From 8ceb779dd45e4a5705084fe34772231d89176c10 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 13:04:29 +0200
Subject: [PATCH] chore(deps): bump the ktor group across 1 directory with 15
updates (#941)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the ktor group with 15 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [io.ktor:ktor-client-apache5](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-auth](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-client-core](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-client-logging](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
|
[io.ktor:ktor-server-content-negotiation](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
|
[io.ktor:ktor-client-content-negotiation](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
|
[io.ktor:ktor-serialization-kotlinx-json](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
| [io.ktor:ktor-server-auth](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-core](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-sse](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-websockets](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-mock](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-test-host](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-cio](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-cio](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
Updates `io.ktor:ktor-client-apache5` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-client-apache5's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-client-apache5's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Commits
01c469a
Release 3.5.2 (#5781)c965a0c
KTOR-9741 Prevent CIO request handler leak (#5783)74df458
chore: fix some comments to improve readability2672567
[KTOR-9704] Optimized encoding flow for UTF-8 (#5743)d5680ed
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...9b0f356
something::javaClass.name is not the name of the class of
something but `"j...58256cd
KTOR-9743 Clarify readLine documentation088bd60
KTOR-9679 Fix regressions caused by adding buffering167176a
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)7fb0844
KTOR-9585 Fix schema title trimming- Additional commits viewable in compare
view
Updates `io.ktor:ktor-client-auth` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-client-auth's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-client-auth's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Commits
01c469a
Release 3.5.2 (#5781)c965a0c
KTOR-9741 Prevent CIO request handler leak (#5783)74df458
chore: fix some comments to improve readability2672567
[KTOR-9704] Optimized encoding flow for UTF-8 (#5743)d5680ed
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...9b0f356
something::javaClass.name is not the name of the class of
something but `"j...58256cd
KTOR-9743 Clarify readLine documentation088bd60
KTOR-9679 Fix regressions caused by adding buffering167176a
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)7fb0844
KTOR-9585 Fix schema title trimming- Additional commits viewable in compare
view
Updates `io.ktor:ktor-client-core` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-client-core's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-client-core's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Commits
01c469a
Release 3.5.2 (#5781)c965a0c
KTOR-9741 Prevent CIO request handler leak (#5783)74df458
chore: fix some comments to improve readability2672567
[KTOR-9704] Optimized encoding flow for UTF-8 (#5743)d5680ed
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...9b0f356
something::javaClass.name is not the name of the class of
something but `"j...58256cd
KTOR-9743 Clarify readLine documentation088bd60
KTOR-9679 Fix regressions caused by adding buffering167176a
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)7fb0844
KTOR-9585 Fix schema title trimming- Additional commits viewable in compare
view
Updates `io.ktor:ktor-client-logging` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-client-logging's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-client-logging's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Commits
01c469a
Release 3.5.2 (#5781)c965a0c
KTOR-9741 Prevent CIO request handler leak (#5783)74df458
chore: fix some comments to improve readability2672567
[KTOR-9704] Optimized encoding flow for UTF-8 (#5743)d5680ed
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...9b0f356
something::javaClass.name is not the name of the class of
something but `"j...58256cd
KTOR-9743 Clarify readLine documentation088bd60
KTOR-9679 Fix regressions caused by adding buffering167176a
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)7fb0844
KTOR-9585 Fix schema title trimming- Additional commits viewable in compare
view
Updates `io.ktor:ktor-server-content-negotiation` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-server-content-negotiation's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-server-content-negotiation's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Commits
01c469a
Release 3.5.2 (#5781)c965a0c
KTOR-9741 Prevent CIO request handler leak (#5783)74df458
chore: fix some comments to improve readability2672567
[KTOR-9704] Optimized encoding flow for UTF-8 (#5743)d5680ed
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...9b0f356
something::javaClass.name is not the name of the class of
something but `"j...58256cd
KTOR-9743 Clarify readLine documentation088bd60
KTOR-9679 Fix regressions caused by adding buffering167176a
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)7fb0844
KTOR-9585 Fix schema title trimming- Additional commits viewable in compare
view
Updates `io.ktor:ktor-client-content-negotiation` from 3.5.1 to 3.5.2
Release notes
Sourced from io.ktor:ktor-client-content-negotiation's
releases.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't close it properly
- KTOR-9671
Darwin: Semicolons in URL path are sanitized
Changelog
Sourced from io.ktor:ktor-client-content-negotiation's
changelog.
3.5.2
Published 31 July 2026
Improvements
- KTOR-8032
RateLimit: Allow limit requests based on authentication result
- KTOR-9719
ApplicationCall.isStaticContent returns false when called
from plugin interceptors
- KTOR-8450
ContentNegotiation: it doesn't handle content type suffixes
- KTOR-7892
SwaggerUI: Missing oauth2-redirect.html support in the plugin
- KTOR-9759
Reject whitespace in URL hosts during parsing
- KTOR-9681
Update kotlinx-io to 0.9.1
- KTOR-9743
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs
- KTOR-9504
Improve KDoc for EmbeddedServer.addShutdownHook
Bugfixes
- KTOR-9741 CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response
- KTOR-7661
Maven + YAML config file does not work
- KTOR-9585
OpenAPI: JsonSchema title is truncated when it contains a dot
- KTOR-9704
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x
- KTOR-9588 SSE
client (CIO engine) sends spurious
Content-Length: 0 on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
- KTOR-9679
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary
- KTOR-9767
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count
- KTOR-8992
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath
- KTOR-9698
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas
- KTOR-9690
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period
- KTOR-8903
Netty: Close channel connection on errors properly
- KTOR-9707
SaveBody performance regression
- KTOR-9703
Inefficient text reading function in DefaultTransform
- KTOR-9711
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection
- KTOR-9688
RateLimit: No access to principal when wrapped with authentication since
3.5.1
- KTOR-9677
Auto-reloading: server is reloaded only once since 3.5.0
- KTOR-9683
Sockets: Canceling a SelectorManager job doesn't...
_Description has been truncated_
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
gradle/libs.versions.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 051e361..7257a7d 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -17,7 +17,7 @@ collections-immutable = "0.5.1"
coroutines = "1.11.0"
kotest = "6.2.3"
kotlinx-io = "0.9.1"
-ktor = "3.5.1"
+ktor = "3.5.2"
logging = "8.0.4"
mockk = "1.14.11"
serialization = "1.11.0"