Zalando Logbook Versions Save

An extensible Java library for HTTP request and response logging

3.8.0

4 weeks ago

Full Changelog

Fixed bugs:

URI in request log is missing slash character before path #1793
UnsupportedOperationException: null when using logbook-httpclient (4.0) #1734
No traceId for SpringCloudGateway request in SpringBoot 3.2.0 #1694

Closed issues:

Does setting the log level to debug enable log output? #1729
Eliminate superfluous filter execution #1713
Make Logbook interceptors fault tolerant #1702
Obfuscate json body fields using json path or json pointer #1641
Allow to obfuscate body #1366

Merged pull requests:

Bump io.projectreactor.netty:reactor-netty from 1.1.15 to 1.1.18 #1795 (dependabot[bot])
Add slash to path if it's not present #1794 (kasmarian)
Bump org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.2 #1792 (dependabot[bot])
Bump org.projectlombok:lombok from 1.18.30 to 1.18.32 #1790 (dependabot[bot])
Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 #1789 (dependabot[bot])
Bump org.springframework:spring-framework-bom from 6.1.4 to 6.1.5 #1787 (dependabot[bot])
Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre #1786 (dependabot[bot])
Bump com.squareup.okio:okio from 3.8.0 to 3.9.0 #1784 (dependabot[bot])
Bump kotlin.version from 1.9.21 to 1.9.23 #1780 (dependabot[bot])
Bump logback-classic.version from 1.5.2 to 1.5.3 #1779 (dependabot[bot])
Bump ktor.version from 2.3.8 to 2.3.9 #1778 (dependabot[bot])
Add a warning about logbook.write.max-body-size not preventing the buffering #1777 (kasmarian)
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.6 to 3.15.8 #1776 (dependabot[bot])
Bump logback-classic.version from 1.4.14 to 1.5.2 #1775 (dependabot[bot])
Bump org.wiremock:wiremock-standalone from 3.3.1 to 3.4.2 #1772 (dependabot[bot])
Bump spring-boot.version from 3.2.2 to 3.2.3 #1770 (dependabot[bot])
Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.1 to 3.5.2 #1769 (dependabot[bot])
Bump org.springframework:spring-framework-bom from 6.1.3 to 6.1.4 #1765 (dependabot[bot])
Bump io.netty:netty-bom from 4.1.106.Final to 4.1.107.Final #1764 (dependabot[bot])
Bump com.squareup.okio:okio from 3.7.0 to 3.8.0 #1763 (dependabot[bot])
Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #1762 (dependabot[bot])
Bump io.github.openfeign:feign-core from 13.2 to 13.2.1 #1761 (dependabot[bot])
Bump slf4j.version from 2.0.11 to 2.0.12 #1760 (dependabot[bot])
Bump junit.version from 5.10.1 to 5.10.2 #1758 (dependabot[bot])
Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 #1757 (dependabot[bot])
Refactor HTTP status codes with HttpStatus Enum #1756 (achhibi)
Bump ktor.version from 2.3.7 to 2.3.8 #1755 (dependabot[bot])
Improve InputStream and OutputStream copying #1753 (achhibi)
Bump io.github.openfeign:feign-core from 13.1 to 13.2 #1752 (dependabot[bot])
Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 #1751 (dependabot[bot])
Bump org.apache.httpcomponents.client5:httpclient5 from 5.3 to 5.3.1 #1750 (dependabot[bot])
Bump spring-boot.version from 3.2.1 to 3.2.2 #1749 (dependabot[bot])
Bump org.assertj:assertj-core from 3.24.2 to 3.25.1 #1748 (dependabot[bot])
Bump jackson.version from 2.16.0 to 2.16.1 #1747 (dependabot[bot])
Bump slf4j.version from 2.0.9 to 2.0.11 #1746 (dependabot[bot])
Check for Vulnerabilities via GHE Action #1744 (lukasniemeier-zalando)
Update MAINTAINERS #1743 (kasmarian)
Check for Vulnerabilities via GHE Action #1742 (lukasniemeier-zalando)
Bump io.netty:netty-bom from 4.1.101.Final to 4.1.106.Final #1741 (dependabot[bot])
Bump json-path to 2.9.0 to address CVE-2023-51074 #1740 (kasmarian)
Logbook fault tolerancy #1739 (kasmarian)
Request body only once in ChunkedSink #1737 (kasmarian)
Use writeTo() to buffer HttpEntity in httpclient #1736 (kasmarian)
Bump org.springframework:spring-framework-bom from 6.1.1 to 6.1.3 #1733 (dependabot[bot])
Bump io.projectreactor.netty:reactor-netty from 1.1.13 to 1.1.15 #1732 (dependabot[bot])
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.4 to 3.15.6 #1731 (dependabot[bot])
Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.5 #1730 (dependabot[bot])
Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.1 #1728 (dependabot[bot])
Bump spring-boot.version from 3.2.0 to 3.2.1 #1725 (dependabot[bot])
Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre #1723 (dependabot[bot])
Bump com.squareup.okio:okio from 3.6.0 to 3.7.0 #1722 (dependabot[bot])
Add custom log level support in LogstashLogbackSink constructor #1719 (achhibi)

3.7.2

4 months ago

Full Changelog

Fixed bugs:

Logbook 3.7.1 pulls in a whole bunch of test dependencies to the production classpath #1711
Logbook 3.7.0 pulls in Lombok as transitive dependency #1705

Merged pull requests:

Fix dependency scopes #1712 (msdousti)

3.7.1

5 months ago

Full Changelog

Closed issues:

Do not mention issues with "not-a-bug" label in release notes #1703

Merged pull requests:

Bump ktor.version from 2.3.6 to 2.3.7 #1709 (dependabot[bot])
Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.3 to 5.3 #1707 (dependabot[bot])
Fix the scope for "provided" dependencies #1706 (msdousti)
Exclude issues with no-a-bug label from release #1704 (kasmarian)

3.7.0

5 months ago

Full Changelog

Fixed bugs:

UnsupportedOperationException in LogbookHttpRequestInterceptor with Spring Boot 3.2.0 and Apache Http Client 5 #1693
UnsupportedClassVersionError when running on Java 8 and JAX-RS 2.X #1566

Closed issues:

Spring boot 3 reactive with micrometer - no traceId in logs for service calls and webclient #1513
Tracing not working for LogbookClientHandler #1512

Merged pull requests:

Use writeTo() to buffer HttpEntity in httpclient5 #1701 (kasmarian)
Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.2 to 5.2.3 #1700 (dependabot[bot])
Bump ch.qos.logback:logback-classic from 1.4.11 to 1.4.14 #1699 (dependabot[bot])
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 #1698 (dependabot[bot])
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.3 to 3.15.4 #1696 (dependabot[bot])
Bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0 #1689 (dependabot[bot])
Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.2.2 #1688 (dependabot[bot])
Bump kotlin.version from 1.9.20 to 1.9.21 #1687 (dependabot[bot])
Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 #1684 (dependabot[bot])
Bump org.springframework.security:spring-security-web from 6.1.5 to 6.2.0 #1683 (dependabot[bot])
Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 #1682 (dependabot[bot])
Bump org.springframework:spring-framework-bom from 6.0.13 to 6.1.0 #1681 (dependabot[bot])
Bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 #1680 (dependabot[bot])
Bump jackson.version from 2.15.3 to 2.16.0 #1679 (dependabot[bot])
Bump io.github.openfeign:feign-core from 13.0 to 13.1 #1676 (dependabot[bot])
Bump io.projectreactor.netty:reactor-netty from 1.1.12 to 1.1.13 #1675 (dependabot[bot])
Add support for traditional JAX-RS 2.x #1674 (msdousti)
Call close() on closeable ClientHttpResponse within BufferingClientHttpResponseWrapper.java #1668 (luc-leclerc)
Bump io.netty:netty-bom from 4.1.100.Final to 4.1.101.Final #1667 (dependabot[bot])
Bump ktor.version from 2.3.5 to 2.3.6 #1666 (dependabot[bot])
Bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.2 #1664 (dependabot[bot])
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.2 #1663 (dependabot[bot])
Bump junit.version from 5.10.0 to 5.10.1 #1662 (dependabot[bot])
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.2 to 3.15.3 #1661 (dependabot[bot])
Bump io.github.openfeign:feign-core from 12.5 to 13.0 #1660 (dependabot[bot])
Bump kotlin.version from 1.9.10 to 1.9.20 #1658 (dependabot[bot])
Bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 #1657 (dependabot[bot])

3.6.0

6 months ago

Full Changelog

Merged pull requests:

Fix dependency check issues #1656 (msdousti)
Bump spring-boot.version from 3.1.4 to 3.1.5 #1654 (dependabot[bot])
Bump com.squareup.okhttp3:okhttp from 4.11.0 to 4.12.0 #1651 (dependabot[bot])
Bump org.springframework.security:spring-security-web from 6.1.4 to 6.1.5 #1650 (dependabot[bot])
Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 #1649 (dependabot[bot])
Bump org.springframework:spring-framework-bom from 6.0.12 to 6.0.13 #1647 (dependabot[bot])
Bump jackson.version from 2.15.2 to 2.15.3 #1646 (dependabot[bot])
Bump io.projectreactor.netty:reactor-netty from 1.1.11 to 1.1.12 #1645 (dependabot[bot])
Bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre #1644 (dependabot[bot])
Bump com.squareup.okio:okio from 3.5.0 to 3.6.0 #1640 (dependabot[bot])

3.5.0

7 months ago

Full Changelog

Closed issues:

Question: how to propagate Sleuth trace/span ids to logbook Sink.write #1625
Unresolvable Spring properties #1574
Can we have filter to exclude by Http method name #1556
Extract client identifier from authorization token #381

Merged pull requests:

Bump io.netty:netty-bom from 4.1.98.Final to 4.1.99.Final #1639 (dependabot[bot])
Fix hints from configuration-metadata.json #1638 (kasmarian)
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.1 to 3.15.2 #1637 (dependabot[bot])
Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.0 to 3.5.1 #1636 (dependabot[bot])
Bump io.netty:netty-bom from 4.1.97.Final to 4.1.98.Final #1635 (dependabot[bot])
Bump spring-boot.version from 3.1.3 to 3.1.4 #1634 (dependabot[bot])
Bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 #1633 (dependabot[bot])
Bump org.projectlombok:lombok from 1.18.28 to 1.18.30 #1632 (dependabot[bot])
Bump org.springframework.security:spring-security-web from 6.1.3 to 6.1.4 #1631 (dependabot[bot])
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0 #1630 (dependabot[bot])
Bump org.springframework:spring-framework-bom from 6.0.11 to 6.0.12 #1629 (dependabot[bot])
Bump io.projectreactor.netty:reactor-netty from 1.1.10 to 1.1.11 #1628 (dependabot[bot])
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.0 to 3.4.1 #1626 (dependabot[bot])
Bump slf4j.version from 2.0.7 to 2.0.9 #1623 (dependabot[bot])
Bump ktor.version from 2.3.3 to 2.3.4 #1622 (dependabot[bot])
Bump io.github.openfeign:feign-core from 12.4 to 12.5 #1621 (dependabot[bot])
Add Method predicates #1606 (kasmarian)
Extract subject claim from JWT token #1589 (msdousti)

3.4.0

8 months ago

Full Changelog

Fixed bugs:

Changelog Contains Issues Closed Due to Inactivity #1597
"logbook.write.max-body-size" not working when creating own BodyFilter that includes defaultValue() #1202

Closed issues:

Be Compliant with Zalando Open Source Rules #1596
Springboot configuration file prompt: Cannot resolve configuration property 'logbook.include' #1506
Add a property to define fields in body to be obfuscated #1266

Merged pull requests:

Suppress CVE-2023-4586 #1624 (kasmarian)
Bring back default constructor to LogbookHttpResponseInterceptor #1620 (kasmarian)
Bump spring-boot.version from 3.1.2 to 3.1.3 #1618 (dependabot[bot])
Bump io.netty:netty-bom from 4.1.96.Final to 4.1.97.Final #1617 (dependabot[bot])
Bump kotlin.version from 1.9.0 to 1.9.10 #1616 (dependabot[bot])
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.4.0 #1615 (dependabot[bot])
Bump org.springframework.security:spring-security-web from 6.1.2 to 6.1.3 #1614 (dependabot[bot])
Bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 #1613 (dependabot[bot])
Prevent Pull Request Self Approvals #1612 (lukasniemeier-zalando)
Bump io.projectreactor.netty:reactor-netty from 1.1.9 to 1.1.10 #1611 (dependabot[bot])
Bump ch.qos.logback:logback-classic from 1.4.9 to 1.4.11 #1609 (dependabot[bot])
ensure truncation body filter is always last one #1608 (kasmarian)
Bump ch.qos.logback:logback-classic from 1.4.8 to 1.4.9 #1605 (dependabot[bot])
Bump jmh.version from 1.36 to 1.37 #1604 (dependabot[bot])
Bump com.squareup.okio:okio from 3.4.0 to 3.5.0 #1603 (dependabot[bot])
Bump ktor.version from 2.3.2 to 2.3.3 #1602 (dependabot[bot])
suppress not applicable CVE #1601 (lukasniemeier-zalando)
exclude stale issues from changelog #1600 (lukasniemeier-zalando)
Bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre #1599 (dependabot[bot])
Add repository map link to README.md #1598 (alexkarezin)
Update Release Script #1595 (lukasniemeier-zalando)
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 #1594 (dependabot[bot])
Bump io.netty:netty-bom from 4.1.95.Final to 4.1.96.Final #1593 (dependabot[bot])
Define json body obfuscation fields via configuration #1592 (kasmarian)

3.3.0

9 months ago

What's Changed

log request/response without body for POST (#1571) by @MatthiasDrews in https://github.com/zalando/logbook/pull/1572
Bump spring-security-web from 6.1.1 to 6.1.2 by @dependabot in https://github.com/zalando/logbook/pull/1584
log request/response for rejected requests by @MatthiasDrews in https://github.com/zalando/logbook/pull/1588
Bump spring-boot.version from 3.1.1 to 3.1.2 by @dependabot in https://github.com/zalando/logbook/pull/1585
Bump io.netty:netty-bom from 4.1.94.Final to 4.1.95.Final by @dependabot in https://github.com/zalando/logbook/pull/1586
Httpclient gzipped response handling by @lcostela in https://github.com/zalando/logbook/pull/1505
Bump junit.version from 5.9.3 to 5.10.0 by @dependabot in https://github.com/zalando/logbook/pull/1590

New Contributors

@MatthiasDrews made their first contribution in https://github.com/zalando/logbook/pull/1572
@lcostela made their first contribution in https://github.com/zalando/logbook/pull/1505

Full Changelog: https://github.com/zalando/logbook/compare/3.2.0...3.3.0

3.2.0

9 months ago

3.1.0

10 months ago