleton method for Json.array, since if you pass in a single JsonNode (Jackson), it accidentally iterates over
  the fields in the node instead of using the object as an entry in the array.
- Fix #115 - Only add content-length for methods that allow content in AwsAuth filter

### v3.22.3

- Preserve routing information on request/response manipulation

### v3.22.2

- `http4k-security-oauth` module added - with support for OAuth2 Authorization Grant flow
- Replaced classes reliant on `javax.activation` package, which allows Java 9+ to not require any external dependencies.
  \o/
- Fix #112 - `ApacheClient` incorrectly sets headers on GET requests (this breaks F5 load balancers). H/T @simojenki
- PR #110 - Websocket client timeouts are incorrectly translated as seconds instead of millis. HT @anorth
- Core `JavaHttpClient` does not support streaming due to limitations with `HttpURLConnection`

### v3.21.1

- Fix #109 - Jackson treats integer values inconsistently, leading to matching errors when using hamkrest.

### v3.21.0

- Fix #107 - Killed the x-uri-template header and fixed the ReportHttpTransaction to have access to the `routingGroup`.
- Altered ordering of filters in `http4k-contract` so that the route is identified before pre-filters and security are
  applied. This allows knowledge of the path to be accessible at the time of application of those filters.

### v3.20.0

- Introduce JavaHttpClient to `http4k-core`. It provides a very basic http client without any other 3rd party
  dependencies.

### v3.19.0

- PR #104 - Add optional time/date formatters to LensSpecs so you can choose you serialisation format. H/T @elifarley
- Fix #105 - Swagger API json file: duplicate key in "definitions".

### v3.18.1

- Fixed PR #100 - URI template regex required extra escaping. This only affects Android deployments as IDE shows the
  regex escaping is redundant. H/T @privatwolke

### v3.18.0

- Breaking: converted contract pre-security filter to be a post-security filter. This means that all standard filters
  are applied before the security later, which allows for logging and monitoring and context setup. The previous filter
  mechanic applied security first, which didn't allow for this. In the unlikely event that post-security filters still
  need to be applied, use the `withPostSecurityFilter()` function when building the contract.
- Docs for contract RouteMeta function parameters, and deprecated some unused functions (missed when we introduced the
  DSL).
- PR #99 - Contract routes now support up to 10 path segments. Thanks to @scap1784 for the PR! :)

### v3.17.1

- Fix #97. Moshi does not fail when deserialise non-nullable fields correctly. Note that GSON still suffers from this
  problem

### v3.17.0

- Added a pre-security filter option to contract creation, so that you can explicitly specify behaviour to occur before
  security kicks in.

### v3.16.0

- Convert `Security` (from sealed class) and `ApiKey` to be interfaces. This allows users to implement their own
  security models.

### v3.15.0

- Introduce `HttpTransaction` and new `ReportHttpTransaction` filter provide better generic API for reporting, along
  with the ability to label transactions for this purpose.
- Breaking: Rework the metrics request counter and timer Filter API. There is now a `HttpTransactionLabeller` for you to
  add as many labels as required to the transaction. Each of these labels will be used to tag the metric.

### v3.14.1

- Fix #95 - Filters are now applied to "route not found" responses

### v3.14.0

- Fix #93 - Apache server doesn't like content-length or transfer-encoding headers present in http4k response.
- Add ability to "name" input and output contract body definitions in an OpenAPI JSON doc. This applies to only the top
  level entity. If no override is passed, the objects are named according to their hashcode.

### 3.13.4

- Fix #92 - cookie date should always use US locale

### v3.13.3

- Further tweak to Netty. H/T @FredDeschenes

### v3.13.2

- Fix #91 - large message handli
  ng in Netty

### v3.13.1

- Upgrade to Kotlin 1.2.20

### v3.13.0

- Support for `operationId` in OpenApi route metadata. H/T @danschultz for the PR.
- Removed previously deprecated methods.

### v3.12.0

- New client module `http4k-client-jetty`, which supports both sync and async models.

### v3.11.1

- Fix #84. OPTIONS requests are not detected by contract routes.
- Added option to NOT authorise OPTIONS requests in ApiKey security filter.
- Added support for Async HTTP clients and added new `AsyncHttpClient` interface, which is obviously used for HTTP
  clients only**, and not server-side calls. :)
- New client module `http4k-client-apache-async`.
- New metrics gathering module `http4k-metrics-micrometer`. Big H/T to @kirderf for the PR.
- Added support for async to `OkHttp` client module.

### v3.10.0

- P/R 81 - adding headers and timeout to websocket client.

### v3.9.0

- Added compactify and prettify to Json implementations
- Added `Json.hasBody` Hamkrest matchers for comparing bodies. Note these are extension methods and need to be
  referenced/imported as such.

### v3.8.0

- Added facility for non-blocking websocket client to react to onConnect event. This API is
  the same as the inbound, server-side API - ie. there are no explicit connection event handlers. H/T @tom for the idea.

### v3.7.0

- P/R #13 Create extension methods for Response to add caching headers. H/T @k0zakinio.

### v3.6.1

- Fix #78. Serialisation of raw lists using Moshi fails in the same way as the Jackson auto-conversions do. Added
  convenience methods to get around this.

### v3.6.0

- Added `http4k-format-moshi` to support the Square auto-marshalling library.

### v3.5.1

- Fix #76 - encoding of path segments to use URI encoding instead of URL form encoding.

### v3.5.0

- Added support for multiple HotReload template directories in `HandlebarsTemplates`. H/T @TomShacham
- Fix #74 - Request tracing span/parentSpan set too early so was shared between outgoing requests.

### v3.4.0

- New server backend `http4k-server-apache`. H/T @kirderf for the PR :)
- We now set the length of the incoming request body when it is available in the incoming request.

### v3.3.1

- Handlebars now uses combination of Class and Template name to cache templates.

### v3.3.0

- Facility to compose `TemplateRenderers` with `then()` to provide fallback behaviour.

### v3.2.3

- PR #70: Header order equality for Request/Response - H/T @gypsydave5.

### v3.2.2

- Switched out `Status` for `WsStatus` (with proper RFC code set) in Websockets.

### v3.2.1

- Typesafe Websockets! Jetty now supports websockets, using the same style of API in the main http4k routing.
- (Possible) Breaking change: Because `WsHandler` (typealias) implements the same inbound interface as `HttpHandler`,
  you now cannot declare `HttpHandlers` without specifying the input type, so any "anonymous" handlers will not compile
  as a result. The required fix is very simple, but manual:
  `{ Response(OK) } should become { _:Request -> Response(OK) }

### v3.1.3

- Fix Request.form() for streaming requests

### v3.1.2

- Remove possibility of empty message for Path Lens failure.

### v3.1.1

- New (better!) API for `http4k-contract` module. Old meta DSL has been deprecated.

### v3.0.1

- Fix #63 - Apache Client Connect. timeout exception handling.

### v3.0.0

- Added `http4k-serverless-lambda` module, allowing http4k applications to be deployed into AWS Lambda and then called
  from API Gateway. Effectively, the combination of these two services become just another Server back-end supported by
  the library. \o/

### v2.38.1

- `RequestContextKey` now follow the standardised Lens structure of required, optional, defaulted, and can now be
  removed (set to null). Replace calls
  to `RequestContextKey.of()` with `RequestContextKey.required()`
- Removed previously deprecated values. See below for details on replacements.

### v2.37.0

- Added `http4k-resilience4j` module, which adds Circuits, RateLimiters, Retrying and Bulkheading.
- Fix #60 (H/T @michaelhixson for the spot).

### v2.36.0

- Added a couple of useful `ServerFilters`.
- Upgrade various dependency versions.
- Tidying of Multipart code.

### v2.35.1

- Fix #57. Static handlers behave oddly when combined with an HTTP verb in the routing tree.

### v2.35.0

- Fix #56. Altered behaviour of `CatchLensFailure` to NOT catch errors from unmarshalling Response objects. This was
  causing BAD_REQUEST to be incorrectly generated.
- Simplification of generics around LensSpecs. This should not be a breaking change, (there were 3 generics, now the MID
  has been removed so there are just 2) but could break if signatures are used explicitly.

### v2.34.0

- Reordered generics in LensInjector to make sense. This should have no effect on most code-bases, but could break if
  signatures are used explicitly. Just flip the generic types to switch.

### v2.33.1

- Added support for unsigned AWS requests, which enables streaming content to S3.

### v2.33.0

- Added `BodyMode.Request` to configure streaming for clients.
- `ResponseBodyMode` is now `BodyMode.Response` (Breaking change. Fixable with simple find/replace).

### v2.32.0

- Added `ServerFilter.ProcessFiles` filter to stream Multipart Files, convert them into references and replace inline in
  the Form.

### v2.31.4

- Avoid realising StreamBody unless necessary, which could break common usages of streaming.

### v2.31.3

- Tweaks to Server backends to improve efficiency.

### v2.31.2

- Webdriver will keep only the final URI after redirects.

### v2.31.1

- Increased granularity of `Replay.DiskStream` and ensure that traffic is returned in exact order on all OSes.
- Add support for redirects to Webdriver.

### v2.31.0

- Multipart module tweaked to provide a more consistent API.
- Fix FollowRedirects for POST/PUT request.

### v2.30.0

- Multipart form support through new module `http4k-multipart`.
- Deprecation: Replaced `Swagger` with `OpenApi` and deprecated the former (via typealias).
- Deprecation: Replaced `FormValidator` with `Validator` and deprecated the former (via typealias).

### v2.29.4

- Refactor release.

### v2.29.3

- Fix #50 - Webdriver does not normalise relative links correctly.

### v2.29.2

- Http client modules now catch and convert Socket Timeout exceptions to HTTP 504s (with a custom message)

### v2.29.1

- Tweaks to how recorded traffic is stored on disk. Thanks to @dkandalov for the PR around this.

### v2.29.0

- Added `TrafficFilters` for recording and replaying HTTP traffic. See `org.http4k.traffic` package for details.

### v2.28.0

- Added `http4k-template-dust` for Dust template engine support. Thanks to @npryce for the PR to add this.

### v2.27.2

- Fix #44 - Use quotes around cookie values

### v2.27.1

- Raise proper Exception (instead of LensFailure) when RequestContexts are not set up correctly, so we don't
  accidentally classify developer errors as BadRequests

### v2.27.0

- Added facility to assign values into a `RequestContext` which is passed down the Filter chain.

### v2.26.3

- Fix #44 - Request cookies should not be wrapped in quotes.

### v2.26.2

- Fix #43 - AWS does not sign binary requests correctly.

### v2.26.1

- Fix #41 - Sending binary body alters the size of the payload.

### v2.26.0

- Added "catch all" routing option, which matches all methods to a handler.

### v2.25.4

- Fix #40 - GZip filters now use content-encoding headers instead of transfer-encoding.

### v2.25.3

- Fix #39 - ResponseBodyMode.Memory properly closes streams (breaks jetty + gzip).

### v2.25.2

- Ensure that streams are closed properly when consuming from an upstream client.

### v2.25.1

- Remove Apache client request streaming because it may not release connections properly.

### v2.25.0

- Add streaming support to HTTP Server and Client modules.
- Remove CatchLensFailure ClientFilter as it will never be used.

### v2.24.0

- Added CatchLensFailure for ClientFilters - which catches un-deserializable invalid responses from clients and
  generates a BAD_GATEWAY error.

### v2.23.4

- Switch XML generation to Gson over Jackson because Jackson doesn't handle uppercase field names well.
- Switch native XML parsed type to Document over Node.

### v2.23.3

- New algorithm for XML data class deserialisation, so un-deprecated XML methods.

### v2.23.2

- Deprecated methods in XML support due to limitation with underlying Jackson implementation.

### v2.23.1

- Fixed bug with GenerateXmlDataClasses filter

### v2.23.0

- Renamed `http4k-format-jackson-xml` module to `http4k-format-xml`.
- Improved XML unmarshalling support.

### v2.22.1

- Fixed 36: Form entry is too strict with content encoding.

### v2.22.0

- Added `http4k-format-jackson-xml` module, with XML parsing support.
- Upgrade several dependencies

### v2.21.2

- Fixed Hamkrest matchers to be on HttpMessage and not Http Request.

### v2.21.1

- Default body Content Negotiation strategy changed to None

### v2.21.0

- Converted Content-Negotiation strategy from an Enum to an interface, so that users can define their own strategies. We
  also now check encoding so there are 4-built in strategies to choose from: Strict, StrictNoDirective, NonStrict and
  None.

### v2.20.1

- Fixed #31 - Matching of segments in URIs is done after URLs are decoded, which results in not capturing encoded
  slashes in the path segments.

### v2.20.0

- Fixed #30 - CachingClasspath template ResourceLoader not working with non-root packages.

### v2.19.0

- Fixed #29 - webdriver submission of text area.
- Http clients now use a new instance of the default for each instantiation. Previously there was a shared instance.
- Add regex body type for parsing values out of bodies, and "None" option for content negotiation.

### v2.18.3

- Fix AWS request signing for requests containing empty path

### v2.18.2

- Fix AWS request signing for requests containing path with special characters

### v2.18.1

- Added support for newRequest() in new `RouteBinder` mechanic.

### v2.18.0

- Add support for unlimited nesting for `routes()` blocks. Removed the raw `Route` object, which can be replaced
  with `Router` or `RoutingHttpHandler` where appropriate.
- As part of above, rejigged route setup logic. Deprecated old routing structure, so now  `"/path" to GET bind`
  is `"/path" bind GET to`. To fix deprecation, simply switch the calls to "to" and "bind" in routing setup.
- Rename of `bind()` in `http4k-contract` to be `bindContract()`

### v2.17.2

- Added missing eclectic HTTP method. :)

### v2.17.1

- Added GZip filters to `http4k-core` to zip request and response bodies.

### v2.16.1

- Improved messages for `http4k-testing-hamkrest` matchers.

### v2.16.0

- Added `http4k-testing-hamkrest` which contains a set of Hamkrest matchers for Http4k objects.

### v2.15.0

- More features for `http4k-testing-webdriver`. Cookie support added.

### v2.14.0

- More features for `http4k-testing-webdriver`. We now support Form entry and submission.

### v2.13.0

- More features for `http4k-testing-webdriver`.

### v2.12.0

- Added `http4k-testing-webdriver` module, an ultralight Selenium WebDriver for **http4k** apps

### v2.11.3

- Fix #26 - GenerateDataClasses does not recurse into nested object trees

### v2.11.2

- Fix filter application on GroupRoutingHttpHandler to apply the filter when it is applied
  with `then(RoutingHttpHandler()`

### v2.11.1

- Fix static routes not defaulting to index.html when in root context

### v2.11.0

- Added `SunHttp` server implementation (for development use only)

### v2.10.1

- Fix cookie parsing when value contains '='

### v2.10.0

- Add method to set form values in the request

### v2.9.0

- Added PURGE HTTP method as it's used commonly by various caches.

### v2.8.1

- Repackage AWS classes for consistency with rest of project

### v2.7.1

- Alter AWS Auth filter creation. Now use `ClientFilters.AwsAuth`

### v2.7.0

- Add AWS module

### v2.6.0

- Newly created Zipkin traces are now populated onto incoming request in ServerFilters.

### v2.5.1

- Slight tweak to GSON auto-marshalling to allow for use of raw Arrays with auto-marshalling

### v2.5.0

- Add `Thymeleaf` templating support

### v2.4.0

- Add `Pebble` templating support

### v2.3.0

- Make Route a Router so we can nest them together.

### v2.2.1

- Remove excess "charset" from headers in Undertow.

### v2.2.0

- Rename  `by()` to `bind()` in routing for clarity.

### v2.1.2

- Fix for #24 - UriTemplate captures query parameters when the trailing path parameter is a regex.

### v2.1.0

- Added GSON full-auto functions to convert arbitrary objects to/from JSON.

### v2.0.5

- Fix #23. Contract now supports multi-part URL params (for hardcoded parts)

### v2.0.4

- Fix #22. Uri template does not parse out correct path params when URL starts with a path part.

### v2.0.3

- toString() implementations to aid debugging

### v2.0.1

- Readded missing default parameter for `newRequest()` on RouteSpec

### v2.0.0

- Breaking: Inversion of routing API. `GET to "/someUri"` is now `"/someUri" to GET` for consistency across the entire
  API.

### v1.33.1

- Reimplementation of `http4k-contract` API to match main routing API. Contracts are now nestable.

### v1.32.2

- Fix Filters being applied twice in `ContractRoutingHttpHandler`

### v1.32.1

- More work on `http4k-contract` contract API

### v1.31.0

- Rework `http4k-contract` routing to be mounted in the same way as other `RoutingHttpHandlers`

### v1.30.0

- Filters are now applied consistently to all Routers

### v1.29.0

- Tweak to DSL for defining StaticRouters

### v1.28.1

- Fix for #18: FollowRedirect will now work if location header includes charset information.

### v1.28.0

- New DSL for defining StaticRouters

### v1.27.0

- Merged StaticContent and StaticRouter and repackage of contract API into other packages

### v1.26.2

- Extend fix for #17 to request `Cookie` header.

### v1.26.1

- Fix for #17. Cookie can now parse a cookie without attributes and ending in semicolon.

### v1.26.0

- Added nestable Routers.
- Merging of Modules and Routers. `Router` is the new `Module`! `RouteModule` is now `ContractRouter`, so rename in code
  will be required.

### v1.25.1

- Fix for #15. OkHttp client handling of POSTs with no body.

### v1.25.0

- Can add custom mime types to Static Content
- GenerateDataClasses is capable of more complex object graphs

### v1.24.0

- Remove `HttpHandler.asServer` in favour of `HttpHandler.startServer` to avoid confusion.
- Introduce `Status.description()`.

### v1.23.0

- Netty sets content-length header.

### v1.22.2

- Fix for #12. Undertow not constructing response correctly.

### v1.22.0

- New module with Undertow.io support `http4k-server-undertow`
- Jackson implementation now ignores unknown properties in incoming messages
- Netty implementation tidied up

### v1.21.1

- Fix for #11. Netty implementation returns incorrect status codes.

### v1.21.0

- Add synonym methods for Lenses to aid readability. We now have `invoke(IN)/extract(IN)` and `invoke(IN, TARGET)
  /inject(IN, TARGET)

### v1.20.0

- `http4k-contracts`: Add option to change the route of the module description route

### v1.19.1

- `http4k-contracts`: Fix for contract module description routes not being authenticated via security filter

### v1.19.0

- `http4k-contracts`: Add `Swagger` module rendering with JSON schema models for messages.

### v1.18.0

- Add `nonEmptyString()` lens type to all request parts.

### v1.17.0

- General rework

### v1.16.0

- Further work on Path Lenses. They are now fully supported and consistent for both simple and contract routing
  scenarios.

### v1.15.0

- Path lenses are now bidirectional, so can be used to populate requests as well as bodies an headers etc.
- Routes can now create shell Requests for themselves, using `route.newRequest()`

### v1.14.0

- Body is now non-nullable (use `Body.EMPTY` instead)
- Rename methods `BodyLens` API for consistency and clarity. `required()` is
  now `toLens()`. `to()' binding method is now `of().

### v1.13.0

- New client module: `http4k-client-okhttp`

### v1.12.0

- Tidying

### v1.11.0

- Added option for Body content-negotiation to be strict or non-strict (the default). Always be strict in what you send,
  relaxed in what you will accept. :)

### v1.10.0

- Moved `Credentials` to `org.http4k.core` package.
- Add various filters, including `SetHostFrom` and `CatchAll`.

### v1.9.0

- Added `GenerateDataClasses` so you can generate Kotlin data classes from JSON messages.

### v1.8.0

- Added CORs support

### v1.7.0

- Added auto() to Jackson, so you can auto convert body objects into and out of Requests/Responses

### v1.6.0

- Added CachingFilters

### v1.5.0

- Removed static factory methods for Request/Response. They were confusing/incomplete and users can easily recreate them
  via extension functions.
- Merge `org.http4k.core.Body` and `org.http4k.lens.Body`.
- Add Request/Response message parsers.

### v1.4.0

- Turn Body into ByteBuffer wrapper rather than typealias. That should make .toString() behave as most people would
  expected.

### v1.3.0

- Removed non-mandatory parameters from Request and Response constructors. This is aid API clarity.
  and force users to use the API methods for properly constructing the objects.
- Regex Lens added.

### v1.0.0

- Initial major release.