Skip to content

chore(deps): Bump ktor-version from 3.2.3 to 3.4.3#81

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/ktor-version-3.4.3
Open

chore(deps): Bump ktor-version from 3.2.3 to 3.4.3#81
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/ktor-version-3.4.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps ktor-version from 3.2.3 to 3.4.3.
Updates io.ktor:ktor-server-core-jvm from 3.2.3 to 3.4.3

Release notes

Sourced from io.ktor:ktor-server-core-jvm's releases.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

Improvements

... (truncated)

Changelog

Sourced from io.ktor:ktor-server-core-jvm's changelog.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

... (truncated)

Commits
  • 5d9a998 Release 3.4.3 (#5547)
  • 6a11a76 KTOR-8989 Close or cancel engine only when the client reference count… (#5525)
  • 3acb8ea KTOR-8938 Inherit server coroutine context in WebSocket session (#5426)
  • cec7d38 Fix flaky test failures on native platforms (#5485)
  • bd8bea1 KTOR-9507 Update Jackson to 2.21 and 3.1.0
  • 5e29515 KTOR-9507 Update netty to 4.2.12
  • 733b8e1 KTOR-9373 Make ConcurrentMap iteration safe on Native (#5407)
  • 1f83f21 KTOR-9451 Support nested generic types (#5500)
  • 2440990 Apache 5 Client. Don't ignore resultCallback (#5526)
  • 430f320 Follow-up: KTOR-9497 Preventing a fatal crash in DarwinSession on close (#5533)
  • Additional commits viewable in compare view

Updates io.ktor:ktor-server-netty from 3.2.3 to 3.4.3

Release notes

Sourced from io.ktor:ktor-server-netty's releases.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

Improvements

... (truncated)

Changelog

Sourced from io.ktor:ktor-server-netty's changelog.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

... (truncated)

Commits
  • 5d9a998 Release 3.4.3 (#5547)
  • 6a11a76 KTOR-8989 Close or cancel engine only when the client reference count… (#5525)
  • 3acb8ea KTOR-8938 Inherit server coroutine context in WebSocket session (#5426)
  • cec7d38 Fix flaky test failures on native platforms (#5485)
  • bd8bea1 KTOR-9507 Update Jackson to 2.21 and 3.1.0
  • 5e29515 KTOR-9507 Update netty to 4.2.12
  • 733b8e1 KTOR-9373 Make ConcurrentMap iteration safe on Native (#5407)
  • 1f83f21 KTOR-9451 Support nested generic types (#5500)
  • 2440990 Apache 5 Client. Don't ignore resultCallback (#5526)
  • 430f320 Follow-up: KTOR-9497 Preventing a fatal crash in DarwinSession on close (#5533)
  • Additional commits viewable in compare view

Updates io.ktor:ktor-server-test-host from 3.2.3 to 3.4.3

Release notes

Sourced from io.ktor:ktor-server-test-host's releases.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

Improvements

... (truncated)

Changelog

Sourced from io.ktor:ktor-server-test-host's changelog.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

... (truncated)

Commits
  • 5d9a998 Release 3.4.3 (#5547)
  • 6a11a76 KTOR-8989 Close or cancel engine only when the client reference count… (#5525)
  • 3acb8ea KTOR-8938 Inherit server coroutine context in WebSocket session (#5426)
  • cec7d38 Fix flaky test failures on native platforms (#5485)
  • bd8bea1 KTOR-9507 Update Jackson to 2.21 and 3.1.0
  • 5e29515 KTOR-9507 Update netty to 4.2.12
  • 733b8e1 KTOR-9373 Make ConcurrentMap iteration safe on Native (#5407)
  • 1f83f21 KTOR-9451 Support nested generic types (#5500)
  • 2440990 Apache 5 Client. Don't ignore resultCallback (#5526)
  • 430f320 Follow-up: KTOR-9497 Preventing a fatal crash in DarwinSession on close (#5533)
  • Additional commits viewable in compare view

Updates io.ktor:ktor-server-content-negotiation from 3.2.3 to 3.4.3

Release notes

Sourced from io.ktor:ktor-server-content-negotiation's releases.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

Improvements

... (truncated)

Changelog

Sourced from io.ktor:ktor-server-content-negotiation's changelog.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

... (truncated)

Commits
  • 5d9a998 Release 3.4.3 (#5547)
  • 6a11a76 KTOR-8989 Close or cancel engine only when the client reference count… (#5525)
  • 3acb8ea KTOR-8938 Inherit server coroutine context in WebSocket session (#5426)
  • cec7d38 Fix flaky test failures on native platforms (#5485)
  • bd8bea1 KTOR-9507 Update Jackson to 2.21 and 3.1.0
  • 5e29515 KTOR-9507 Update netty to 4.2.12
  • 733b8e1 KTOR-9373 Make ConcurrentMap iteration safe on Native (#5407)
  • 1f83f21 KTOR-9451 Support nested generic types (#5500)
  • 2440990 Apache 5 Client. Don't ignore resultCallback (#5526)
  • 430f320 Follow-up: KTOR-9497 Preventing a fatal crash in DarwinSession on close (#5533)
  • Additional commits viewable in compare view

Updates io.ktor:ktor-serialization-kotlinx-json from 3.2.3 to 3.4.3

Release notes

Sourced from io.ktor:ktor-serialization-kotlinx-json's releases.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

3.4.2

Published 27 March 2026

Improvements

  • KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
  • KTOR-9383 CaseInsensitiveString: reduce allocations
  • KTOR-9385 Netty: Allocation micro-optimizations
  • KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
  • KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

  • KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
  • KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
  • KTOR-9437 Fix GraalVM Compatibility
  • KTOR-9424 Logging: OkHttp format should log the full requested URL
  • KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
  • KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
  • KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
  • KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
  • KTOR-5977 Compression: The encoders buffer streaming response
  • KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
  • KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
  • KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
  • KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
  • KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
  • KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
  • KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
  • KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

3.4.1

Published 3 March 2026

Improvements

... (truncated)

Changelog

Sourced from io.ktor:ktor-serialization-kotlinx-json's changelog.

3.4.3

Published 22 April 2026

Bugfixes

  • KTOR-9451 OpenAPI schema inference not working for custom nested generics
  • KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
  • KTOR-9463 OpenAPI: schema inference StackOverflow
  • KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
  • KTOR-8989 Shared engine is closed when a client created with config method is closed
  • KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
  • KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
  • KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
  • KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
  • KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
  • KTOR-9476 Unable to update/remove session data if no response content
  • KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, can...

    Description has been truncated

@dependabot
chore(deps): Bump ktor-version from 3.2.3 to 3.4.3
e7a26ac 
Bumps `ktor-version` from 3.2.3 to 3.4.3.

Updates `io.ktor:ktor-server-core-jvm` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor:ktor-server-netty` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor:ktor-server-test-host` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor:ktor-server-content-negotiation` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor:ktor-serialization-kotlinx-json` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor:ktor-client-logging` from 3.2.3 to 3.4.3
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.2.3...3.4.3)

Updates `io.ktor.plugin` from 3.2.3 to 3.4.3

---
updated-dependencies:
- dependency-name: io.ktor:ktor-server-core-jvm
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor:ktor-server-netty
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor:ktor-server-test-host
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor:ktor-server-content-negotiation
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor:ktor-serialization-kotlinx-json
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor:ktor-client-logging
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.ktor.plugin
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 27, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 27, 2026 23:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 27, 2026
@dependabot dependabot Bot mentioned this pull request Apr 27, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants