[dependabot]

Bumps the gradle-minor-patch group with 51 updates in the / directory:

Package	From	To
gradle-wrapper	9.7.1	9.8.2
org.jetbrains.kotlinx:kotlinx-serialization-json	1.11.0	1.12.0
io.ktor:ktor-client-core	3.5.2	3.6.1
io.ktor:ktor-client-cio	3.5.2	3.6.1
io.ktor:ktor-client-darwin	3.5.2	3.6.1
io.ktor:ktor-client-curl	3.5.2	3.6.1
io.ktor:ktor-client-winhttp	3.5.2	3.6.1
io.ktor:ktor-client-content-negotiation	3.5.2	3.6.1
io.ktor:ktor-client-logging	3.5.2	3.6.1
io.ktor:ktor-serialization-kotlinx-json	3.5.2	3.6.1
io.ktor:ktor-server-core	3.5.2	3.6.1
io.ktor:ktor-server-status-pages	3.5.2	3.6.1
io.ktor:ktor-server-cio	3.5.2	3.6.1
io.ktor:ktor-server-netty	3.5.2	3.6.1
io.ktor:ktor-server-content-negotiation	3.5.2	3.6.1
io.ktor:ktor-client-mock	3.5.2	3.6.1
io.ktor:ktor-network-tls-certificates	3.5.2	3.6.1
io.ktor:ktor-client-cio	3.5.2	3.6.1
io.ktor:ktor-client-darwin	3.5.2	3.6.1
io.ktor:ktor-client-curl	3.5.2	3.6.1
io.ktor:ktor-client-winhttp	3.5.2	3.6.1
io.ktor:ktor-client-content-negotiation	3.5.2	3.6.1
io.ktor:ktor-client-logging	3.5.2	3.6.1
io.ktor:ktor-serialization-kotlinx-json	3.5.2	3.6.1
io.ktor:ktor-server-core	3.5.2	3.6.1
io.ktor:ktor-server-status-pages	3.5.2	3.6.1
io.ktor:ktor-server-cio	3.5.2	3.6.1
io.ktor:ktor-server-netty	3.5.2	3.6.1
io.ktor:ktor-server-content-negotiation	3.5.2	3.6.1
io.ktor:ktor-client-mock	3.5.2	3.6.1
io.ktor:ktor-network-tls-certificates	3.5.2	3.6.1
io.kotest:kotest-property	6.2.4	6.2.6
org.jetbrains.kotlin:kotlin-test	2.4.20	2.4.21
org.jetbrains.kotlin:kotlin-test-junit5	2.4.20	2.4.21
org.jetbrains.kotlin.jvm	2.4.20	2.4.21
org.jetbrains.kotlin.multiplatform	2.4.20	2.4.21
org.jetbrains.kotlin.plugin.serialization	2.4.20	2.4.21
org.jetbrains.kotlin:kotlin-test-junit5	2.4.20	2.4.21
org.springframework.boot:spring-boot-autoconfigure	4.1.1	4.1.2
org.springframework.boot:spring-boot-configuration-processor	4.1.1	4.1.2
org.springframework.boot:spring-boot-test	4.1.1	4.1.2
org.springframework.boot:spring-boot-test-autoconfigure	4.1.1	4.1.2
org.springframework.boot:spring-boot-configuration-processor	4.1.1	4.1.2
org.springframework.boot:spring-boot-test	4.1.1	4.1.2
org.springframework.boot:spring-boot-test-autoconfigure	4.1.1	4.1.2
org.springframework.ai:spring-ai-vector-store	2.0.1	2.0.2
org.springframework.ai:spring-ai-model	2.0.1	2.0.2
org.springframework.ai:spring-ai-model	2.0.1	2.0.2
dev.langchain4j:langchain4j-core	1.20.0	1.23.0
io.micrometer:micrometer-core	1.17.1	1.17.2
ai.koog:rag-base-jvm	1.2.0	1.3.0
io.grpc:grpc-protobuf	1.84.0	1.85.1
io.grpc:grpc-stub	1.84.0	1.85.1
io.grpc:grpc-okhttp	1.84.0	1.85.1
io.grpc:grpc-inprocess	1.84.0	1.85.1
io.grpc:protoc-gen-grpc-java	1.84.0	1.85.1
io.grpc:grpc-stub	1.84.0	1.85.1
io.grpc:grpc-okhttp	1.84.0	1.85.1
io.grpc:grpc-inprocess	1.84.0	1.85.1
io.qdrant:client	1.19.0	1.20.0
io.modelcontextprotocol:kotlin-sdk	0.15.0	0.16.0
org.jetbrains.kotlinx:kotlinx-io-core	0.9.1	0.9.2
com.google.protobuf:protobuf-java	4.36.1	4.36.2
com.google.protobuf:protobuf-kotlin	4.36.1	4.36.2
com.google.protobuf:protoc	4.36.1	4.36.2
com.google.guava:guava	33.7.1-jre	33.8.0-jre
com.google.protobuf:protobuf-kotlin	4.36.1	4.36.2
com.google.protobuf:protoc	4.36.1	4.36.2
io.grpc:protoc-gen-grpc-java	1.84.0	1.85.1
io.opentelemetry:opentelemetry-bom	1.65.0	1.67.0
org.jetbrains.kotlin.jvm	2.4.20	2.4.21
org.jetbrains.kotlin.multiplatform	2.4.20	2.4.21
org.jetbrains.kotlin.plugin.serialization	2.4.20	2.4.21
org.jetbrains.dokka	2.2.0	2.3.0
org.jetbrains.dokka-javadoc	2.2.0	2.3.0
org.jetbrains.dokka-javadoc	2.2.0	2.3.0
org.jetbrains.kotlinx.kover	0.9.9	0.9.11
me.champeau.jmh	0.7.3	0.7.4
com.google.protobuf	0.10.0	0.10.1
org.graalvm.buildtools.native	1.1.12	1.1.18

Updates gradle-wrapper from 9.7.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

... (truncated)

Commits

• 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
• 66805db Run all cross-version targets in flaky quarantine
• cdd4c8f Skip empty test tasks in the flaky test quarantine
• 6badb77 Split the AllVersionsCrossVersion quarantine across agents
• 1655e44 Prepare for 9.8.2 (#39492)
• 6702214 Prepare for 9.8.2
• 688c0c1 Fix false warning about unstable graph (#39479)
• 3601d4f Clarify selector reuse comments in SelectorState
• 6e836fd Fix false warning about unstable graph
• a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

• 4c28c3e 1.12.0 release (#3295)
• abe8a96 Merge remote-tracking branch 'origin/master' into dev
• 952d17a Added Gradle task to prepare release (#3279)
• 6f30025 Remove Play verification files (#3266)
• 89b23ca Workaround watchosArm32 removal (#3291)
• 53932a0 Update links to Okio site and its docs (#3292)
• 3a5db3b Reduce the number of input fields for bug report
• 9ede0e2 Added templates to the issue creation wizard
• 5d3f884 Update Dokka to version 2.3.0-Beta (#3286)
• 1fe9a49 Suppress deprecation of nodejs in wasmWasi configuration (#3287)
• Additional commits viewable in compare view

Updates io.ktor:ktor-client-core from 3.5.2 to 3.6.1

Release notes

Sourced from io.ktor:ktor-client-core's releases.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android: DiskReadViolation when KtorSimpleLogger is initialized during plugin execution
• KTOR-9985 OpenAPI compiler plugin duplicates unrelated schemas (FooDTO -> FooDTO2) after adding new routes
• KTOR-2348 DoubleReceive: recursive receive pipeline re-entry when receiving content in a receivePipeline interceptor
• KTOR-9968 Test engine streaming responses hang when over 1MB
• KTOR-9894 Netty + Compression: response leaked when the client disconnects before the body is written
• KTOR-9987 WebSockets: Netty sometimes closes socket before sending close frame
• KTOR-9943 HttpStatement.execute can hang when its block abandons a response body
• KTOR-9980 CallLogging: MDC entries leak stale thread-local values when provider returns null
• KTOR-9790 testApplication: sseSession() never returns when the SSE route installs a heartbeat
• KTOR-9884 Directories are returned as empty binaries when using nested jars
• KTOR-4245 Code snippet in Kdoc for DefaultRequest doesn't compile
• KTOR-10035 WebSocket drops the queued Close frame when the server session fails
• KTOR-10036 testApplication: WebSocket client stops reading before the servers Close reply arrives

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine
• KTOR-9785 Typesafe Authentication DSL

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-core's changelog.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android: DiskReadViolation when KtorSimpleLogger is initialized during plugin execution
• KTOR-9985 OpenAPI compiler plugin duplicates unrelated schemas (FooDTO -> FooDTO2) after adding new routes
• KTOR-2348 DoubleReceive: recursive receive pipeline re-entry when receiving content in a receivePipeline interceptor
• KTOR-9968 Test engine streaming responses hang when over 1MB
• KTOR-9894 Netty + Compression: response leaked when the client disconnects before the body is written
• KTOR-9987 WebSockets: Netty sometimes closes socket before sending close frame
• KTOR-9943 HttpStatement.execute can hang when its block abandons a response body
• KTOR-9980 CallLogging: MDC entries leak stale thread-local values when provider returns null
• KTOR-9790 testApplication: sseSession() never returns when the SSE route installs a heartbeat
• KTOR-9884 Directories are returned as empty binaries when using nested jars
• KTOR-4245 Code snippet in Kdoc for DefaultRequest doesn't compile
• KTOR-10035 WebSocket drops the queued Close frame when the server session fails
• KTOR-10036 testApplication: WebSocket client stops reading before the servers Close reply arrives

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine

... (truncated)

Commits

• 26cc003 Release 3.6.1 (#5970)
• b4fc04d KTOR-10035 Deliver the queued Close frame when the session fails (#5959)
• fbd2a80 KTOR-10036 Keep the test host WebSocket client reading until the server close...
• 516fe19 KTOR-10037 Close the CIO connection when a response fails before writing any ...
• 3954d0c KTOR-9938: Abort Apache5 exchanges when the response body is cancelled
• dbc9692 KTOR-9969 Shut down native socket output inside the writer coroutine
• 3ceecd7 KTOR-9992 Fix CIO accept busy loop (#5961)
• bdfff2b KTOR-10023 Throw BadRequestException on malformed URL segments
• 7378949 KTOR-9986 Remove dot segments from relative redirect targets (#5939)
• c981394 KTOR-9430 Fix test server stopping
• Additional commits viewable in compare view

Updates io.ktor:ktor-client-cio from 3.5.2 to 3.6.1

Release notes

Sourced from io.ktor:ktor-client-cio's releases.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android: DiskReadViolation when KtorSimpleLogger is initialized during plugin execution
• KTOR-9985 OpenAPI compiler plugin duplicates unrelated schemas (FooDTO -> FooDTO2) after adding new routes
• KTOR-2348 DoubleReceive: recursive receive pipeline re-entry when receiving content in a receivePipeline interceptor
• KTOR-9968 Test engine streaming responses hang when over 1MB
• KTOR-9894 Netty + Compression: response leaked when the client disconnects before the body is written
• KTOR-9987 WebSockets: Netty sometimes closes socket before sending close frame
• KTOR-9943 HttpStatement.execute can hang when its block abandons a response body
• KTOR-9980 CallLogging: MDC entries leak stale thread-local values when provider returns null
• KTOR-9790 testApplication: sseSession() never returns when the SSE route installs a heartbeat
• KTOR-9884 Directories are returned as empty binaries when using nested jars
• KTOR-4245 Code snippet in Kdoc for DefaultRequest doesn't compile
• KTOR-10035 WebSocket drops the queued Close frame when the server session fails
• KTOR-10036 testApplication: WebSocket client stops reading before the servers Close reply arrives

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine
• KTOR-9785 Typesafe Authentication DSL

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-cio's changelog.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android: DiskReadViolation when KtorSimpleLogger is initialized during plugin execution
• KTOR-9985 OpenAPI compiler plugin duplicates unrelated schemas (FooDTO -> FooDTO2) after adding new routes
• KTOR-2348 DoubleReceive: recursive receive pipeline re-entry when receiving content in a receivePipeline interceptor
• KTOR-9968 Test engine streaming responses hang when over 1MB
• KTOR-9894 Netty + Compression: response leaked when the client disconnects before the body is written
• KTOR-9987 WebSockets: Netty sometimes closes socket before sending close frame
• KTOR-9943 HttpStatement.execute can hang when its block abandons a response body
• KTOR-9980 CallLogging: MDC entries leak stale thread-local values when provider returns null
• KTOR-9790 testApplication: sseSession() never returns when the SSE route installs a heartbeat
• KTOR-9884 Directories are returned as empty binaries when using nested jars
• KTOR-4245 Code snippet in Kdoc for DefaultRequest doesn't compile
• KTOR-10035 WebSocket drops the queued Close frame when the server session fails
• KTOR-10036 testApplication: WebSocket client stops reading before the servers Close reply arrives

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine

... (truncated)

Commits

• 26cc003 Release 3.6.1 (#5970)
• b4fc04d KTOR-10035 Deliver the queued Close frame when the session fails (#5959)
• fbd2a80 KTOR-10036 Keep the test host WebSocket client reading until the server close...
• 516fe19 KTOR-10037 Close the CIO connection when a response fails before writing any ...
• 3954d0c KTOR-9938: Abort Apache5 exchanges when the response body is cancelled
• dbc9692 KTOR-9969 Shut down native socket output inside the writer coroutine
• 3ceecd7 KTOR-9992 Fix CIO accept busy loop (#5961)
• bdfff2b KTOR-10023 Throw BadRequestException on malformed URL segments
• 7378949 KTOR-9986 Remove dot segments from relative redirect targets (#5939)
• c981394 KTOR-9430 Fix test server stopping
• Additional commits viewable in compare view

Updates io.ktor:ktor-client-darwin from 3.5.2 to 3.6.1

Release notes

Sourced from io.ktor:ktor-client-darwin's releases.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android: DiskReadViolation when KtorSimpleLogger is initialized during plugin execution
• KTOR-9985 OpenAPI compiler plugin duplicates unrelated schemas (FooDTO -> FooDTO2) after adding new routes
• KTOR-2348 DoubleReceive: recursive receive pipeline re-entry when receiving content in a receivePipeline interceptor
• KTOR-9968 Test engine streaming responses hang when over 1MB
• KTOR-9894 Netty + Compression: response leaked when the client disconnects before the body is written
• KTOR-9987 WebSockets: Netty sometimes closes socket before sending close frame
• KTOR-9943 HttpStatement.execute can hang when its block abandons a response body
• KTOR-9980 CallLogging: MDC entries leak stale thread-local values when provider returns null
• KTOR-9790 testApplication: sseSession() never returns when the SSE route installs a heartbeat
• KTOR-9884 Directories are returned as empty binaries when using nested jars
• KTOR-4245 Code snippet in Kdoc for DefaultRequest doesn't compile
• KTOR-10035 WebSocket drops the queued Close frame when the server session fails
• KTOR-10036 testApplication: WebSocket client stops reading before the servers Close reply arrives

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine
• KTOR-9785 Typesafe Authentication DSL

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-darwin's changelog.

3.6.1

Published 29 October 2026

Improvements

• KTOR-10005 Native accepted TCP sockets do not enable TCP_NODELAY, unlike JVM
• KTOR-9966 Netty poor performance on delay calls
• KTOR-4206 The "com.typesafe.config.ConfigException$Missing" exception leaks from the typesafe config library when configuration is merged

Bugfixes

• KTOR-10037 CIO: keep-alive connection hangs when a response fails before writing any bytes
• KTOR-9969 Kotlin/Native CIO server occasionally closes an accepted connection with zero response bytes under CPU load
• KTOR-9974 CIO: close_notify is written concurrently with the last record, corrupting the TLS output and the kotlinx-io segment pool
• KTOR-9925 Resources: Constant sibling route loses to parameterized one when routes are split across separate authenticate blocks
• KTOR-9938 Apache5: streaming response hangs when the block returns before the body arrives
• KTOR-10023 Ktor 3.6.0 no longer throws BadRequestException for malformed paths
• KTOR-9986 HttpRedirect: a relative Location with dot segments is not normalized, so most engines send .. in the request path
• KTOR-10085 ETags: Ignore If-Modified-Since when If-None-Match is present
• KTOR-9430 DI: resources are not cleaned up during testing with testApplication
• KTOR-7175 Ktor-client, connections leak
• KTOR-9848 Android: The Android engine crashes with Unbalanced enter/exit on response read cancellation
• KTOR-9994 Android engine closes RawSourceChannel on the main thread and crashes with NetworkOnMainThreadException
• KTOR-9959 Sockets: CIO writer busy-loops when a nonblocking write returns zero
• KTOR-9970 Java: Cancelling a request before response headers does not abort the HTTP exchange
• KTOR-10006 OpenAPI: Compiler crash on local variable using object expression
• KTOR-9972 Android...

  Description has been truncated