Play 2.9.12

[mkurz]

We're excited to announce the release of Play 2.9.12! 🚀

📗 About this Release

This release upgrades Netty to address a large number of reported security vulnerabilities (CVEs), fixes a bug in the reverse router, improves Scala 3 support in routes files and - as always - updates dependencies. We strongly recommend upgrading at your earliest convenience.

If you're considering upgrading to Play 2.9, please check the Play 2.9 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 2.9.

Noteworthy Pull Requests

• Netty got upgraded to 4.1.138.Final, which fixes many CVEs (see the Netty security advisories): [2.9.x] netty-codec-http, netty-handler, ... 4.1.134.Final (was 4.1.133.Final) #13953, [2.9.x] netty-codec-http, netty-handler, ... 4.1.135.Final (was 4.1.134.Final) #13978, [2.9.x] netty-codec-http, netty-handler, ... 4.1.136.Final (was 4.1.135.Final) #14090, [2.9.x] netty-codec-http, netty-handler, ... 4.1.137.Final (was 4.1.136.Final) #14172, [2.9.x] netty-codec-http, netty-handler, ... 4.1.138.Final (was 4.1.137.Final) #14250 by @scala-steward
• [2.9.x] Fix reverse router for OptionalInt/Long/Double query params (backport #14252) by @arimu1 #14315 [2.9.x] Fix reverse router for OptionalInt/Long/Double query params (backport [3.0.x] Fix reverse router for OptionalInt/Long/Double query params #14252) by @arimu1
  Reverse routes with java.util.OptionalInt, OptionalLong or OptionalDouble query parameters dropped the parameter name and produced invalid URLs (e.g. ?111 instead of ?key=111).
• [2.9.x] Support Scala 3-style wildcard type arguments in routes files (backport #13972) by @jadenPete #13973 [2.9.x] Support Scala 3-style wildcard type arguments in routes files (backport Support Scala 3-style wildcard type arguments in routes files #13972) by @jadenPete
  In addition to _, routes files now also accept Scala 3's ? syntax for wildcard type arguments.

Following pull requests got merged for this release:

• [2.9.x] Fix reverse router for OptionalInt/Long/Double query params (backport #14252) by @arimu1 #14315 [2.9.x] Fix reverse router for OptionalInt/Long/Double query params (backport [3.0.x] Fix reverse router for OptionalInt/Long/Double query params #14252) by @arimu1
• [2.9.x] Pin lz4-java #14309 [2.9.x] Pin lz4-java by @mkurz
• [2.9.x] Patch updates #14296 [2.9.x] Patch updates by @scala-steward
• [2.9.x] sbt-buildinfo 0.13.2 (was 0.13.1) #14281 [2.9.x] sbt-buildinfo 0.13.2 (was 0.13.1) by @scala-steward
• [2.9.x] hibernate-core 6.6.58.Final (was 6.6.56.Final) #14284 [2.9.x] hibernate-core 6.6.58.Final (was 6.6.56.Final) by @scala-steward
• [2.9.x] Patch updates #14285 [2.9.x] Patch updates by @scala-steward
• [2.9.x] sbt-mima-plugin 1.2.1 (was 1.1.6) #14283 [2.9.x] sbt-mima-plugin 1.2.1 (was 1.1.6) by @scala-steward
• [2.9.x] netty-codec-http, netty-handler, ... 4.1.138.Final (was 4.1.137.Final) #14250 [2.9.x] netty-codec-http, netty-handler, ... 4.1.138.Final (was 4.1.137.Final) by @scala-steward
• [2.9.x] Patch updates #14237 [2.9.x] Patch updates by @scala-steward
• [2.9.x] h2 2.5.250 (was 2.4.240) #14234 [2.9.x] h2 2.5.250 (was 2.4.240) by @scala-steward
• [2.9.x] hibernate-core 6.6.56.Final (was 6.6.55.Final) #14216 [2.9.x] hibernate-core 6.6.56.Final (was 6.6.55.Final) by @scala-steward
• [2.9.x] Patch updates #14209 [2.9.x] Patch updates by @scala-steward
• [2.9.x] sbt, sbt-dependency-tree, ... 1.13.0 (was 1.12.15) #14208 [2.9.x] sbt, sbt-dependency-tree, ... 1.13.0 (was 1.12.15) by @scala-steward
• [2.9.x] Patch updates #14206 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #14202 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #14184 [2.9.x] Patch updates by @scala-steward
• [2.9.x] sbt-java-formatter 0.13.1 (was 0.12.0) #14161 [2.9.x] sbt-java-formatter 0.13.1 (was 0.12.0) by @scala-steward
• [2.9.x] Patch updates #14173 [2.9.x] Patch updates by @scala-steward
• [2.9.x] netty-codec-http, netty-handler, ... 4.1.137.Final (was 4.1.136.Final) #14172 [2.9.x] netty-codec-http, netty-handler, ... 4.1.137.Final (was 4.1.136.Final) by @scala-steward
• [2.9.x] hibernate-core 6.6.55.Final (was 6.6.54.Final) #14163 [2.9.x] hibernate-core 6.6.55.Final (was 6.6.54.Final) by @scala-steward
• [2.9.x] sbt-bill-of-materials 1.1.1 (was 1.0.2) #14162 [2.9.x] sbt-bill-of-materials 1.1.1 (was 1.0.2) by @scala-steward
• [2.9.x] Patch updates #14147 [2.9.x] Patch updates by @scala-steward
• [2.9.x] logback-classic 1.6.1 (was 1.5.38) #14146 [2.9.x] logback-classic 1.6.1 (was 1.5.38) by @scala-steward
• [2.9.x] Patch updates #14106 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #14063 [2.9.x] Patch updates by @scala-steward
• [2.9.x] netty-codec-http, netty-handler, ... 4.1.136.Final (was 4.1.135.Final) #14090 [2.9.x] netty-codec-http, netty-handler, ... 4.1.136.Final (was 4.1.135.Final) by @scala-steward
• [2.9.x] sbt-ci-release 0.12.0 #14067 [2.9.x] sbt-ci-release 0.12.0 by @mkurz
• [2.9.x] hibernate-core 6.6.54.Final (was 6.6.53.Final) #14047 [2.9.x] hibernate-core 6.6.54.Final (was 6.6.53.Final) by @scala-steward
• [2.9.x] Patch updates #14044 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #14041 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Bump actions/checkout from 6 to 7 #14034 [2.9.x] Bump actions/checkout from 6 to 7 by @dependabot[bot]
• [2.9.x] Patch updates #14030 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Pin jQuery #14022 [2.9.x] Pin jQuery by @mkurz
• [2.9.x] Pin sbt 1 #14021 [2.9.x] Pin sbt 1 by @mkurz
• [2.9.x] Patch updates #14016 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #14003 [2.9.x] Patch updates by @scala-steward
• [2.9.x] Patch updates #13999 [2.9.x] Patch updates by @scala-steward
• [2.9.x] hibernate-core 6.6.53.Final (was 6.6.52.Final) #13991 [2.9.x] hibernate-core 6.6.53.Final (was 6.6.52.Final) by @scala-steward
• [2.9.x] Patch updates #13979 [2.9.x] Patch updates by @scala-steward
• [2.9.x] netty-codec-http, netty-handler, ... 4.1.135.Final (was 4.1.134.Final) #13978 [2.9.x] netty-codec-http, netty-handler, ... 4.1.135.Final (was 4.1.134.Final) by @scala-steward
• [2.9.x] Support Scala 3-style wildcard type arguments in routes files (backport #13972) by @jadenPete #13973 [2.9.x] Support Scala 3-style wildcard type arguments in routes files (backport Support Scala 3-style wildcard type arguments in routes files #13972) by @jadenPete
• [2.9.x] Patch updates #13970 [2.9.x] Patch updates by @scala-steward
• [2.9.x] hibernate-core 6.6.52.Final (was 6.6.51.Final) #13964 [2.9.x] hibernate-core 6.6.52.Final (was 6.6.51.Final) by @scala-steward
• [2.9.x] Patch updates #13961 [2.9.x] Patch updates by @scala-steward
• [2.9.x] hibernate-core 6.6.51.Final (was 6.6.50.Final) #13956 [2.9.x] hibernate-core 6.6.51.Final (was 6.6.50.Final) by @scala-steward
• [2.9.x] netty-codec-http, netty-handler, ... 4.1.134.Final (was 4.1.133.Final) #13953 [2.9.x] netty-codec-http, netty-handler, ... 4.1.134.Final (was 4.1.133.Final) by @scala-steward

For more details see the full list of changes.

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

---

This discussion was created from the release Play 2.9.12.