April 2026 monthly summary for confluentinc/rest-utils: Security hardening patch to prevent leakage of sensitive headers during cross-origin redirects (CVE-2026-40490) by upgrading async-http-client to 2.14.5. The change introduces no breaking API changes and focuses on security without affecting runtime behavior. The upgrade is applied in test-scoped dependencies via rest-utils-test. Commit: b31a035b09857889a0e967ef79c25bd967194b08 describes the patch and rationale.

September 2025 monthly summary for confluentinc/rest-utils: Delivered a feature enabling extraction and exposure of PROXY protocol v2 TLVs, extending protocol-level visibility beyond IPs and ports. Implemented ProxyCustomizer to extract TLVs from PROXY v2 headers, enhanced ProxyConnectionFactory to parse TLVs, and exposed them via TlvProvider on HttpServletRequest for downstream components to access protocol-level information. This foundation enables richer telemetry, policy decisions, and auditing across services with minimal changes to existing code paths.

June 2025 monthly summary for the confluentinc/rest-utils repository. Focused on delivering proxy TLV access enhancements via new customization points, with testing updates and groundwork for TLV-based proxy features. This strengthens proxy configurability and TLV handling in enterprise proxy scenarios.

April 2025 monthly summary focusing on key accomplishments and business value. Primary focus was modernizing the Kafka REST test suite to reflect Kraft-only Kafka deployments, removing ZooKeeper dependencies, and ensuring CI reliability in production-aligned configurations.