Issues

• JsonToXml depends on org.json, which core only gets transitively through jedis

  dependencies
  membrane/api-gateway#3760 · Filter by author predic8 opened on Nov 11, 2026
  

• json2Xml without xmlSchema answers invalid JSON in the request flow with 500 instead of 400

  bug
  membrane/api-gateway#3759 · Filter by author predic8 opened on Nov 11, 2026
  

• json2Xml without xmlSchema accepts invalid JSON and drops trailing input

  bug
  membrane/api-gateway#3758 · Filter by author predic8 opened on Nov 11, 2026
  

• membrane.cmd does not resolve a relative log4j.configurationFile against MEMBRANE_HOME

  membrane/api-gateway#3755 · Filter by author rrayst opened on Nov 9, 2026

• stompProxy rejects the STOMP 1.2 STOMP frame

  membrane/api-gateway#3752 · Filter by author predic8 opened on Nov 8, 2026

• Body streaming and copies: decide on request body retention, retries: 0 and limit

  Prio-1
  membrane/api-gateway#3750 · Filter by author predic8 opened on Nov 7, 2026

• Attribute message-content failures to their message, not to the flow, with one exception type

  Prio-1
  membrane/api-gateway#3739 · Filter by author predic8 opened on Nov 7, 2026

• Unparsable Content-Type header: body decoding answers 500 and logs an error

  membrane/api-gateway#3737 · Filter by author predic8 opened on Nov 7, 2026

• limit drops the body of chunked messages

  membrane/api-gateway#3722 · Filter by author predic8 opened on Nov 5, 2026

• Close decoded body streams after reading them

  membrane/api-gateway#3721 · Filter by author predic8 opened on Nov 5, 2026
  

• Read retained request body before sending headers, so requests over limit are rejected before reaching the backend

  membrane/api-gateway#3706 · Filter by author predic8 opened on Nov 4, 2026
  

• limit: XOP/MTOM message forwarded as XML with the multipart Content-Type

  membrane/api-gateway#3691 · Filter by author predic8 opened on Nov 3, 2026
  

• limit: HEAD and 304 responses rejected because of their Content-Length

  membrane/api-gateway#3690 · Filter by author predic8 opened on Nov 3, 2026
  

• limit: rejection answered with 500, documented as 400

  membrane/api-gateway#3689 · Filter by author predic8 opened on Nov 3, 2026
  

• prometheus: optionally export basic JVM metrics

  enhancement
  membrane/api-gateway#3688 · Filter by author predic8 opened on Nov 3, 2026
  

• Don't log query strings at info/warn/error

  membrane/api-gateway#3685 · Filter by author predic8 opened on Nov 3, 2026
  1

  

• HTTP/2 client: a closed stream does not wake request-body writers waiting for flow-control window

  membrane/api-gateway#3648 · Filter by author rrayst opened on Oct 30, 2026

• Tests: validate all tutorial and example configs against the JSON schema

  Merge pending
  membrane/api-gateway#3615 · Filter by author christiangoerdes opened on Oct 28, 2026
  

• rewriter: relative redirect can become protocol-relative (//host) through a captured group (open redirect)

  membrane/api-gateway#3589 · Filter by author rrayst opened on Oct 26, 2026

• Use Request.getRoutingPath() for matching in RewriteInterceptor

  membrane/api-gateway#3588 · Filter by author predic8 opened on Oct 26, 2026

• Document how path checks in if/choose see the request path, and consider exposing the routing path

  documentation
  membrane/api-gateway#3560 · Filter by author predic8 opened on Oct 20, 2026

• HttpClient used by DefaultMainComponents before init() is not configurable

  membrane/api-gateway#3529 · Filter by author rrayst opened on Oct 16, 2026

• Tutorial: production/security configuration (tutorials/operation)

  documentation
  membrane/api-gateway#3526 · Filter by author predic8 opened on Oct 16, 2026
  3

• Outbound proxy: honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY and http(s).proxyHost/http.nonProxyHosts

  Merge pending
  membrane/api-gateway#3524 · Filter by author predic8 opened on Oct 16, 2026
  1

  

• rewriter: default do not resolved for request URI, lazy getDo() state, duplicate log on bad URL

  membrane/api-gateway#3496 · Filter by author predic8 opened on Oct 14, 2026