The Community Maintained High Velocity Web Framework For Java and Scala.
The Play Team is happy to announce the release of Play 2.8.18.
This release includes a fix for #10590 to avoid StackOverflowErrors when sending multipart/form-data
requests with many fields as payload. We recommend upgrading as soon as possible.
Following pull requests got merged for this release:
BodyPartParser
of Multipart
in order to avoid StackOverflowError easily by @yousukettoFor more details see the full list of changes and the 2.8.18 milestone.
If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor. You can also individually sponsor the project by becoming a backer.
Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors. Special thanks to all code contributors who helped with this particular release (they are listed below)!
The Play Team is happy to announce the release of Play 2.8.17.
Following pull requests got merged for this release:
For more details see the full list of changes and the 2.8.17 milestone.
If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor. You can also individually sponsor the project by becoming a backer.
Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors. Special thanks to all code contributors who helped with this particular release (they are listed below)!
The Play Team is happy to announce the release of Play 2.8.16.
The following are the relevant changes of this bugfix release:
'bundleresource'
protocol, when checking URLs. #11108The following pull requests got merged for this release:
v2
by @ihostageFor more details see the full list of changes and the 2.8.16 milestone.
If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor. You can also individually sponsor the project by becoming a backer.
Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors. Special thanks to all code contributors who helped with this particular release (they are listed below)!
Something you want to talk about for this release? Join the discussion
The Play Team is happy to announce the release of Play 2.8.15.
The following are the relevant changes of this bugfix release.
CVE-2022-22965
)This RCE vulnerability might affect Play Java users that deploy their applications as a war file (e.g. in Tomcat). More details can be found here: A note on Spring4Shell for Play Java users
Please see https://github.com/playframework/playframework/discussions/11222
You should now be able to run your Play applications with Java 17, but to do so, you have to make some adjustments.
:warning: Even though people report running their Play 2.8.15+ apps on Java 17 without issues, support for Java 17 is experimental. :warning: :warning: Make sure to test your application thoroughly before putting it into production. :warning:
// In your build.sbt add:
libraryDependencies ++= Seq(
"com.google.inject" % "guice" % "5.1.0",
"com.google.inject.extensions" % "guice-assistedinject" % "5.1.0"
)
typetools
(see #10055 and #10814): // In your build.sbt add:
libraryDependencies += "net.jodah" % "typetools" % "0.6.3"
jnotify
for the FileWatchService
(like in this removed test)OneServerPerTestWithComponents
or GuiceOneServerPerTest
(see #11209): // In your build.sbt add:
Test / javaOptions ++= Seq(
"--add-exports=java.base/sun.security.x509=ALL-UNNAMED",
"--add-opens=java.base/sun.security.ssl=ALL-UNNAMED"
)
// Test / fork := true // This is the default anyway, just a reminder in case you changed it to false before
If you run into any other issues please let us know by opening a bug report, thanks!
-XX:MaxPermSize
, breaks on Java 17 by @mkurzPOST
by @mkurzFor more details see the full list of changes and the 2.8.15 milestone.
If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor. You can also individually sponsor the project by becoming a backer.
Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors. Special thanks to all code contributors who helped with this particular release (they are listed below)!
The Play Team is happy to announce the release of Play 2.8.13.
Following pull requests got merged for this release:
For more details see the full list of changes and the 2.8.13 milestone.
If you find Play useful for work, please consider asking your company to support this Open Source project by becoming a sponsor. You can also individually sponsor the project by becoming a backer.
Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play is only possible due to the help we had from amazing contributors. Special thanks to all code contributors who helped with this particular release (they are listed below)!
The Play Team is happy to announce the releases of Play 2.8.11.
This release brings in a new version of Akka Http including security updates.
Following pull requests got merged for this release:
###replace:
tag that led to incorrect docs #10789 by @arid-mangoss
For more details see the full list of changes and the 2.8.11 milestone.
Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play is only possible due to the help we had from amazing contributors.
If you find Play useful for work, please consider to support this Open Source project by becoming a backer or premium sponsor. You can donate to our Open Collective here.
Special thanks to the following contributors who helped with this release:
@FuriousTurtle, @PromanSEW, @TrevorNathan, @arid-mangoss, @ennru, @gmethvin, @ignasi35, @johnduffell, @kaseken, @mergify, @mergify[bot], @mkurz, @octonato, @rstento and @scala-steward
Full Changelog: https://github.com/playframework/playframework/compare/2.8.8...2.8.11
The Play Team is happy to announce the releases of Play 2.8.8.
The following are the relevant changes of this bugfix release:
Following pull requests got merged for this release:
For more details see the full list of changes and the 2.8.8 milestone.
Special thanks to @mkurz for his continued contributions and insight to push Play forward, and, in this release in particular, for the extra work to make the release come true.
Also, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play is only possible due to the help we had from amazing contributors.
Thanks to Lightbend for their continued sponsorship of the Play core team's efforts. Lightbend offers commercial support for Play.
Special thanks to the following contributors who helped with this release:
@Captain1653, @asazernik, @benwaffle, @dwijnand, @eatkins, @gokhanoner, @helllamer, @ignasi35, @jtjeferreira, @marcospereira, @mkurz, @octonato, @pazvanti, @pschichtel, @raboof and @xuwei-k
The Play Team is happy to announce the releases of Play 2.8.7 and Play 2.7.9.
As we found a regression just after building the 2.8.6 and 2.7.8 releases, we followed up on those without announcing them.
The following are the relevant changes of this bugfix release:
For more details see the full list of changes and the 2.7.8 and 2.7.9 milestones.
To make the form binding size limit configurable, some sources may need adaptation to make the FormBinding
implicits available (see Parser maxMemoryBuffer limits).
Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play is only possible due to the help we had from amazing contributors.
Thanks to Lightbend for their continued sponsorship of the Play core team's efforts. Lightbend offers commercial support for Play.
The Play Team is happy to announce the releases of Play 2.8.7 and Play 2.7.9.
As we found a regression just after building the 2.8.6 and 2.7.8 releases, we followed up on those without announcing them.
The following are the relevant changes of this bugfix release:
For more details see the full list of changes and the 2.8.6 and 2.8.7 milestones.
To make the form binding size limit configurable, some sources may need adaptation to make the FormBinding
implicits available (see Parser maxMemoryBuffer limits).
Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play is only possible due to the help we had from amazing contributors.
Thanks to Lightbend for their continued sponsorship of the Play core team's efforts. Lightbend offers commercial support for Play.
The Play Team is proud to announce the release of Play 2.8.5.
The following is the main change of this bugfix release:
Json.toJson
is serializing private fields by default for Jackson (https://github.com/playframework/playframework/pull/10523). This is potentially a data leak for users handling sensitive data on private
fields of classes serialized as JSON.Other improvements in this release:
FakeKeyStore
(https://github.com/playframework/playframework/pull/10487)For more details see the full list of changes and the 2.8.5 milestone.
Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play 2.8.5 is only possible due to the help we had from amazing contributors.
Thanks to Lightbend for their continued sponsorship of the Play core team's efforts. Lightbend offers commercial support for Play.