This release contains bugfixes and several dependency updates.

Bugfixes

• Add support for IAM Authorizers in combination with 2.0 payload (#780, #815) - thanks to @jonife
• Fix web context initialization during Snapstart (#805, #814) - thanks to @olegz

Dependencies (only mentioning major dependencies)

• Update Spring dependencies (framework to 6.1.5, security to 6.2.3, boot to 3.2.4)
• Update Jersey to 3.1.6
• Update spring-cloud-function-serverless-web to 4.1.1
• Update Log4J to 2.23.1
• Update Jackson to 2.17.0
• Update maven-shade-plugin to 3.5.2
• Update maven-assembly-plugin to 3.7.0
• Update com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.0 to 4.8.3.1
• Update commons-codec:commons-codec from 1.16.0 to 1.16.1
• Update com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0
• Update org.mockito:mockito-core from 5.10.0 to 5.11.0
• Update jakarta.activation:jakarta.activation-api from 2.1.2 to 2.1.3
• Update org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.1
• Update org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0
• Update org.apache.maven.plugins:maven-gpg-plugin from 3.2.1 to 3.2.2
• Update org.owasp:dependency-check-maven from 9.0.9 to 9.1.0
• Update org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12
• Update com.github.spotbugs:spotbugs-annotations from 4.8.3 to 4.8.4
• Update org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

After two milestones we're finally releasing the next major version 2.0.0 with support for Spring Framework 6.x, Spring Boot 3.x and JAX-RS/ Jersey 3.x.

Features

• GraalVM native image support for Spring Web workloads (#739, #760) - thanks to @olegz (and @maschnetwork for improving the related sample)
• Added SpringBoot3-GraphQL sample (#751) - thanks to @mbfreder
• Use of Kong as alternative API-Gateway - thanks to @seshubaws

Bugfixes

• Fix typos in FilterChainManager (#625) - thanks to @2012160085
• Modify algorithm for parameter transformation logic (#616) - thanks to @valerena
• Deprecate asyncInit & account for other initialization types (#659) - thanks to @richarddd
• Fix multipart files processing when Array of files with same fieldName is sent in request (#675) - thanks to @mbfreder
• Fix Incorrect ServerName with ALB (#684) - thanks to @mbfreder
• handle Spring's ErrorResponse in separate default ExceptionHandlers (#691)
• Changed Maven version range to resolve both SNAPSHOTs and released versions for samples (#750) - thanks to @Neves97
• Fix Asynchronous Dispatch Logic in AwsAsyncContext with Spring's DispatcherServlet (#631) - thanks to @2012160085
• Fix request parameter parsing (#754, #755) - thanks to @olegz

Dependencies (only mentioning major dependencies)

• Update SLF4J to 2.0.12
• Update Jackson dependency to 2.16.1
• Update Spring dependencies (framework to 6.1.3, security to 6.2.1, boot to 3.2.2)
• Update Jersey dependency to 3.1.5

Release 1.9.4 is a maintenance release. Main development happens in the main branch for the 2.x versions therefore releases in 1.x branch contain only dependency and security related updates.

Fixes

• Modify version range for archetypes and samples to avoid 2.x release is picked up for 1.x

Dependencies

• Update Spring dependencies (framework to 5.3.31, security to 5.7.11, boot to 2.7.18)
• Update Jersey dependency to 2.41
• Update Struts dependency to 6.3.0.2
• Update Jackson dependency to 2.16.1
• Update aws-lambda-java-core dependency to 1.2.3

Release 2.0.0-M2 is the second milestone release for our next major release 2.0.0.

Features

• Re-enabled multi-part upload functionality using Commons Fileupload 2
• Add implementation of delegating RequestStreamHandler (#603) - thanks to @olegz

Bugfixes

• Ensure listeners are notified after dispatch (#577, #588) - thanks to @olegz
• as per Servlet spec getSession() creates a session if none exists (see https://stackoverflow.com/a/75471488/3156607)

Dependencies (only mentioning major dependencies)

• Update archetypes to use JUnit 5 (#561) thanks to @salmansharifov
• Update Jackson dependency to 2.15.2
• Update Spring dependencies (framework to 6.0.11, security to 6.1.2, boot to 3.1.2)

Release 2.0.0-M1 is the first milestone release for our next major release 2.0.0 and contains several breaking changes. That's why we will support both 1.x and 2.x for some time. The following table provides an overview about the supported specs and frameworks:

Version	Branch	Java Enterprise support	Spring versions	JAX-RS/ Jersey version	Struts support	Spark support
1.x	1.x	Java EE (javax.*)	5.x (Boot 2.x)	2.x	:white_check_mark:	:white_check_mark:
2.x	main	Jakarta EE (jakarta.*)	6.x (Boot 3.x)	3.x	:x:	:x:

Please note that multipart upload functionality is currently not supported as we are waiting for a release of Apache Commons Fileupload 2 (see https://issues.apache.org/jira/browse/FILEUPLOAD-309).

Features

• Jakarta EE, Spring 6.x and Spring Boot 3.x support #477, #478, #487, #510, #549 - thanks to @farazhv, @mbfreder and @valerena for contributing

Improvements

• reduce number of transitive dependencies/ move test-classes to separate test-jar
• move to Apache HTTP Client 5 for testing

Bugfixes

• content-type resolution - we return null instead of application/octet-stream if content type cannot be resolved (as per servlet-api docs), a fix to make probeContentType work in Lambda execution environment is being worked on by the Lambda service team #504 - thanks to @Artur- for contributing
• Servlet class loaded with the wrong class loader #506 - thanks to @Artur- for contributing

Dependencies (only mentioning major dependencies)

• Update Jersey dependency to 3.1.2
• Update Jackson dependency to 2.15.1
• Update Spring dependencies (framework to 6.0.9, security to 6.1.0, boot to 3.1.0)

Release 1.9.3 contains one fix and several dependency updates.

Fixes

• AwsProxyHttpServletRequest#getLocale incorrect for locales with country subtag (#511, #512) - thanks to @kerkhofsd for contributing

Dependencies

• Update Spring dependencies (framework to 5.3.27, security to 5.7.8, boot to 2.7.11)
• Update Apache HttpComponents dependencies (httpmime, httpclient to 4.5.14, httpcore to 4.4.16)
• Update Jackson dependency to 2.15.0

Release 1.9.2 contains two fixes and several dependency updates.

Fixes

• Dispatch to the given servlet when using getNamedDispatcher (#502) - thanks to @Artur- for contributing
• Write resources using the charset defined in a Content-Type header (#501) - thanks to @Artur- for contributing

Dependencies

• Update OWASP dependency check to 8.1.2
• Update JUnit to 5.9.2
• Update Spring dependencies (framework to 5.3.26, security to 5.7.7, boot to 2.7.10)
• Update Jackson to 2.14.2
• Update Commons Fileupload to 1.5
• Update SLF4J to 2.0.7
• Update Struts to 6.1.2
• Update Mockito to 4.11.0
• Update Jersey to 2.39.1 along with JAX-RS API to 2.1.1

Release 1.9.1 contains a few fixes, one improvement and several dependency updates.

Fixes

• Fix broken struts pet-store sample project (#479) - thanks to @jogep for contributing
• Corrected Spring Boot 2 sample template (#484)
• Fixing NullPointerException in case of non defined statusCode (#497) - thanks to @anmolk6 for contributing

Improvements

• Add ALB Context to API GW Payload V2 (#489) - thanks to @driverpt for contributing

Dependencies

• Update Jersey dependencies to 2.37
• Update Jackson databind version to 2.14.1 (CVE-2022-42003)
• Explicitly set version for transitive commons-text dependency (CVE-2022-42889)
• Explicitly add more recent commons-io version (#488)
• Update Spring dependencies (framework to 5.3.24, security to 5.7.5, boot to 2.7.6)
• Update Struts dependency to 6.1.1
• Update lambda-java-core dependency to 1.2.2
• Update SLF4J to 2.0.6
• Update Mockito dependency to 4.9.0
• Update some Maven plugins to allow build with JDK17

Release 1.9 contains several improvements and dependency updates.

In case you are using Struts, please note that you need to use a different artifactId (aws-serverless-java-container-struts) starting with this release.

Improvements

• add single value headers and query string params (#315) - thanks to @sigpwned for contributing
• docs: Documenting use of suppress warnings for path traversal in security utils (#473)
• samples/ archetypes are now using java11 (instead of java8) runtime

Dependencies

• Update to the new Struts 6 major version (#471) - thanks to @jogep for contributing
• Update Spring dependency versions (framework to 5.3.22, security to 5.7.3, boot to 2.7.3)
• Update Spark version to 2.9.4
• Update Jackson version to 2.13.4
• Update SLF4J version to 2.0.2
• Update Log4J version to 2.19.0
• Update Jersey version to 2.36

Release 1.8.2 contains a fix and dependency updates.

Fixes

• AwsHttpApiV2ProxyHttpServletRequest.headersMapToMultiValue truncates the user-agent (#464, #465) - thanks to @bqader for contributing

Dependencies

• Update Spring dependencies (framework to 5.3.20, security to 5.6.5, boot to 2.6.8)
• Update Jackson version to 2.13.3