Releases

v3.0.0

The 3.0.x series is considered a development release while the protocol HTTP application and controller interfaces stabilize.

Breaking Require Ruby 3.3 or later.
Breaking Replace the Rack-centric application boundary with class Utopia::Application and Protocol::HTTP::Middleware. Applications now use config/application.rb and config/serve.rb instead of config.ru.
Breaking Separate complete protocol responses from semantic controller results. Use respond! with a Protocol::HTTP::Response, or succeed! with a value serialized by module Utopia::Controller::Respond.
Parse request bodies at the controller layer using protocol-content, independently of URL query parameters.
Resolve localization through immutable request preferences, avoiding repeated internal controller requests.
Split redirection handling into focused middleware for rewrites, moved resources, directory indexes, and error documents.
Security Fix handling of redirects that start with // to prevent open redirect vulnerabilities.
Normalize request URLs using Protocol::URL and use structured paths throughout the middleware stack.
Resolve static files through encoded URL paths, with improved HEAD, range, and validator handling.
Use protocol-media and protocol-http for response and language negotiation, removing the http-accept dependency.

Add agent context.
Better simplification of relative paths, e.g. ../../foo is not modified to foo.
Move top level classes into class Middleware in their respective namespaces.
Move Utopia::Responder into Utopia::Controller layer.