This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-http.git
The following commit(s) were added to refs/heads/main by this push:
new ef1eca76a release notes for 1.4.1 (#1277)
ef1eca76a is described below
commit ef1eca76a85ae1ea2098abf411932dee159eabee
Author: PJ Fanning <[email protected]>
AuthorDate: Tue Oct 6 12:42:56 2026 +0100
release notes for 1.4.1 (#1277)
Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
---
.github/workflows/publish-1.4-docs.yml | 12 ++++++------
.../src/main/paradox/release-notes/releases-1.4.md | 22 ++++++++++++++++++++++
2 files changed, 28 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/publish-1.4-docs.yml
b/.github/workflows/publish-1.4-docs.yml
index 57c72aa73..06b29a28c 100644
--- a/.github/workflows/publish-1.4-docs.yml
+++ b/.github/workflows/publish-1.4-docs.yml
@@ -47,22 +47,22 @@ jobs:
- name: Build Documentation
run: |-
- sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version :=
\"1.4.0\"; docs/paradox; unidoc"
+ sbt -Dpekko.genjavadoc.enabled=true "set ThisBuild / version :=
\"1.4.1\"; docs/paradox; unidoc"
env:
JAVA_OPTS: "-verbose:gc -Xmx4g"
# Create directory structure upfront since rsync does not create
intermediate directories otherwise
- name: Create directory structure
run: |-
- mkdir -p target/nightly-docs/docs/pekko-http/1.4.0/
+ mkdir -p target/nightly-docs/docs/pekko-http/1.4.1/
mkdir -p target/nightly-docs/docs/pekko-http/1.4/
- cp -r docs/target/paradox/site/main/
target/nightly-docs/docs/pekko-http/1.4.0/docs
+ cp -r docs/target/paradox/site/main/
target/nightly-docs/docs/pekko-http/1.4.1/docs
cp -r docs/target/paradox/site/main/
target/nightly-docs/docs/pekko-http/1.4/docs
rm -r docs/target/paradox/site/main/
- cp -r target/scala-2.13/unidoc
target/nightly-docs/docs/pekko-http/1.4.0/api
+ cp -r target/scala-2.13/unidoc
target/nightly-docs/docs/pekko-http/1.4.1/api
cp -r target/scala-2.13/unidoc
target/nightly-docs/docs/pekko-http/1.4/api
rm -r target/scala-2.13/unidoc
- cp -r target/javaunidoc
target/nightly-docs/docs/pekko-http/1.4.0/japi
+ cp -r target/javaunidoc
target/nightly-docs/docs/pekko-http/1.4.1/japi
cp -r target/javaunidoc target/nightly-docs/docs/pekko-http/1.4/japi
rm -r target/javaunidoc
@@ -71,7 +71,7 @@ jobs:
with:
upload: true
switches: --archive --compress --update --delete --progress
--relative
- local_path: target/nightly-docs/./docs/pekko-http/1.4.0 # The
intermediate dot is to show `--relative` which paths to operate on
+ local_path: target/nightly-docs/./docs/pekko-http/1.4.1 # The
intermediate dot is to show `--relative` which paths to operate on
remote_path: ${{ secrets.NIGHTLIES_RSYNC_PATH }}/pekko/
remote_host: ${{ secrets.NIGHTLIES_RSYNC_HOST }}
remote_port: ${{ secrets.NIGHTLIES_RSYNC_PORT }}
diff --git a/docs/src/main/paradox/release-notes/releases-1.4.md
b/docs/src/main/paradox/release-notes/releases-1.4.md
index d4fc893ee..7f99abdc1 100644
--- a/docs/src/main/paradox/release-notes/releases-1.4.md
+++ b/docs/src/main/paradox/release-notes/releases-1.4.md
@@ -1,5 +1,27 @@
# 0. Release Notes (1.4.x)
+## 1.4.1
+
+Release notes for Apache Pekko HTTP 1.4.1. See [GitHub Milestone for
1.4.1](https://github.com/apache/pekko-http/milestone/16?closed=1) for a fuller
list of changes.
+
+This is a bug fix release. It includes a number of hardening changes to the
HTTP parsing and rendering code.
+
+### Bug Fixes
+* SSE: allow Unicode line terminators
([PR1186](https://github.com/apache/pekko-http/pull/1186))
+* Use `Locale.ROOT` for `toLowerCase`/`toUpperCase` and in the `RouteTest`
header lookup ([PR1224](https://github.com/apache/pekko-http/pull/1224))
+* Parse `Content-Length` as digits with surrounding whitespace only
([PR1243](https://github.com/apache/pekko-http/pull/1243))
+* Render `Content-Length` for HEAD responses with a declared length
([PR1244](https://github.com/apache/pekko-http/pull/1244))
+* HTTP/2: bound incoming header blocks with `max-header-list-size`
([PR1247](https://github.com/apache/pekko-http/pull/1247))
+* Count repeated `Connection` headers towards `max-header-count`
([PR1268](https://github.com/apache/pekko-http/pull/1268))
+* Compare path elements when checking that a served file is below the base
directory ([PR1269](https://github.com/apache/pekko-http/pull/1269))
+* Prevent CRLF injection through chunk trailers and extensions
([PR1270](https://github.com/apache/pekko-http/pull/1270))
+* HTTP/2: drop header fields containing CR, LF or NUL
([PR1271](https://github.com/apache/pekko-http/pull/1271))
+* Drop rendered headers containing NUL as well as CR and LF
([PR1272](https://github.com/apache/pekko-http/pull/1272))
+
+### Dependency Changes
+
+There are no dependency changes in this release.
+
## 1.4.0
Release notes for Apache Pekko HTTP 1.4.0. See [GitHub Milestone for
1.4.0](https://github.com/apache/pekko-http/milestone/13?closed=1) for a fuller
list of changes.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
