JavaMelody 1.88.0 released

[evernat]

JavaMelody 1.88.0 was released. The release is available for download here:
https://github.com/javamelody/javamelody/releases

Release notes:

1.88.0 with enhanced security of the monitoring page using Content-Security-Policy

• fix #1025 Missing property descriptions from spring-configuration-metadata.json.
• fix #1005 404 not found for some resources on Spring boot management endpoint.
• fix #996 NPE logged when undeploying with WebLogic 12.2.1.4
• added support for Eclipse OpenJ9 JVM heap dump #1024
• externalize some css and js (based on PR 966, thanks to Craig Andrews)
• work towards Content-Security-Policy (PR 1006, PR 1007, PR 1008, PR 1009, PR 1030 based on PR 966 thanks to Craig Andrews + fixes)
• added to enhance security, Content-Security-Policy is now enabled by default in the monitoring page. The parameter content-security-policy-enabled can be set to false to disable it. (PR 1031 thanks to Craig Andrews)
• remove defaultAutoCommit attribute from datasource example for the Liferay plugin (#10).
• updated Chinese traditional (Taïwan) translations, (language "zh-TW", ac883fa, thanks to Jack)
• In the optional collect server, upgraded winstone/jetty (9.4.42.v20210604, requires Java 8) and log4j (bd0138b)

1.87.0

• Drop support of Java 1.6. The minimum required Java version is 1.7 (e12d9c7).
• You can still use javamelody 1.86.0 for Java 1.6.
• fix when using aggegrations of monitored applications in the optional collect server, hits counted twice and hits are increasing with all the hits of monitored applications each minute if the collect server is not restarted after adding the aggregation (f77e5d6, 93ac1b0).
• fix ConcurrentModificationException when using aggregations of aggregations in the optional collect server (29089ad).
• fix html page truncated when using Real User Monitoring with the javamelody parameter rum-enabled and when the content length of the reponse is set (PR 964, thanks to Craig Andrews).
• fix JENKINS-63974, NPE when shutting down Jenkins
• fix JENKINS-64074, links in the Administer page categorized in "Status Information"
• added: In Jenkins, the Overall/SystemRead permission now allows to view the monitoring pages of the monitoring plugin. To have this permission, you need the extended read permission plugin. But the Overall/SystemRead permission does not allow to run state changing actions such as Run GC, Take heap dump or Destroy http sessions (the Administer permission is still needed for these actions). JENKINS-62432.
• in the javamelody-spring-boot-starter, added @ConditionalOnMissingBean on SchedulerFactoryBeanCustomizer (PR 973, thanks to opera4130).
• added thousand separator for numbers in the MBeans report (PR 979, thanks to Fabio Boldrini).
• added new javamelody parameter datadog-api-host for specifying Datadog base API host such as api.datadoghq.eu (api.datadoghq.com by default, see doc, PR 971, thanks to Michal Kebrt).
• added new javamelody parameter statsd-prefix for the prefix of the metric names in StatsD (javamelody.context.host. by default and where context and host gets replaced by the actual values, see doc, PR 970, thanks to Michal Kebrt).
• fix the example of JSP page for custom Prometheus metrics, by adding <%@ page session="false"%>
• added Dutch translations (language "nl", 1972369, thanks to Joris)
• added Chinese traditional (Taïwan) translations, (language "zh-TW", 63dd373, thanks to Jack)
• updated Czech translations, (language "cs", 4cee901, thanks to Kamil Steinbach)
• To contribute in your own language, join the translation project at https://poeditor.com/join/project/QIaCp4bThS.

The Jenkins plugin, the JIRA, Confluence, Bamboo and Bitbucket plugin, the Liferay plugin, the Alfresco plugin, the Sonar plugin were also released. (Not yet for the Grails plugin)

bye, Emeric