v2.2.0 includes some major functionality changes

* improved OAuth2 scope handling
* some refactors to allow advanced users to extend/override default
  Endpoints behavior (auth code, serialization)
* greatly improved resource usage by serializing the response object
  to stream instead of storing the whole result in memory first
* improved OpenAPI compatibility
* google-http-client is bumped to 1.25.0 to address vulnerabilities
* deprecate JsonMap schema generation in favor of using
  additionalProperties, the standard for JSON schema. This feature can
  be turned off by setting environment variable
  ENDPOINTS_MAP_FORCE_JSON_MAP_SCHEMA to true, or by setting the
  system property endpoints.mapSchema.forceJsonMapSchema to true. This
  new functionality can be further configured (see
  EndpointsFlag.java).
* add option to disable Jackson annotation integration. Set
  environment variable ENDPOINTS_JSON_USE_JACKSON_ANNOTATIONS to false
  or system property endpoints.json.useJacksonAnnotations to false.
* support multipart/form-data requests for requests that are all named
  parameters

v2.0.14 includes minor fixes and features

* re-add canonical name to discovery generation
* add description for enum constants used in parameters
* add retry logic for getting token info
* don't generate web accessible discovery for APIs that have
  discoverable set to false

v2.0.13

v2.0.13 fixes list path parameter deserialization

v2.0.12 adds minor improvements and bug fixes

* discovery parameterOrder more closely matches original behavior
* discovery now has enum description support
* schema properties can be documented via @ApiResourceProperty
* API Explorer now uses the new Google icon
* null exception messages no longer cause a server error

v2.0.10 fixes some minor bugs

* add support for rejecting requests for methods annotated
  AuthLevel.REQUIRED before it reaches backend code
* when JWT and API key requirements are configured, require both,
  rather than either
* add ServiceException.withLogLevel for setting a custom log level
  for exceptions

v2.0.9: v2.0.8 includes minor bug fixes

* parameterOrder is now set if query parameters exist, which should
  fix unstable parameter ordering in client libraries
* App Engine SDK version is bumped to 1.9.56
* OpenAPI spec generation uses the new Google extensions for auth

v2.0.8 adds rate limiting annotations and bug fixes

* Rate limiting annotations ApiLimitMetric and ApiMetricCost. These
  are provide config only. Implementation will be provided by the
  endpoints-management libraries.
* Unsupported HTTP methods will now fail more gracefully, rather than
  displaying a stacktrace to the caller.
* proxy.html for the Google JavaScript API client should now load
  slightly faster, due to not having to substitute a base path.

v2.0.7: bump version to 2.0.7

* Bug fix for hostname and base path reversal for command line
  introduced in 2.0.6
* Transformed types are now treated correctly when used in array types

v2.0.6 includes some minor changes

* move user id logging to FINE
* make GoogleAuth#getAuthToken() public so Authenticators can use it
* add hostname and base path flags to all EndpointsTool commands
* hide resource fields that have all private members (instance field,
  accessor, and mutator). Previously, a private mutator would make the
  resource field public.

v2.0.5 contains several bug fixes

* use web-safe base64 encoding for byte arrays
* append path parameters to canonical path for discovery generation
* fix empty servicePath not being present in discovery docs
* set X-Frame-Options in proxy.html handler