* Block gadget type for CVE-2019-12384
* Block gadget type CVE-2019-12814
* new classes blocked in SubTypeValidator.DEFAULT_NO_DESER_CLASS_NAMES,
which we use from Akka so updating the dependency is enough
* Use SPDX short identifier for license
The SPDX license list (https://spdx.org/licenses/) defines a standard
for identifying licenses that allows tooling to unambiguously identify a
license. This changes Akka to use the SPDX short identifier for the
Apache 2 license.
Any developer wishing to publish their own build of Akka to bintray will
need to make this change, as bintray uses the SPDX short identifier to
verify that artifacts being published to free accounts are indeed open
source. So this will make it easier for people to publish their own
builds.
* Update Apache license URL
Co-Authored-By: Arnout Engelen <github@bzzt.net>
We've released 2.5.23 for 2.13 with 0.4.0 but this changes the default
behavior. This reverts that so the first release we are binary compat
for 2.13 will be 2.5.24.
For 2.6 we can still perhaps upgrade
to 0.4.0 and document or override the new behavior.
Refs #27142
* Upgrade to Aeron 1.19.1
No mention of on the wire incompatibilities in release notes for
versions 1.15->1.19
* fix compilation issue with new aeron
* Set default publication unblock timeout to 40s
This needs to be bigger than the liveness timeout. Aeron
defaults these to 5seconds and 10seconds. Akka uses 20s
for the liveness so use 40s for the unblock to keep the same
relation between the properties as Aeron has.
* Add publication unblock timeout in sharedmedia driver
* Update akka-remote/src/main/scala/akka/remote/artery/ArterySettings.scala
Co-Authored-By: Helena Edelson <helena@users.noreply.github.com>
* No clear advantage over CBOR
* One less choice for users
* CBOR seems to have a stronger specification and therefore potential
for wider adoption
* Performance of CBOR is equals to Smile
* Smile can be slightly more compact
(I think it does more to reduce repeated field names),
but that might be better to solve with good compression
* Netty is not optional for multi jvm test kit
Netty is used internally and is always loaded even if artery is enabled.
That could be improved but for now netty is needed.
This fixes the Akka HTTP against master build
Note that it will become fully stable in 2.6.0 so this doesn't mean that there will be no more API changes.
* Remove from event sourced behavior
* Remove api may change settings from typed modules
* Dont check mima for typed until 2.6
* Thought that the `crossScalaVersions -= Dependencies.scala213Version` in
the akka-serialization-jackson project would work also for the +buildRelease, but
in dry-run it didn't so building twice with explicit Scala versions instead.
* akka-serialization-jackson is then excluded from the aggregate for 2.13
* Copied from Lagom, with the following differences
* Jsonable and CompressedJsonable not included
* pcollection and guava modules not enabled by default
* added scala and afterburner modules
* JSON, CBOR and Smile options (different serializers)
* JMH benchmark
* jackson version 2.9.9
* test polymorphism
* serializer for ActorRef
* Address serializer
* FiniteDuration serializer, same as java.time.Duration
* use blacklist from Jackson databind against gadgets
* disallow binding to open ended types, such as java.io.Serializable
* Configurable ObjectMapper ser/deser features
* testing date formats with WRITE_DATES_AS_TIMESTAMPS on/off
* ActorSystemSetup for ObjectMapper creation
* and possibility to lookup created ObjectMapper via ObjectMapperProvider extension
* createObjectMapper without ActorSystem, needed by Lagom test
* add basic docs
* skip Scala 2.13 for akka-serialization-jackson for now, until the Jackson
Scala module has been released
* akka.build.version property, #26958
* and use timestamped snapshot version if "timestamp" is passed in
* to support publishing snapshots with same version for Scala 2.12 and 2.13
with +publish
* remove stampVersion plugin, since it's no longer needed
* store currentDateTime in system property
* to survive reloads
* Remove akka-camel
This module has been deprecated since 2.5.0 and will now be removed in 2.6.
If there is interest it can be moved to a separate community-maintained repo.
* Add note to migration guide
* Remove from allModules as well
* Update MiMa: drop 2.4, add 2.5
We promise binary compatibility across minor versions, which would in theory
mean we should check compatibility between 2.4 and 2.6.
However, since 2.4 is EOL, we no longer guarantee bincompat with it. In
practice this should not make much of a difference, since only in rare cases
would a change be binary compatible with 2.5 but not with 2.4.
* Don't run 2.11 on travis
