Update dependency vapor/vapor to from: "4.110.0"

[renovate]

This PR contains the following updates:

Package	Update	Change
vapor/vapor	minor	from: "4.83.1" -> from: "4.110.0"

---

Release Notes

vapor/vapor (vapor/vapor)

v4.110.0: - Better compatibility with Swift Testing

Compare Source

What's Changed

Better compatibility with Swift Testing by @​MahdiBM in #​3257

Introduces a new VaporTesting module for testing with better compatibility with Swift Testing that removes usages of XCTest.

Use the new testing() extension on Application to write your tests. E.g.:

try await app.testing().test(.POST, "/decode") { req in
  try req.content.encode(MyContent())
} afterResponse: { res in
  #expect(res.status == .ok)
  expectContains(res.body.string, "Hello World!")
}

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.109.0...4.110.0

v4.109.0: - Adds swift-distributed-tracing and TracingMiddleware

Compare Source

What's Changed

Adds swift-distributed-tracing and TracingMiddleware by @​NeedleInAJayStack in #​3253

This adds support for swift-distributed-tracing and adds a TracingMiddleware type. This type will create a span for each wrapped request, and apply a standard set of span attributes according to OTEL standards.

For background, see: vapor/vapor#3033

Reviewers

Thanks to the reviewers for their help:

• @​ktoso

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.108.0...4.109.0

v4.108.0: - Make Services in Vapor Usable

Compare Source

What's Changed

Make Services in Vapor Usable by @​0xTim in #​2901

This adds real support to Vapor to make it easy to integrate different services that can be tested.

For example, if you have a service defined as:

protocol MyService {
    func `for`(_ request: Request) -> MyService
    func doSomething() -> String
}

You may then have a real implementation:

import Vapor

struct MyRealService: MyService {
    let logger: Logger
    let eventLoop: EventLoop
    
    func `for`(_ request: Vapor.Request) -> MyService {
        return MyRealService(logger: request.logger, eventLoop: request.eventLoop)
    }
    
    func doSomething() -> String {
        return "Tada"
    }
    
}

This is a very contrived example, but shows a service that needs a Logger and EventLoop - things that are normally tied to specific requests. Doing this in a safe and testable way involves a lot of boilerplate. This moves the boilerplate into Vapor to make it easier to do.

extension Application.Services {
    var myService: Application.Service<MyService> {
        .init(app…

…

Reviewers

Thanks to the reviewers for their help:

• @​Joannis
• @​dimitribouniol
• @​Andrewangeta

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.107.0...4.108.0

v4.107.0: - Fix Concurrency Warnings and Deprecations

Compare Source

What's Changed

Fix Concurrency Warnings and Deprecations by @​0xTim in #​3265

• Fix some deprecation warnings caused by HTTPMethod.name being deprecated (not sure why this wasn’t caught during the deprecation)
• Fix sendable warning related to HTTPClient.Response not being marked as Sendable - there’s no point moving over to the async APIs for now
• Fix more Sendable warnings related to .get() and friends requiring values to be Sendable - see https://github.com/apple/swift-nio/releases/tag/2.76.0
• As a result, View and Content now have sendability requirements

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.7...4.107.0

v4.106.7: - Fix typo in ContenConfiguration error

Compare Source

What's Changed

Fix typo in ContenConfiguration error by @​WilliamFernsV3 in #​3259

Missing single quote in print statement
Added missing closing single quote for print statement.

New Contributor

• @​WilliamFernsV3 made their first contribution in #​3259 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.6...4.106.7

v4.106.6: - Pass the method, url, and user agent from the ErrorMiddleware to the logger in the metadata.

Compare Source

What's Changed

Pass the method, url, and user agent from the ErrorMiddleware to the logger in the metadata. by @​maciejtrybilo in #​3233

The ErrorMiddleware reports an error to the logger of the request. Sometimes it might be useful to know the endpoint that failed.

This PR adds the method, url, and user agent of the request in the metadata of the report.

Reviewers

Thanks to the reviewers for their help:

• @​petrpavlik
• @​ptoffy

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.5...4.106.6

v4.106.5: - Fix .noSignalReceived body streaming crash

Compare Source

What's Changed

Fix .noSignalReceived body streaming crash by @​ptoffy in #​3232

Update SwiftNIO’s minimum version to fix the preconditionFailure being thrown in AsyncSequenceProducerDelegate

Reviewers

Thanks to the reviewers for their help:

• @​dimitribouniol

This patch was released by @​ptoffy

Full Changelog: vapor/vapor@4.106.4...4.106.5

v4.106.4: - Use application's logger in InMemory tester

Compare Source

What's Changed

Use application's logger in InMemory tester by @​sidepelican in #​3239

Usually, a copy of the application’s Logger is passed to the Request. However, for the InMemory part of XCTApplicationTester, it seems the default Logger is used.
This PR fix the behavior so that the application’s Logger is used instead of the default one.

Reviewers

Thanks to the reviewers for their help:

• @​Naveen-C-Ramachandrappa

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.3...4.106.4

v4.106.3: - Adds JPEG XL (JXL) and AVIF HTTPMediaTypes

Compare Source

What's Changed

Adds JPEG XL (JXL) and AVIF HTTPMediaTypes by @​vamsii777 in #​3250

Add additional image types:

app.post("upload") { req in
 guard [.jpeg, .png, .tiff, .webp, .jxl, .avif].contains(req.content.contentType) else {
    throw Abort(.unsupportedMediaType)
   }
  // ...
}

New Contributor

• @​vamsii777 made their first contribution in #​3250 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.2...4.106.3

v4.106.2: - fix HTTPMethod.RAW(value: String) string representation

Compare Source

What's Changed

fix HTTPMethod.RAW(value: String) string representation by @​RandomHashTags in #​3249

Should fix #​3248

New Contributor

• @​RandomHashTags made their first contribution in #​3249 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.1...4.106.2

v4.106.1: - Omit ACAO header instead of empty value

Compare Source

What's Changed

Omit ACAO header instead of empty value by @​grahamburgsma in #​3243

For context, Vapor currently sends an empty Access-Control-Allow-Origin (ACAO) header when the origin does not match or is set to none.

We recently had a pentest done against our Vapor server and the tester reported the following regarding the empty ACAO header:

When the header is empty, browsers might reject the request without detailed error messages, making it harder for developers to debug or even realize there is a problem. This lack of transparency can lead to extended periods of vulnerability before the issue is discovered.

Looking at some other sources as well, an empty header doesn’t appear to be a valid value and so could result in unexpected behaviour.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#the_http_response_headers
https://fetch.spec.whatwg.org/#http-access-control-allow-origin

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.106.0...4.106.1

v4.106.0: - Drop Support for Swift 5.8

Compare Source

What's Changed

Drop Support for Swift 5.8 by @​0xTim in #​3240

• Removes support for Swift 5.8, making 5.9 the lowest supported version
• Updates Swift Crypto dependency to accept 4.0.0 that is about to land
• Fixes up some warnings in Swift 6
• Removes code paths from old Swift versions

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.105.2...4.106.0

v4.105.2: - Raise error when the data expected an array but not parsed as array

Compare Source

What's Changed

Raise error when the data expected an array but not parsed as array by @​sidepelican in #​3222

URLEncodedFormDecoder fails silently without throwing an error when attempting to decode data in the following pattern: array[0]=0&array[1]=1&array[3]=3. Now it is decoded as an empty array.
Typically, a decoder throws an error when data cannot be parsed as the expected structure, so I propose modifying the decoder to throw an error in this case as well.

Reviewers

Thanks to the reviewers for their help:

• @​Naveen-C-Ramachandrappa
• @​ptoffy

This patch was released by @​ptoffy

Full Changelog: vapor/vapor@4.105.1...4.105.2

v4.105.1: - Throw an error if unkeyed container is at end

Compare Source

What's Changed

Throw an error if unkeyed container is at end by @​supersonicbyte in #​3226

Throwing an error if the unkeyed container is at end while decoding query params fixes the crash mentioned with this issue:
vapor/vapor#3217

The error being thrown is DecodingError.valueNotFound and it’s matching the error thrown by JSONDecoder.

New Contributor

• @​supersonicbyte made their first contribution in #​3226 🎉

Reviewers

Thanks to the reviewers for their help:

• @​ptoffy
• @​Naveen-C-Ramachandrappa

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.105.0...4.105.1

v4.105.0: - Support Swift 6

Compare Source

What's Changed

Support Swift 6 by @​0xTim in #​3225

• Drop support for Swift 5.7
• Fix warnings in Vapor with latest Swift 6 changes
• Fix tests on Linux nightlies

Reviewers

Thanks to the reviewers for their help:

• @​dimitribouniol
• @​ptoffy

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.104.0...4.105.0

v4.104.0: - Conditional Content Response Compression

Compare Source

What's Changed

Conditional Content Response Compression by @​dimitribouniol in #​3215

Added support for conditionally compressing responses based on content type or marker headers. This is necessary because some resource types, such as images, don’t compress much, and end up maxing out CPU time on the thread and sometimes block the entire channel while they compress. This results in pipelined resources taking a long time to load even on fast connections.

This change comes with three knobs to control this:

• A global disabled/enabled by default state for the entire server.
• Allow and disallow lists of content types for automatic configurations.
• A marker header for explicitly configuring certain requests or routes to compress or not.

Notably, since the response compression handler now takes a predicate, it is always installed, and the predicate statelessly determines if a response should be compressed based on the server configuration:

• If a response compression configuration was never set, this continues to be a no-op and no compression will occur, though routes can now explicitly enable it as needed.
  …

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.103.2...4.104.0

v4.103.2: - Use Configured JSONEncoder in ErrorMiddleware

Compare Source

What's Changed

Use Configured JSONEncoder in ErrorMiddleware by @​0xTim in #​3224

Use the prescribed content encoder for the body of ErrorMiddleware instead of a contained JSONEncoder that can’t be overridden.

You can set the encoder with

ContentConfiguration.global.use(encoder: myCustomEncoder, for: .json)

Resolves #​3218

Reviewers

Thanks to the reviewers for their help:

• @​dimitribouniol

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.103.1...4.103.2

v4.103.1: - fix: support capital letters in the domain part of email validation

Compare Source

What's Changed

fix: support capital letters in the domain part of email validation by @​Austinpayne in #​3211

Fixes #​2889

New Contributor

• @​Austinpayne made their first contribution in #​3211 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.103.0...4.103.1

v4.103.0: - HTTPHeaders.LastModified Public Initializer

Compare Source

What's Changed

HTTPHeaders.LastModified Public Initializer by @​dimitribouniol in #​3216

Added a public initializer for HTTPHeaders.LastModified, and updated the value property to be readwrite, which would prevent needing to roll your own formatter and header access in application code.

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.102.1...4.103.0

v4.102.1: - Incorrect HTTPMediaType/parameters Documentation Formatting.

Compare Source

What's Changed

Incorrect HTTPMediaType/parameters Documentation Formatting. by @​dimitribouniol in #​3214

Fixed an issue where docs for HTTPMediaType/parameters were incorrectly formatted. This was because parameters was being interpreted as the argument list, and wouldn’t render.

Before

…

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.102.0...4.102.1

v4.102.0: - Add Sendable conformance to XCTApplicationTester, XCTHTTPRequest/Response, and some others

Compare Source

What's Changed

Add Sendable conformance to XCTApplicationTester, XCTHTTPRequest/Response, and some others by @​gwynne in #​3208

This prevents compiler errors in the Swift 6 language mode for test methods isolated to global actors (especially @MainActor). Also adds Sendable conformance to XCTHTTPRequest and XCTHTTPResponse, for much the same reason.

Also fixes lots and lots of various Sendable warnings in Vapor in general, including adding Sendable conformance to ContentConfiguration, ContentEncoder, ContentDecoder, URLQueryEncoder, URLQueryDecoder, URLEncodedFormEncoder, and URLEncodedFormDecoder.

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.101.4...4.102.0

v4.101.4: - Fixed an issue where response compression would fail when returning 304 Not Modified

Compare Source

What's Changed

Fixed an issue where response compression would fail when returning 304 Not Modified by @​dimitribouniol in #​3206

I recently discovered that when response compression was enabled, browsers would fail to load resources they had cached when the server responded with 304 Not Modified, indicating the browser should use the resource they have, but failed to do so leading to images or stylesheets not loading. This applied to both HTTP 1.1 and 2 servers, using the FileMiddleware to provide the caching logic. This was fixed in SwiftNIO, and has new tests in NIOHTTPCompression, so this PR just bumps the minimum version to ensure folks don’t run into the bug if response compression is enabled and caching is actually used.

Learn More:

• Discussion on Discord
• apple/swift-nio#2737
• apple/swift-nio-extras#224

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.101.3...4.101.4

v4.101.3: - Fix decoding 'flag' URL query params via .decode(StructType.self)

Compare Source

What's Changed

Fix decoding 'flag' URL query params via .decode(StructType.self) by @​challfry in #​3164

Fixes #​3163.

The code:

struct QueryStruct: Content {
    var flag1: Bool?
}
let queryStruct = try req.query.decode(QueryStruct.self)

produces queryStruct.flag1 == true when decoding the URL query “?flag1”, matching the behavior of req.query[Bool.self, at: "flag1"].

New Contributor

• @​challfry made their first contribution in #​3164 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.101.2...4.101.3

v4.101.2: - Adds TIFF and WebP HTTP Media Types

Compare Source

What's Changed

Adds TIFF and WebP HTTP Media Types by @​qalandarov in #​3194

Add additional image types:

app.post("upload") { req in
    guard [.jpeg, .png, .tiff, .webp].contains(req.content.contentType) else {
        throw Abort(.unsupportedMediaType)
    }
    // ...
}

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.101.1...4.101.2

v4.101.1: - Exclude Query and Fragment from URI semicolon fix on Linux

Compare Source

On Linux, URLComponents does not have 100% the same behavior like on macOS. Vapor accounts for this unfixed bug by replacing percent-encoded semicolon %3B with ; in URIs.

This is however not fully correct, because if a URI contains a percent encoded semicolon, this might have a different meaning, than when it is not percent encoded, compare the following sentence from RFC 3986:

A percent-encoding mechanism is used to represent a data octet in a
component when that octet's corresponding character is outside the
allowed set or is being used as a delimiter of, or within, the component.

This PR aims to limit the impact of the required semicolon fix by ensuring that query and fragments are not unnecessarily and incorrectly modified.

Hopefully, in a future with the new swift-foundation this fix will not be needed anymore. But for now it would solve an issue on our side which is related to the concept of a signed request.

v4.101.0: - Add Async Storage shutdown

Compare Source

What's Changed

Add Async Storage shutdown by @​0xTim in #​3196

Currently running

Task {
    try? await Task.sleep(for: .seconds(5))
    app.running?.stop()
}

When you try and install NIO as the global executor will crash because the storage API didn’t have any async entry points so stopping would trigger a synchronous shutdown, with a wait(). This fixes that

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.100.2...4.101.0

v4.100.2: - asyncBoot will no longer try booting server again if it is already booted

Compare Source

What's Changed

asyncBoot will no longer try booting server again if it is already booted by @​RussBaz in #​3195

The synchronous boot function skips running the lifecycle handlers if the server is already booted. However, the async version ignored this check. I have added a small fix to add this check again.

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.100.1...4.100.2

v4.100.1: - Update URLEncodedFormEncoder encoding rules

Compare Source

What's Changed

Update URLEncodedFormEncoder encoding rules by @​ptoffy in #​3192

Solves #​3173
References https://url.spec.whatwg.org/#application-x-www-form-urlencoded-percent-encode-set to set the encoding rules

The application/x-www-form-urlencoded percent-encode set contains all code points, except the ASCII alphanumeric, U+002A (*), U+002D (-), U+002E (.), and U+005F (_).

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.100.0...4.100.1

v4.100.0: - Add Async Lifecycle Handlers

Compare Source

What's Changed

Add Async Lifecycle Handlers by @​0xTim in #​3193

Adds new protocol functions to LifecycleHandlers to support async contexts. This is important because packages like Redis use this to know when to shutdown their connection pool. In the shutdown function, these call .wait() which can cause application crashes if called when trying to use NIO’s event loop concurrency executor.

This provides async alternatives to allow packages to provide full async calls through their stack to avoid these crashes

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.99.3...4.100.0

v4.99.3: - Async Serve Command

Compare Source

What's Changed

Async Serve Command by @​0xTim in #​3190

Migrate ServeCommand to an AsyncCommand to enable proper custom executor support and remove any calls to wait()

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.99.2...4.99.3

v4.99.2: - Support compiling against Musl

Compare Source

What's Changed

Support compiling against Musl by @​simonjbeaumont in #​3188

Vapor already makes some provision for compiling against Musl in the RFC1123 implementation, where Glibc is not assumed and is imported conditionally alongside a conditional import of Musl. However, there are a couple of other places where Glibc is still assumed when compiling for Linux.

This patch replaces these imports with the same #if canImport(...) pattern.

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.99.1...4.99.2

v4.99.1: - Fix availability message

Compare Source

What's Changed

Fix availability message by @​valeriyvan in #​3191

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.99.0...4.99.1

v4.99.0: - Add async alternative for Application.shutdown

Compare Source

What's Changed

Add async alternative for Application.shutdown by @​0xTim in #​3189

Adds an async alternative for Application.shutdown() and annotates shutdown() with noasync

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.98.0...4.99.0

v4.98.0: - Mark all functions that use wait as noasync

Compare Source

What's Changed

Mark all functions that use wait as noasync by @​0xTim in #​3168

⚠️ WARNING: If you have strict concurrency checking enabled you should migrate to the async Application.make()

NIO’s EventLoopFuture.wait() is marked as noasync because is can cause issues when used in a concurrency context. All places where we call .wait() should also be marked as noasync to avoid this issue.

This adds async alternatives for those functions and adds noasync annotations where appropriate.

Also adds an async Application.make to replace the old initialiser that is now noasync

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.97.1...4.98.0

v4.97.1: - Log source file and line info for errors in ErrorMiddleware when possible

Compare Source

What's Changed

Log source file and line info for errors in ErrorMiddleware when possible by @​gwynne in #​3187

Ever since the last changes to ErrorMiddleware (by me, naturally), the error logging fails to correctly report file/line/function information even when the error has that data available. We now correctly pass these along to the logging machinery. The error responses sent to clients are unchanged.

Additional changes:

• Restore recognition of the DebuggableError protocol (reason and source location information for such errors are now used again).
• Handle generating error responses slightly more efficiently.
• Include the original error message in the fallback text if encoding an error to JSON fails.
• Improve the correctness of the reason messages used for DecodingErrors.

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.97.0...4.97.1

v4.97.0: - Provide AsyncFileStreaming API

Compare Source

What's Changed

Provide AsyncFileStreaming API by @​0xTim in #​3184

Builds on the work of #​2998, #​3170 and #​3167 to provide a full async streaming API that can be used in Swift Concurrency environments:

• Provides a new asyncStreamFile(at:chunkSize:mediaType:advancedETagComparison:onCompleted:) that takes advantage of the full async response streaming
• Fixes a number of bugs with the async Response body streaming
• FileMiddleware is now an AsyncMiddleware
• Replaces usages of FileManager with NIOFileSystem apart from in one deprecated API that can’t be async
• Correctly marks XCTVapor functions as noasync where they use .wait() and provides proper async alternatives

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.96.0...4.97.0

v4.96.0: - Make # of connections accepted per event loop cycle configurable, and raise the default

Compare Source

What's Changed

Make # of connections accepted per event loop cycle configurable, and raise the default by @​gwynne in #​3186

As per @​weissi’s suggestion in this forums post, we raise the default maximum number of connections accepted per cycle of the server’s event loop from 4 to 256, and the value is now user-configurable.

There are no new tests for this because I’m not sure if there’s a way to measure the effect of changing this value that doesn’t involve nondeterministic timing measurements.

Also takes the opportunity/excuse to add the missing customCertificateVerifyCallback parameter to the initializers of HTTPServer.Configuration.

Reviewers

Thanks to the reviewers for their help:

• @​weissi
• @​MahdiBM

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.95.0...4.96.0

v4.95.0: - Add support for asynchronous body stream writing

Compare Source

What's Changed

Add support for asynchronous body stream writing by @​Joannis in #​2998

• Fixes #​2930 - a crash when users try to write a body from within a task towards the ELF APIs.
• Introduces a new API for writing chunked HTTP response bodies
• Adds a helper that automatically manages failing and closing streams

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.94.1...4.95.0

v4.94.1: - Patch configuration and log actual port on startup

Compare Source

What's Changed

Patch configuration and log actual port on startup by @​bisgardo in #​3160

Before this change, the application

let app = Application(.testing)
defer { app.shutdown() }
try app.server.start(hostname: nil, port: 0)
defer { app.server.shutdown() }

would log the following message before starting the server:

[Vapor] Server starting on http://127.0.0.1:0

After this change it instead logs a message like the following after starting the server:

[Vapor] Server starting on http://127.0.0.1:57935

The input configuration is also patched such that app.http.server.configuration.port will hold the actual port after startup. Currently if it has value 0 it will keep that value (only app.http.server.shared.localAddress?.port will have the correct one).

Fixes #​3159.

Reviewers

Thanks to the reviewers for their help:

• @​dimitribouniol

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.94.0...4.94.1

v4.94.0: - Migrate to Async NIOFileIO APIs

Compare Source

What's Changed

Migrate to Async NIOFileIO APIs by @​0xTim in #​3167

This migrates collectFile(at:) and writeFile(_:at:) to use NIO’s async NIOFileIO APIs introduced in https://github.com/apple/swift-nio/releases/tag/2.63.0

Also adds a new API for streaming files using a AsyncSequence based on the new NIOFileSystem.

This work is required to move the DotEnv support over to an async API to avoid calling wait()s in an async context which can cause issues

Reviewers

Thanks to the reviewers for their help:

• @​ptoffy

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.93.2...4.94.0

v4.93.2: - Removed streamFile deprecation + deactivated advancedETagComparison by default

Compare Source

What's Changed

Removed streamFile deprecation + deactivated advancedETagComparison by default by @​linus-hologram in #​3177

As discussed on Discord, this PR removes the deprecation and deactivates the lately introduced advanced ETag Comparison for the time being while the revised implementation is worked on.

New Contributor

• @​linus-hologram made their first contribution in #​3177 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.93.1...4.93.2

v4.93.1: - Remove HeadResponder

Compare Source

What's Changed

Remove HeadResponder by @​baarde in #​3147

The HEAD method is identical to GET except that the server must not send content in the response (RFC 9110, section 9.3.2).

The previous default behaviour of returning 200 OK to every HEAD request to a constant route is not standard-compliant.

The new behaviour is to always forward the request to the GET route, unless the developer explicitely configured a custom HEAD route.

This PR fixes #​2680 and #​2749.

New Contributor

• @​baarde made their first contribution in #​3147 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.93.0...4.93.1

v4.93.0: - Advanced ETag Comparison now supported

Compare Source

What's Changed

Advanced ETag Comparison now supported by @​linus-hologram in #​3015

Vapor now supports strong (byte-by-byte) ETag validation and caches ETags for rapid responses. This provides a stronger alternative to the current weak comparison, which only guarantees semantic file equivalence. This new strong comparison is enabled by default and can be deactivated during FileMiddleware initialization if needed. This PR closes #​2948.

• streamFile method was deprecated and replaced by an alternative returning an EventLoopFuture
• vapor’s unit tests were updated to reflect the changes
• documentation was updated to reflect the changes

New Contributor

• @​linus-hologram made their first contribution in #​3015 🎉

Reviewers

Thanks to the reviewers for their help:

• @​vzsg

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.92.9...4.93.0

v4.92.9: - Enabled Request Decompression By Default

Compare Source

What's Changed

Enabled Request Decompression By Default by @​dimitribouniol in #​3175

This enables request decompression by default and sets the decompression limit to 25×.

New Contributor

• @​dimitribouniol made their first contribution in #​3175 🎉

Reviewers

Thanks to the reviewers for their help:

• @​MahdiBM

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.92.8...4.92.9

v4.92.8: - HTTP2 Response Compression/Request Decompression

Compare Source

What's Changed

HTTP2 Response Compression/Request Decompression by @​dimitribouniol in #​3126

Fixed an issue where HTTP2 didn’t support response compression and request decompression.

It seems like it may have been omitted when adding explicit support for HTTP2. Not sure what to do about testing as I couldn’t find any tests for the HTTP1.1 pathway, but I did verify it works in my pet project 😅

Fixes #​3125

New Contributor

• @​dimitribouniol made their first contribution in #​3126 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.92.7...4.92.8

v4.92.7: - Don't set ignore status for SIGTERM and SIGINT on Linux

Compare Source

What's Changed

Don't set ignore status for SIGTERM and SIGINT on Linux by @​gwynne in #​3174

Changes the behavior of ServeCommand’s signal handling setup to more closely match that of swift-service-lifecycle. Hopefully finally solves #​2502 🤞

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.92.6...4.92.7

v4.92.6: - Fix typos across the codebase

Compare Source

What's Changed

Fix typos across the codebase by @​mrs1669 in #​3162

Fixes a number of typos in the codebase.

⚠️ the logger for loading environment files now has the correctly spelt label - dot-env-logger if you need to search for that

New Contributor

• @​mrs1669 made their first contribution in #​3162 🎉

Reviewers

Thanks to the reviewers for their help:

• @​dimitribouniol

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.92.5...4.92.6

v4.92.5: - Fix some Sendable warnings on 5.10

Compare Source

What's Changed

Fix some Sendable warnings on 5.10 by @​sidepelican in #​3158

Fix a number of warnings in Swift 5.10 like below.

Fix simple issues that can be addressed by simply adding Sendable.

New Contributor

• @​sidepelican made their first contribution in #​3158 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.92.4...4.92.5

v4.92.4: - Allow HTTPServer's configuration to be dynamically updatable

Compare Source

What's Changed

Allow HTTPServer's configuration to be dynamically updatable by @​dimitribouniol in #​3132

This allows many aspects of the HTTP server configuration to be changed after the server starts without needing to stop and restart it, or drop existing connections in the process.

Some things that can now be re-configured include request/response configuration options, HTTP version support, HTTP pipelining, TLS configuration (ie. enabling/disabling, rotating certificates, etc…), server name, metrics reporting, the logger, and the shutdown timer.

Fixes #​3130.

New Contributor

• @​dimitribouniol made their first contribution in #​3132 🎉

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.92.3...4.92.4

v4.92.3: - Fix issue when client disconnects midway through a stream

Compare Source

What's Changed

Fix issue when client disconnects midway through a stream by @​0xTim in #​3102

Fixes an issue when a client disconnects mid way through streaming a request in a Swift concurrency context. In certain cases this would trigger a de-init off the event loop, leading to a crash.

This fixes the issue by using a lock instead of a loop bound wrapper

Reviewers

Thanks to the reviewers for their help:

• @​MahdiBM

This patch was released by @​0xTim

Full Changelog: vapor/vapor@4.92.2...4.92.3

v4.92.2: - Fix handling of "flag" URL query params

Compare Source

What's Changed

Fix handling of "flag" URL query params by @​gwynne in #​3151

Flag query parameters (e.g. /foo?bar&baz) were broken by 4.75.0, and apparently no one noticed for quite awhile. They now work again. Many thanks to @​daveanderson for reporting this!

Fixes #​3150.

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.92.1...4.92.2

v4.92.1: - Fix URI handling with multiple slashes and variable components.

Compare Source

What's Changed

Fix URI handling with multiple slashes and variable components. by @​gwynne in #​3143

Resolves some more subtle remaining issues in how URI is handled with respect to HTTP requests.

Fixes #​3142.

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.92.0...4.92.1

v4.92.0: - Fix broken URI behaviors

Compare Source

What's Changed

Fix broken URI behaviors by @​gwynne in #​3140

Numerous issues have arisen with the changes made to URI as a result of the fix for GHSA-r6r4-5pr8-gjcp. This update fixes all known issues and restores several changed URI behaviors (although, quite deliberately, not all of them), including new tests. Fixes #​3133, #​3135, #​3137, and #​3138.

Also addresses Sendable warnings in ContentEncoder, ContentDecoder, ContentContainer, PlaintextDecoder, PlaintextEncoder, URLQueryDecoder, URLQueryEncoder, URLQueryContainer, URLEncodedFormDecoder, and URLEncodedFormEncoder.

Shoutout to @​weissi, @​grahamburgsma, and @​finestructure for their help tracking down the various problems, thank you all!

Reviewers

Thanks to the reviewers for their help:

• @​MahdiBM

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.91.1...4.92.0

v4.91.1: - Update routing-kit version

Compare Source

What's Changed

Update routing-kit version by @​marius-se in #​3131

Update routing-kit version to get Equatable conformance for PathComponents

Related to https://github.com/vapor/routing-kit/pull/129
anhttps://github.com/swift-server/swift-openapi-vapor/pull/13#issuecomment-187975282929

New Contributor

• @​marius-se made their first contribution in #​3131 🎉

This patch was released by @​gwynne

Full Changelog: vapor/vapor@4.91.0...4.91.1

[v4.91.0](h

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.