v4.1.23

⚠️ Dependency leak in metrics-bom

This release accidentally leaked non-project dependencies into io.dropwizard.metrics:metrics-bom.

If you're using this BOM, please be aware that it also manages the following dependencies:

• org.slf4j:slf4j-api
• org.slf4j:slf4j-simple
• junit:junit
• org.assertj:assertj-core
• org.mockito:mockito-core
• org.hamcrest:hamcrest-core

This has been fixed in Dropwizard Metrics 4.1.24.

Bug fixes

• JMXReporter may create invalid ObjectNames (#2030, #2031)

Dependency updates

• Update jetty9.version to v9.4.42.v20210604 (#2001)
• Bump assertj-core from 3.20.0 to 3.20.1 (#2032, #2024)
• Update dependency org.apache.httpcomponents:httpcore to v4.4.14 (#1970)
• Update dependency org.apache.httpcomponents:httpcore-nio to v4.4.14 (#1971)
• Update dependency org.checkerframework:checker-qual to v3.14.0 (#1978)
• Update dependency org.mockito:mockito-core to v3.11.1 (#1986, #2012)
• Update dependency org.openjdk.jcstress:jcstress-core to v0.13 (#1996, #2025)
• Update jmh.version to v1.32 (#1958)
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.3.0 (#1954)
• Update actions/cache action to v2.1.6 (#1961)

Assorted

• Explicitly declare all dependencies of sub-modules (#1967)

v4.1.22

Improvements

• Allow customizing ClientConnectionManager for Apache HttpClient 5 (#1927)

Dependency updates

• Bump ehcache from 3.9.3 to 3.9.4 (#1949)
• Bump httpclient5 from 5.0.3 to 5.1 (#1931)
• Bump jetty9.version from 9.4.40.v20210413 to 9.4.41.v20210516 (#1946)
• Bump awaitility from 4.0.3 to 4.1.0 (#1925)
• Bump mockito-core from 3.9.0 to 3.10.0 (#1936)
• Bump jcstress-core from 0.9 to 0.11.0 (#1900, #1916)
• Bump jmh.version from 1.29 to 1.31 (#1917, #1935)
• Bump jacoco-maven-plugin from 0.8.6 to 0.8.7 (#1912)
• Bump maven-gpg-plugin from 1.6 to 3.0.1 (#1924)
• Bump maven-project-info-reports-plugin from 3.1.1 to 3.1.2 (#1899)
• Update dependency com.github.ben-manes.caffeine:caffeine to v2.9.1 (release/4.1.x) (#1906)
• Update dependency com.google.errorprone:error_prone_core to v2.7.1 (release/4.1.x) (#1937)
• Bump actions/checkout from 2 to 2.3.4 (#1932)
• Bump actions/stale from 3.0.18 to 3.0.19 (#1947)

Documentation

• Improve docs for AdminServlet et al (#1905) - Thanks to @mschechter-bellese!

v4.2.0

Highlights

• Add settable gauges via SettableGauge (#1607, #1812)
• Implement LockFreeExponentiallyDecayingReservoir (#1656, #1638)
• Add ThreadPoolExecutor and ForkJoinPool metrics to InstrumentedExecutorService (#1535, #1928)
• Avoid queuing up report tasks in ScheduledReporter (#1590, #1524)

New and updated modules

• Add support for Eclipse Jersey 3.x (#1720, #1744, #1893)
• Add support for Jetty 10.x and 11.x (#1724, #1763, #1764, #1836, #1837)
• Add support for Jakarta EE jakarta.servlet namespace (#1730)
• Add support for Caffeine 3.x (#1759, #1818, #1907)
• Upgrade to Jackson 2.12.x (#1593, #1715, #1737, #1782, #1867)
• Upgrade to Jdbi 3.20.0 (#1855, #1883)

Pre-releases

Please refer to the release notes of the Dropwizard 4.2.0 pre-release versions for more detailed change logs:

• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-beta.1
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-beta.2
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-beta.3
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-beta.4
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-rc.1
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-rc.2
• https://github.com/dropwizard/metrics/releases/tag/v4.2.0-rc.3

Changes since Dropwizard Metrics 4.2.0-rc.3

Dependency updates

• Bump httpclient5 from 5.0.3 to 5.1 (#1931)
• Bump jmh.version from 1.30 to 1.31 (#1935)
• Bump mockito-core from 3.9.0 to 3.10.0 (#1936)
• Bump actions/checkout from 2 to 2.3.4 (#1932)

v4.2.0-rc.3

Improvements

• Add ThreadPoolExecutor and ForkJoinPool metrics (#1928)
• Allow customizing ClientConnectionManager for Apache HttpClient 5 (#1927)

Dependency updates

• Update caffeine.version (release/4.2.x) (#1907)
• Bump awaitility from 4.0.3 to 4.1.0 (#1925)
• Bump jacoco-maven-plugin from 0.8.6 to 0.8.7 (#1912)
• Bump jcstress-core from 0.10 to 0.11 (#1916)
• Bump jmh.version from 1.29 to 1.30 (#1917)
• Bump maven-gpg-plugin from 1.6 to 3.0.1 (#1924)

Assorted

• Fix JaCoCo code coverage analysis
• Improve docs for AdminServlet et al (#1905)

v4.2.0-rc.2

Improvements

• Allows URIs served by the AdminServlet to be individually enabled/disabled (#1891, 721ae28)

Dependency updates

• Bump ehcache from 2.10.6 to 2.10.9.2 (#1889)
• Bump jcstress-core from 0.9 to 0.10 (#1900)
• Bump maven-project-info-reports-plugin from 3.1.1 to 3.1.2 (#1899)
• Update dependency org.glassfish.jersey:jersey-bom to v3.0.2 (#1893)

4.1.21

Improvements

• Allows URIs served by the AdminServlet to be individually enabled/disabled (#1891)

Dependency updates

• Bump ehcache from 2.10.6 to 2.10.9.2 (#1889)

v4.2.0-rc.1

Improvements

• HealthCheckServlet configurable object mapper and status indicator (#1871)

Dependency updates

• Bump amqp-client from 5.11.0 to 5.12.0 (#1852)
• Bump ehcache from 3.9.2 to 3.9.3 (#1878)
• Bump jetty9.version from 9.4.39.v20210325 to 9.4.40.v20210413 (#1875)
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.3 (release/4.2.x) (#1867)
• Update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.4 (release/4.1.x) (#1864)
• Update dependency org.glassfish.jersey:jersey-bom to v2.34 (release/4.2.x) (#1877)
• Update dependency org.jdbi:jdbi3-core to v3.19.0 (release/4.2.x) (#1855)
• Update dependency org.jdbi:jdbi3-core to v3.20.0 (release/4.2.x) (#1883)
• Bump jcstress-core from 0.8 to 0.9 (#1879)
• Bump mockito-core from 3.8.0 to 3.9.0 (#1847)
• Bump actions/cache from v2.1.4 to v2.1.5 (#1862)
• Bump actions/setup-java from v1 to v2 (#1845)
• Update actions/cache action to v2.1.5 (#1865)

Assorted

• Build with Java 16 (#1872)

v4.1.20

Improvements

• HealthCheckServlet configurable object mapper and status indicator (#1871)

Dependency updates

• Bump amqp-client from 5.11.0 to 5.12.0 (#1852)
• Bump ehcache from 3.9.2 to 3.9.3 (#1878)
• Bump jetty9.version from 9.4.39.v20210325 to 9.4.40.v20210413 (#1875)
• Update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.4 (release/4.1.x) (#1864)
• Bump jcstress-core from 0.8 to 0.9 (#1879)
• Bump mockito-core from 3.8.0 to 3.9.0 (#1847)
• Bump actions/cache from v2.1.4 to v2.1.5 (#1862)
• Bump actions/setup-java from v1 to v2 (#1845)

v4.2.0-beta.4

⚠️ Security fixes

• Bump jetty9.version from 9.4.37.v20210219 to 9.4.39.v20210325 (#1767, #1835) ➡️ Jetty 9.4.39.v20210325 release notes
• Update dependency org.eclipse.jetty:jetty-bom to v10.0.2 (#1836) ➡️ Jetty 10.0.2 release notes
• Update dependency org.eclipse.jetty:jetty-bom to v11.0.2 (#1837) ➡️ Jetty 11.0.2 release notes
  • These are addressing various security issues.
  • GHSA-j6qj-j888-vvgq
  • GHSA-26vr-8j45-3r4w
  • GHSA-v7ff-8wcx-gmc5

Improvements

• Add convenience method for creating and accessing SettableGauge (#1812)

Dependency updates

• Bump jdbi3-core from 3.18.0 to 3.18.1 (#1829)
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.0.1 (#1818)
• Update dependency com.google.errorprone:error_prone_core to v2.6.0 (#1841)
• Update log4j2.version to v2.14.1 (release/4.1.x) (#1804)
• Bump jcstress-core from 0.7 to 0.8 (#1825)
• Bump jmh.version from 1.28 to 1.29 (#1824)
• Bump maven-bundle-plugin from 5.1.1 to 5.1.2 (#1833)
• Bump Maven to version 3.8.1

v4.1.19

⚠️ Security fixes

• Bump jetty9.version from 9.4.37.v20210219 to 9.4.39.v20210325 (#1767, #1835)
  • This is addressing various security issues (Jetty 9.4.39.v20210325 release notes).
  • GHSA-j6qj-j888-vvgq
  • GHSA-26vr-8j45-3r4w
  • GHSA-v7ff-8wcx-gmc5

Improvements

• Make metrics-caffeine compatible with Caffeine 2.x and 3.x (#1765)

Dependency updates

• Bump ehcache from 3.9.1 to 3.9.2 (#1766)
• Update dependency com.google.errorprone:error_prone_core to v2.6.0 (#1769, #1840)
• Update log4j2.version to v2.14.1 (#1804)
• Bump jdbi3-core from 3.18.0 to 3.18.1 (#1829)
• Bump jcstress-core from 0.7 to 0.8 (#1825)
• Bump jmh.version from 1.27 to 1.29 (#1774, #1824)
• Bump maven-bundle-plugin from 5.1.1 to 5.1.2 (#1833)
• Bump Maven to version 3.8.1
• Bump actions/stale from v3.0.17 to v3.0.18 (#1785)

Assorted

• Configure Renovate (#1747)