Release 4.16.1

.github/workflows/ci.yml

@@ -59,9 +59,9 @@ jobs:
         if: matrix.jdk == '8' && github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.ref != 'refs/heads/development'
         run: mvn checkstyle::check
 
-      - name: Deploy
-        if: matrix.jdk == '8' && github.event_name == 'push' && github.ref != 'refs/heads/master' && github.ref != 'refs/heads/development'
-        run: mvn --batch-mode deploy -P test
+#      - name: Deploy
+#       if: matrix.jdk == '8' && github.event_name == 'push' && github.ref != 'refs/heads/master' && github.ref != 'refs/heads/development'
+#        run: mvn --batch-mode deploy -P test
 
       - name: SonarQube Scan (Push)
         if: matrix.jdk == '11' && github.event_name == 'push' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/development')

CHANGES.txt

@@ -1,3 +1,8 @@
+4.16.1 (Jul 21, 2025)
+- Fixed vulnerabilities: 
+    - Upgraded org.apache.commons-commons-lang3 to 3.18.0
+    - Upgraded com.google.code.gson.gson to 2.13.1
+
 4.16.0 (May 28, 2025)
 - Added support for rule-based segments. These segments determine membership at runtime by evaluating their configured rules against the user attributes provided to the SDK.
 - Added support for feature flag prerequisites. This allows customers to define dependency conditions between flags, which are evaluated before any allowlists or targeting rules.

client/pom.xml

@@ -5,9 +5,9 @@
     <parent>
         <groupId>io.split.client</groupId>
         <artifactId>java-client-parent</artifactId>
-        <version>4.16.0</version>
+        <version>4.16.1</version>
     </parent>
-    <version>4.16.0</version>
+    <version>4.16.1</version>
     <artifactId>java-client</artifactId>
     <packaging>jar</packaging>
     <name>Java Client</name>
@@ -19,12 +19,15 @@
             <build>
                 <plugins>
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.3</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <skipNexusStagingDeployMojo>false</skipNexusStagingDeployMojo>
+                            <ignorePublishedComponents>true</ignorePublishedComponents>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>false</autoPublish>
+                            <waitUntil>published</waitUntil>
                         </configuration>
                     </plugin>
                 </plugins>
@@ -173,7 +176,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.9.0</version>
+            <version>2.13.1</version>
         </dependency>
         <dependency>
             <groupId>org.yaml</groupId>
@@ -185,7 +188,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.4</version>
+            <version>3.18.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>

client/src/main/java/io/split/client/events/EventsSender.java

@@ -12,7 +12,7 @@
 import java.net.URISyntaxException;
 import java.util.List;
 
-import static com.google.gson.internal.$Gson$Preconditions.checkNotNull;
+import static com.google.common.base.Preconditions.checkNotNull;
 
 public class EventsSender {
 

client/src/main/java/io/split/client/events/InMemoryEventsStorage.java

@@ -12,7 +12,7 @@
 import java.util.concurrent.BlockingQueue;
 import java.util.concurrent.LinkedBlockingQueue;
 
-import static com.google.gson.internal.$Gson$Preconditions.checkNotNull;
+import static com.google.common.base.Preconditions.checkNotNull;
 
 public class InMemoryEventsStorage implements EventsStorage{
 

client/src/main/java/io/split/client/impressions/UniqueKeysTrackerImp.java

@@ -117,7 +117,7 @@ private void sendUniqueKeys(){
         }
         try {
             if (uniqueKeysTracker.size() == 0) {
-                _log.warn("The Unique Keys Tracker is empty");
+                _log.debug("The Unique Keys Tracker is empty");
                 return;
             }
             HashMap<String, HashSet<String>> uniqueKeysHashMap = popAll();

client/src/main/java/io/split/storages/memory/RuleBasedSegmentCacheInMemoryImp.java

@@ -104,6 +104,6 @@ public Set<String> getSegments() {
 
     @Override
     public boolean contains(Set<String> ruleBasedSegmentNames) {
-        return getSegments().containsAll(ruleBasedSegmentNames);
+        return _concurrentMap.keySet().containsAll(ruleBasedSegmentNames);
     }
 }

client/src/main/java/io/split/storages/pluggable/adapters/UserCustomRuleBasedSegmentAdapterConsumer.java

@@ -96,7 +96,7 @@ private List<ParsedRuleBasedSegment> stringsToParsedRuleBasedSegments(List<Strin
 
     @Override
     public boolean contains(Set<String> ruleBasedSegmentNames) {
-        return getSegments().containsAll(ruleBasedSegmentNames);
+        return _userStorageWrapper.getKeysByPrefix(PrefixAdapter.buildGetAllRuleBasedSegment()).containsAll(ruleBasedSegmentNames);
     }
 
 }

client/src/test/java/io/split/storages/memory/RuleBasedSegmentCacheInMemoryImplTest.java

@@ -16,6 +16,8 @@
 import com.google.common.collect.Lists;
 
 import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.HashSet;
 import java.util.List;
 
 public class RuleBasedSegmentCacheInMemoryImplTest extends TestCase {
@@ -31,6 +33,8 @@ public void testAddAndDeleteSegment(){
         ruleBasedSegmentCache.update(Lists.newArrayList(parsedRuleBasedSegment), null, 123);
         assertEquals(123, ruleBasedSegmentCache.getChangeNumber());
         assertEquals(parsedRuleBasedSegment, ruleBasedSegmentCache.get("sample_rule_based_segment"));
+        assertTrue(ruleBasedSegmentCache.contains(new HashSet<>(Arrays.asList("sample_rule_based_segment"))));
+        assertFalse(ruleBasedSegmentCache.contains(new HashSet<>(Arrays.asList("sample_rule_based_segment", "123"))));
 
         ruleBasedSegmentCache.update(null, Lists.newArrayList("sample_rule_based_segment"), 124);
         assertEquals(124, ruleBasedSegmentCache.getChangeNumber());
@@ -62,5 +66,7 @@ public void testMultipleSegment(){
         ruleBasedSegmentCache.update(Lists.newArrayList(parsedRuleBasedSegment1, parsedRuleBasedSegment2), null, 123);
         assertEquals(Lists.newArrayList("another_rule_based_segment", "sample_rule_based_segment"), ruleBasedSegmentCache.ruleBasedSegmentNames());
         assertEquals(Sets.newHashSet("segment2", "segment1", "employees"), ruleBasedSegmentCache.getSegments());
+        assertTrue(ruleBasedSegmentCache.contains(new HashSet<>(Arrays.asList("sample_rule_based_segment", "another_rule_based_segment"))));
+        assertTrue(ruleBasedSegmentCache.contains(new HashSet<>(Arrays.asList("sample_rule_based_segment"))));
     }
 }

client/src/test/java/io/split/storages/pluggable/adapters/UserCustomRuleBasedSegmentAdapterConsumerTest.java

@@ -1,6 +1,7 @@
 package io.split.storages.pluggable.adapters;
 
 import com.google.common.collect.Lists;
+import com.google.common.collect.Maps;
 import io.split.client.dtos.*;
 import io.split.client.utils.Json;
 import io.split.engine.ConditionsTestUtil;
@@ -16,10 +17,14 @@
 import java.lang.reflect.Field;
 import java.lang.reflect.Modifier;
 import java.util.*;
+import java.util.concurrent.ConcurrentMap;
+import java.util.concurrent.atomic.AtomicLong;
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
 
 import static io.split.TestHelper.makeRuleBasedSegment;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
 
 public class UserCustomRuleBasedSegmentAdapterConsumerTest {
 
@@ -66,10 +71,16 @@ public void testGetChangeNumberWithGsonFailing() {
     public void testGetRuleBasedSegment() {
         RuleBasedSegmentParser ruleBasedSegmentParser = new RuleBasedSegmentParser();
         RuleBasedSegment ruleBasedSegment = getRuleBasedSegment(RULE_BASED_SEGMENT_NAME);
+        ParsedRuleBasedSegment expected = ruleBasedSegmentParser.parse(ruleBasedSegment);
+        ConcurrentMap<String, ParsedRuleBasedSegment> rbsCollection = Maps.newConcurrentMap();
+        rbsCollection.put(RULE_BASED_SEGMENT_NAME, expected);
         Mockito.when(_userStorageWrapper.get(PrefixAdapter.buildRuleBasedSegmentKey(RULE_BASED_SEGMENT_NAME))).thenReturn(getRuleBasedSegmentAsJson(ruleBasedSegment));
+        Mockito.when(_userStorageWrapper.getKeysByPrefix("SPLITIO.rbsegment*")).thenReturn(new HashSet<>(Arrays.asList(RULE_BASED_SEGMENT_NAME)));
         ParsedRuleBasedSegment result = _userCustomRuleBasedSegmentAdapterConsumer.get(RULE_BASED_SEGMENT_NAME);
-        ParsedRuleBasedSegment expected = ruleBasedSegmentParser.parse(ruleBasedSegment);
         Assert.assertEquals(expected, result);
+        assertTrue(_userCustomRuleBasedSegmentAdapterConsumer.contains(new HashSet<>(Arrays.asList(RULE_BASED_SEGMENT_NAME))));
+        assertFalse(_userCustomRuleBasedSegmentAdapterConsumer.contains(new HashSet<>(Arrays.asList(RULE_BASED_SEGMENT_NAME, "123"))));
+
     }
 
     @Test
@@ -135,7 +146,7 @@ public void testGetSegments() {
         Mockito.when(_userStorageWrapper.getMany(Mockito.anyObject())).
                 thenReturn(getManyExpected);
         HashSet<String> segmentResult = (HashSet<String>) _userCustomRuleBasedSegmentAdapterConsumer.getSegments();
-        Assert.assertTrue(segmentResult.contains("employee"));
+        assertTrue(segmentResult.contains("employee"));
     }
 
     @Test

okhttp-modules/pom.xml

@@ -5,10 +5,10 @@
     <parent>
         <artifactId>java-client-parent</artifactId>
         <groupId>io.split.client</groupId>
-        <version>4.16.0</version>
+        <version>4.16.1</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
-    <version>4.16.0</version>
+    <version>4.16.1</version>
     <artifactId>okhttp-modules</artifactId>
     <packaging>jar</packaging>
     <name>http-modules</name>
@@ -20,12 +20,15 @@
             <build>
                 <plugins>
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.3</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <skipNexusStagingDeployMojo>false</skipNexusStagingDeployMojo>
+                            <ignorePublishedComponents>true</ignorePublishedComponents>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>false</autoPublish>
+                            <waitUntil>published</waitUntil>
                         </configuration>
                     </plugin>
                 </plugins>

pluggable-storage/pom.xml

@@ -6,7 +6,7 @@
     <parent>
         <artifactId>java-client-parent</artifactId>
         <groupId>io.split.client</groupId>
-        <version>4.16.0</version>
+        <version>4.16.1</version>
     </parent>
 
     <version>2.1.0</version>
@@ -21,15 +21,15 @@
             <build>
                 <plugins>
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.3</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <serverId>ossrh</serverId>
-                            <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                            <autoReleaseAfterClose>true</autoReleaseAfterClose>
-                            <skipNexusStagingDeployMojo>true</skipNexusStagingDeployMojo>
+                            <ignorePublishedComponents>true</ignorePublishedComponents>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>false</autoPublish>
+                            <waitUntil>published</waitUntil>
                         </configuration>
                     </plugin>
                 </plugins>

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>io.split.client</groupId>
     <artifactId>java-client-parent</artifactId>
-    <version>4.16.0</version>
+    <version>4.16.1</version>
     <dependencyManagement>
         <dependencies>
             <dependency>
@@ -47,31 +47,14 @@
         <developerConnection>scm:git@github.com:splitio/java-client.git</developerConnection>
         <url>git@github.com:splitio/java-client.git</url>
     </scm>
-    <distributionManagement>
-        <snapshotRepository>
-            <id>ossrh</id>
-            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-        <repository>
-            <id>ossrh</id>
-            <url>https://oss.sonatype.org/content/repositories/releases</url>
-        </repository>
-    </distributionManagement>
+    <!-- distributionManagement block removed as it's not needed with central-publishing-maven-plugin -->
     <repositories>
         <repository>
             <id>ossrh</id>
             <url>https://oss.sonatype.org/content/repositories/releases</url>
         </repository>
-        <repository>
-            <id>maven-all-virtual</id>
-            <url>https://splitio.jfrog.io/artifactory/maven-all-virtual</url>
-        </repository>
     </repositories>
     <pluginRepositories>
-        <pluginRepository>
-            <id>maven-all-virtual</id>
-            <url>https://splitio.jfrog.io/artifactory/maven-all-virtual</url>
-        </pluginRepository>
     </pluginRepositories>
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -154,16 +137,6 @@
     <profiles>
         <profile>
             <id>test</id>
-            <distributionManagement>
-                <repository>
-                    <id>maven-dev</id>
-                    <url>https://splitio.jfrog.io/artifactory/maven-dev/</url>
-                </repository>
-                <snapshotRepository>
-                    <id>maven-dev</id>
-                    <url>https://splitio.jfrog.io/artifactory/maven-dev/</url>
-                </snapshotRepository>
-            </distributionManagement>
             <build>
                 <plugins>
                     <plugin>
@@ -188,16 +161,7 @@
 
         <profile>
             <id>release</id>
-            <distributionManagement>
-                <snapshotRepository>
-                    <id>ossrh</id>
-                    <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-                </snapshotRepository>
-                <repository>
-                    <id>ossrh</id>
-                    <url>https://oss.sonatype.org/content/repositories/releases</url>
-                </repository>
-            </distributionManagement>
+            <!-- distributionManagement block removed as it's not needed with central-publishing-maven-plugin -->
             <build>
                 <plugins>
                     <plugin>
@@ -230,16 +194,16 @@
                             </execution>
                         </executions>
                     </plugin>
-                    <!-- Release plugin -->
+                    <!-- Central Repository publishing plugin -->
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.3</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <serverId>ossrh</serverId>
-                            <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                            <autoReleaseAfterClose>true</autoReleaseAfterClose>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>false</autoPublish>
+                            <waitUntil>published</waitUntil>
                         </configuration>
                     </plugin>
                 </plugins>

redis-wrapper/pom.xml

@@ -6,7 +6,7 @@
     <parent>
         <artifactId>java-client-parent</artifactId>
         <groupId>io.split.client</groupId>
-        <version>4.16.0</version>
+        <version>4.16.1</version>
     </parent>
     <artifactId>redis-wrapper</artifactId>
     <version>3.1.1</version>
@@ -43,15 +43,15 @@
             <build>
                 <plugins>
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.3</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <serverId>ossrh</serverId>
-                            <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                            <autoReleaseAfterClose>true</autoReleaseAfterClose>
-                            <skipNexusStagingDeployMojo>true</skipNexusStagingDeployMojo>
+                            <ignorePublishedComponents>true</ignorePublishedComponents>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>false</autoPublish>
+                            <waitUntil>published</waitUntil>
                         </configuration>
                     </plugin>
                 </plugins>