{"id":1538,"name":"io.netty:netty-codec-http2","ecosystem":"maven","repository_url":"https://github.com/netty/netty","issues_count":222,"created_at":"2025-06-06T15:01:45.655Z","updated_at":"2025-06-06T15:01:45.655Z","purl":"pkg:maven/io.netty:netty-codec-http2","metadata":{"id":5114309,"name":"io.netty:netty-codec-http2","ecosystem":"maven","description":"Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.","homepage":"http://netty.io/","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/netty/netty","keywords_array":[],"namespace":"io.netty","versions_count":149,"first_release_published_at":"2015-03-03T08:58:44.000Z","latest_release_published_at":"2025-06-05T06:31:08.000Z","latest_release_number":"4.2.2.Final","last_synced_at":"2025-06-05T23:31:44.069Z","created_at":"2022-08-01T03:44:40.692Z","updated_at":"2025-06-05T23:31:44.612Z","registry_url":"https://central.sonatype.com/artifact/io.netty/netty-codec-http2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/io.netty/netty-codec-http2/","metadata":{},"repo_metadata":{"uuid":"1064563","full_name":"netty/netty","owner":"netty","description":"Netty project - an event-driven asynchronous network application framework","archived":false,"fork":false,"pushed_at":"2023-10-19T09:24:18.000Z","size":81960,"stargazers_count":31953,"open_issues_count":585,"forks_count":15624,"subscribers_count":1763,"default_branch":"4.1","last_synced_at":"2023-10-19T10:31:32.364Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"http://netty.io","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/netty.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null},"funding":{"github":"netty","ko_fi":"netty_project","liberapay":"netty","patreon":"netty","custom":"https://paypal.me/nettyproject"}},"created_at":"2010-11-09T09:22:21.000Z","updated_at":"2023-10-20T22:01:41.144Z","dependencies_parsed_at":"2023-10-20T22:01:34.012Z","dependency_job_id":null,"html_url":"https://github.com/netty/netty","commit_stats":{"total_commits":10962,"total_committers":758,"mean_commits":"14.461741424802112","dds":0.7027914614121511,"last_synced_commit":"573aad16be1dc8a2156c51fa475a029af2c055d3"},"previous_names":[],"tags_count":270,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netty","download_url":"https://codeload.github.com/netty/netty/tar.gz/refs/heads/4.1","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":173446755,"owners_count":9974256,"icon_url":"https://github.com/github.png","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"netty","name":"The Netty Project","uuid":"473791","kind":"organization","description":"Opening the future of network programming since 2001","email":"netty@googlegroups.com","website":"http://netty.io/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/473791?v=4","repositories_count":13,"last_synced_at":"2023-03-11T11:25:41.908Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/netty","created_at":"2022-11-02T23:04:21.172Z","updated_at":"2023-03-11T11:25:41.923Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netty","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netty/repositories"},"tags":[{"name":"netty-4.1.100.Final","sha":"58df783eb4fc50f95a1061dc4274020d6804caf4","kind":"tag","published_at":"2023-10-10T13:31:07.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.100.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.100.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.100.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.100.Final/manifests"},{"name":"netty-4.1.99.Final","sha":"8e3fe284251d61543cfc37c6b061b63ce6946aaf","kind":"tag","published_at":"2023-09-28T07:07:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.99.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.99.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.99.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.99.Final/manifests"},{"name":"netty-4.1.98.Final","sha":"656dadf053b4426bc3a820d9a05f60ce33159ad1","kind":"tag","published_at":"2023-09-21T06:46:55.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.98.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.98.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.98.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.98.Final/manifests"},{"name":"netty-4.1.97.Final","sha":"711db30226a5d1f4c00c05702b9c6616b7b12c3c","kind":"tag","published_at":"2023-08-23T08:44:01.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.97.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.97.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.97.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.97.Final/manifests"},{"name":"netty-4.1.96.Final","sha":"3bd421cf9525d3b3f8de2a9f649dceb14c87eccf","kind":"tag","published_at":"2023-07-27T10:58:19.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.96.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.96.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.96.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.96.Final/manifests"},{"name":"netty-4.1.95.Final","sha":"e5ca0b0f0b74fd2459c85afff35a507fd9077a2c","kind":"tag","published_at":"2023-07-20T09:24:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.95.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.95.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.95.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.95.Final/manifests"},{"name":"netty-4.1.94.Final","sha":"da1a448d5bc4f36cc1744db93fcaf64e198db2bd","kind":"tag","published_at":"2023-06-20T12:54:21.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.94.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.94.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.94.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.94.Final/manifests"},{"name":"netty-4.1.93.Final","sha":"69270b102a6339ef3279e3f0755526db001850ef","kind":"tag","published_at":"2023-05-25T06:22:28.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.93.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.93.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.93.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.93.Final/manifests"},{"name":"netty-4.1.92.Final","sha":"acc352521ce3ef4200095404950f7d2b4808c4ef","kind":"tag","published_at":"2023-04-25T07:38:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.92.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.92.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.92.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.92.Final/manifests"},{"name":"netty-4.1.91.Final","sha":"d773f37e3422b8bc38429bbde94583173c3b7e4a","kind":"tag","published_at":"2023-04-03T10:18:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.91.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.91.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.91.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.91.Final/manifests"},{"name":"netty-4.1.90.Final","sha":"367d997a939181594873c4a846556263d4d9fe4e","kind":"tag","published_at":"2023-03-14T14:21:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.90.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.90.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.90.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.90.Final/manifests"},{"name":"netty-4.1.89.Final","sha":"263a745b93513b8f761daa007897af9ce57161ba","kind":"tag","published_at":"2023-02-13T14:58:40.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.89.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.89.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.89.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.89.Final/manifests"},{"name":"netty-4.1.88.Final","sha":"828ea7ceeb72a9e0c943df8b5fe634ce1bd9537f","kind":"tag","published_at":"2023-02-12T10:08:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.88.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.88.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.88.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.88.Final/manifests"},{"name":"netty-4.1.87.Final","sha":"53fa91f6f644f24bcd085fbeb64bfec01e8fb61e","kind":"tag","published_at":"2023-01-12T14:19:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.87.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.87.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.87.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.87.Final/manifests"},{"name":"netty-4.1.86.Final","sha":"cde0e2d0508013c57612f7241a6660010fa7116c","kind":"tag","published_at":"2022-12-12T13:06:25.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.86.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.86.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.86.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.86.Final/manifests"},{"name":"netty-4.1.85.Final","sha":"8a5b08dad5855c5ab202e9c51710b48509cc56fe","kind":"tag","published_at":"2022-11-09T17:21:43.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.85.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.85.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.85.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.85.Final/manifests"},{"name":"netty-4.1.84.Final","sha":"889f4fa9dc709b9845048006d4d2e7be6eb780e1","kind":"tag","published_at":"2022-10-11T23:14:41.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.84.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.84.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.84.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.84.Final/manifests"},{"name":"netty-4.1.83.Final","sha":"e81dc9098cb6bd0b76539f8476de0375024e6c21","kind":"tag","published_at":"2022-10-11T20:34:27.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.83.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.83.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.83.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.83.Final/manifests"},{"name":"netty-5.0.0.Alpha5","sha":"9e08fdb5c220884c2509d9497d56815982888c06","kind":"tag","published_at":"2022-09-28T12:48:31.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-5.0.0.Alpha5","html_url":"https://github.com/netty/netty/releases/tag/netty-5.0.0.Alpha5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha5/manifests"},{"name":"netty-4.1.82.Final","sha":"47799635143d7a11b56c4a4e9a1e65ca221d28ca","kind":"tag","published_at":"2022-09-13T19:12:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.82.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.82.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.82.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.82.Final/manifests"},{"name":"netty-4.1.81.Final","sha":"9794a35c292966b049d4975d66afdb80f5845729","kind":"tag","published_at":"2022-09-08T19:56:59.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.81.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.81.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.81.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.81.Final/manifests"},{"name":"netty-4.1.80.Final","sha":"906bb37a9bd007277d9a32d1b266a9515a20a457","kind":"tag","published_at":"2022-08-26T11:53:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.80.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.80.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.80.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.80.Final/manifests"},{"name":"netty-5.0.0.Alpha4","sha":"3a981d6adb39aee3d79a7dc03c2c00d8b92658ad","kind":"tag","published_at":"2022-07-22T09:45:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-5.0.0.Alpha4","html_url":"https://github.com/netty/netty/releases/tag/netty-5.0.0.Alpha4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha4/manifests"},{"name":"netty-4.1.79.Final","sha":"aa59245955f5121c4230d46c41a4b7f55e0c9ba7","kind":"tag","published_at":"2022-07-11T20:39:45.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.79.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.79.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.79.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.79.Final/manifests"},{"name":"netty-5.0.0.Alpha3","sha":"eb55bd71eb61f57c20ade9f20b3f4495005b8da3","kind":"tag","published_at":"2022-07-08T08:53:22.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-5.0.0.Alpha3","html_url":"https://github.com/netty/netty/releases/tag/netty-5.0.0.Alpha3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha3/manifests"},{"name":"netty-4.1.78.Final","sha":"c87c911c010c3a34a69e550d52299df20e5fc740","kind":"tag","published_at":"2022-06-14T22:10:33.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.78.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.78.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.78.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.78.Final/manifests"},{"name":"netty-5.0.0.Alpha2","sha":"a08c6d7a68d8f4715f1577d6bdd7c9a62fb706dc","kind":"tag","published_at":"2022-05-16T19:49:50.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-5.0.0.Alpha2","html_url":"https://github.com/netty/netty/releases/tag/netty-5.0.0.Alpha2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha2/manifests"},{"name":"netty-4.1.77.Final","sha":"503cd74d3f8e6a342eeadc820705d1d7fd978d13","kind":"tag","published_at":"2022-05-06T06:58:46.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.77.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.77.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.77.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.77.Final/manifests"},{"name":"netty-4.1.76.Final","sha":"701263610a72725c9d32b4022f1d51b1344890d1","kind":"tag","published_at":"2022-04-12T17:07:54.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.76.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.76.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.76.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.76.Final/manifests"},{"name":"netty-5.0.0.Alpha1","sha":"32c6f15b497f0df5d456b125c46d72d31ff0ae6a","kind":"tag","published_at":"2022-03-11T17:13:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-5.0.0.Alpha1","html_url":"https://github.com/netty/netty/releases/tag/netty-5.0.0.Alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-5.0.0.Alpha1/manifests"},{"name":"netty-4.1.75.Final","sha":"5f1802ac65d63076616c5b3ee7a3d4151c7f3414","kind":"tag","published_at":"2022-03-10T10:19:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.75.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.75.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.75.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.75.Final/manifests"},{"name":"netty-4.1.74.Final","sha":"51eda20432568ffdf736a673abc6b5a44839413f","kind":"tag","published_at":"2022-02-08T09:14:06.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.74.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.74.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.74.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.74.Final/manifests"},{"name":"netty-4.1.73.Final","sha":"b5219aeb4ee62f15d5dfb2b9c29d0c694aca05be","kind":"tag","published_at":"2022-01-12T07:20:22.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.73.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.73.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.73.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.73.Final/manifests"},{"name":"netty-4.1.72.Final","sha":"15196ad70ff76e02acb517f11350f457d06c7e65","kind":"tag","published_at":"2021-12-13T10:50:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.72.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.72.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.72.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.72.Final/manifests"},{"name":"netty-4.1.71.Final","sha":"2e346c1d1d6fc58762f52fd31ee4dc5a92d3a5bd","kind":"tag","published_at":"2021-12-09T13:57:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.71.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.71.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.71.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.71.Final/manifests"},{"name":"netty-4.1.70.Final","sha":"f49c94c83a5b2a2625913f57515c8dc6ab8c2639","kind":"tag","published_at":"2021-11-03T08:44:39.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.70.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.70.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.70.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.70.Final/manifests"},{"name":"netty-4.1.69.Final","sha":"34a31522f0145e2d434aaea2ef8ac5ed8d1a91a0","kind":"tag","published_at":"2021-10-11T09:21:09.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.69.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.69.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.69.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.69.Final/manifests"},{"name":"netty-4.1.68.Final","sha":"7d34282f9d2ffdd64c91cb4780b09902d9779b92","kind":"tag","published_at":"2021-09-09T13:10:40.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.68.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.68.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.68.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.68.Final/manifests"},{"name":"netty-4.1.67.Final","sha":"b785fa9eedab659b3acd3f7ca3bb60b92bc8b285","kind":"tag","published_at":"2021-08-16T08:23:21.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.67.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.67.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.67.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.67.Final/manifests"},{"name":"netty-4.1.66.Final","sha":"e43d0d99f1beec78cd00be3018f7afeef944e5f2","kind":"tag","published_at":"2021-07-16T06:23:20.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.66.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.66.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.66.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.66.Final/manifests"},{"name":"netty-4.1.65.Final","sha":"9e06241ddbe4d3aedc7994d37450013de276f062","kind":"tag","published_at":"2021-05-19T12:09:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.65.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.65.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.65.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.65.Final/manifests"},{"name":"netty-4.1.64.Final","sha":"67bedf0efee3d244890855015ae0d3641383dd81","kind":"tag","published_at":"2021-05-17T07:04:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.64.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.64.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.64.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.64.Final/manifests"},{"name":"netty-4.1.63.Final","sha":"b78d8f2abda50fbc0ff3f177d72d1a0b05b5ff41","kind":"tag","published_at":"2021-04-01T10:50:20.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.63.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.63.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.63.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.63.Final/manifests"},{"name":"netty-4.1.62.Final","sha":"573d1f4bf585e369feadd593eea3b19fb47fb9b9","kind":"tag","published_at":"2021-03-30T17:22:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.62.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.62.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.62.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.62.Final/manifests"},{"name":"netty-4.1.61.Final","sha":"ccb3ff388f2eb0d107e746fc8b7222b98dd0339a","kind":"tag","published_at":"2021-03-30T07:42:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.61.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.61.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.61.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.61.Final/manifests"},{"name":"netty-4.1.60.Final","sha":"eef26e8bb571612b76235841a84f605b9ae5d777","kind":"tag","published_at":"2021-03-09T08:18:29.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.60.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.60.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.60.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.60.Final/manifests"},{"name":"netty-4.1.59.Final","sha":"97d044812dc84288ea2c44c0862c5b1c26cb5b2d","kind":"tag","published_at":"2021-02-08T10:48:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.59.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.59.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.59.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.59.Final/manifests"},{"name":"netty-4.1.58.Final","sha":"10b03e65f19cd810f632b20a55d4ac6e2b155338","kind":"tag","published_at":"2021-01-13T10:28:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.58.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.58.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.58.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.58.Final/manifests"},{"name":"netty-4.1.57.Final","sha":"b016568e21360c8c48cada8331e2d553a4fef7b5","kind":"tag","published_at":"2021-01-12T11:10:35.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.57.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.57.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.57.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.57.Final/manifests"},{"name":"netty-4.1.56.Final","sha":"1188d8320edb00304847ac6ea760ddb3d2965478","kind":"tag","published_at":"2020-12-17T06:11:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.56.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.56.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.56.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.56.Final/manifests"},{"name":"netty-4.1.55.Final","sha":"38da45ffe11b74e708c9b575006db8ebcdffb644","kind":"tag","published_at":"2020-12-08T11:51:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.55.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.55.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.55.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.55.Final/manifests"},{"name":"netty-4.1.54.Final","sha":"715353ecd6b9031fe53f65767037bc0ecc052dc2","kind":"tag","published_at":"2020-11-11T05:47:44.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.54.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.54.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.54.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.54.Final/manifests"},{"name":"netty-4.1.53.Final","sha":"d4a0050ef33cab2542a80e11489a4977a63859f8","kind":"tag","published_at":"2020-10-13T06:29:18.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.53.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.53.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.53.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.53.Final/manifests"},{"name":"netty-4.1.52.Final","sha":"ada9c38c0a96e593b895b93dd4600d5299e77cef","kind":"tag","published_at":"2020-09-08T05:26:15.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.52.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.52.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.52.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.52.Final/manifests"},{"name":"netty-4.1.51.Final","sha":"646934ef0abe9c2c0934ca24dfb66b7018a284d0","kind":"tag","published_at":"2020-07-09T12:26:38.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.51.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.51.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.51.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.51.Final/manifests"},{"name":"netty-4.1.50.Final","sha":"8c5b72aaf02e7f349a9972dd9179b449b5a6067b","kind":"tag","published_at":"2020-05-13T06:00:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.50.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.50.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.50.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.50.Final/manifests"},{"name":"netty-4.1.49.Final","sha":"d0ec961cce19646519d6a0d59e7604b0eacd9bf2","kind":"tag","published_at":"2020-04-22T09:57:41.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.49.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.49.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.49.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.49.Final/manifests"},{"name":"netty-4.1.48.Final","sha":"c10c697e5bf664d9d8d1dcee93569265b19ca03a","kind":"tag","published_at":"2020-03-17T09:20:46.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.48.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.48.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.48.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.48.Final/manifests"},{"name":"netty-4.1.47.Final","sha":"a401b2ac92bad5bc566387d95a9fd94cf3eb2897","kind":"tag","published_at":"2020-03-09T12:13:47.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.47.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.47.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.47.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.47.Final/manifests"},{"name":"netty-4.1.46.Final","sha":"ebe7af510228f9c6b7f1aff4725ceac85f1e9cc3","kind":"tag","published_at":"2020-02-28T06:37:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.46.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.46.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.46.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.46.Final/manifests"},{"name":"netty-4.1.45.Final","sha":"136db8680afa73c7491277d6fed1e85e703fa905","kind":"tag","published_at":"2020-01-13T09:13:44.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.45.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.45.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.45.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.45.Final/manifests"},{"name":"netty-4.1.44.Final","sha":"5ddf45a2d51bf88e94ef5a60e0abdc492b008ce7","kind":"tag","published_at":"2019-12-18T08:32:33.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.44.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.44.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.44.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.44.Final/manifests"},{"name":"netty-4.1.43.Final","sha":"d066f163d7476a4a332f95d4dc62af751378f536","kind":"tag","published_at":"2019-10-24T12:56:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.43.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.43.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.43.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.43.Final/manifests"},{"name":"netty-4.1.42.Final","sha":"bd907c3b3acf3d746ad1143270224aa0f784cd1b","kind":"tag","published_at":"2019-09-25T06:15:24.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.42.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.42.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.42.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.42.Final/manifests"},{"name":"netty-4.1.41.Final","sha":"7cf69022d48d123ac9f2920729613766f08f0874","kind":"tag","published_at":"2019-09-12T16:09:43.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.41.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.41.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.41.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.41.Final/manifests"},{"name":"netty-4.1.40.Final","sha":"267e5da48110fff014d3b62ca1968772fc87f1eb","kind":"tag","published_at":"2019-09-12T05:37:52.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.40.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.40.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.40.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.40.Final/manifests"},{"name":"netty-4.1.39.Final","sha":"88c2a4cab5add947df50884a6e787f8dff3d85f7","kind":"tag","published_at":"2019-08-13T17:16:33.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.39.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.39.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.39.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.39.Final/manifests"},{"name":"netty-4.1.38.Final","sha":"465c900c0477da3c89727c1a8b05e95a1fcbaff0","kind":"tag","published_at":"2019-07-24T09:05:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.38.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.38.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.38.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.38.Final/manifests"},{"name":"netty-4.1.37.Final","sha":"35e0843376afe9bb5e375e73218ea7a34cb43ffb","kind":"tag","published_at":"2019-06-28T05:56:53.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.37.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.37.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.37.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.37.Final/manifests"},{"name":"netty-4.1.36.Final","sha":"49a451101c631d21e5125f2cf4e506515b8b0e3e","kind":"tag","published_at":"2019-04-30T16:42:01.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.36.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.36.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.36.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.36.Final/manifests"},{"name":"netty-4.1.35.Final","sha":"dfe657e2d4807f144846273eee451cef4ac36b3a","kind":"tag","published_at":"2019-04-17T07:26:06.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.35.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.35.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.35.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.35.Final/manifests"},{"name":"netty-4.1.34.Final","sha":"ff7a9fa091a8bf2e10020f83fc4df1c44098bbbb","kind":"tag","published_at":"2019-03-08T08:55:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.34.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.34.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.34.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.34.Final/manifests"},{"name":"netty-4.1.33.Final","sha":"37484635cbccf0bf48f0e013bc639f44bcfb420a","kind":"tag","published_at":"2019-01-21T12:26:34.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.33.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.33.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.33.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.33.Final/manifests"},{"name":"netty-4.1.32.Final","sha":"afcb4a37d3a704c435f8312f9547309d6f1003ac","kind":"tag","published_at":"2018-11-29T11:14:34.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.32.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.32.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.32.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.32.Final/manifests"},{"name":"netty-4.1.31.Final","sha":"9e5073960191d43dfa07277545f272da0c1f385a","kind":"tag","published_at":"2018-10-29T15:38:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.31.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.31.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.31.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.31.Final/manifests"},{"name":"netty-tag","sha":"b5c2b065bd63dcb89abfb293c107cec3028e7bab","kind":"tag","published_at":"2018-10-29T06:30:02.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-tag","html_url":"https://github.com/netty/netty/releases/tag/netty-tag","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-tag","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-tag/manifests"},{"name":"netty-4.1.30.Final","sha":"3a9ac829d53e1da7365db2d8f544d7d112147321","kind":"tag","published_at":"2018-09-27T19:00:07.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.30.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.30.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.30.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.30.Final/manifests"},{"name":"netty-4.1.29.Final","sha":"3fc789e83fe3f380ad1936075287adeead328b58","kind":"tag","published_at":"2018-08-24T06:36:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.29.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.29.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.29.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.29.Final/manifests"},{"name":"netty-4.1.28.Final","sha":"ff785fbe39152bd78c0bb45dcc882e3ce0af33fc","kind":"tag","published_at":"2018-07-27T04:59:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.28.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.28.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.28.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.28.Final/manifests"},{"name":"netty-4.1.27.Final","sha":"1c16519ac86d9ef9919ac96afbee4be9b428d0c9","kind":"tag","published_at":"2018-07-11T15:37:31.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.27.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.27.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.27.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.27.Final/manifests"},{"name":"netty-4.1.26.Final","sha":"8ca5421bd2925b944a65a2377a68cdb575fc0733","kind":"tag","published_at":"2018-07-10T05:21:15.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.26.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.26.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.26.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.26.Final/manifests"},{"name":"netty-4.1.25.Final","sha":"c67a3b0507d847a9f01c886b944ced015245ecc9","kind":"tag","published_at":"2018-05-14T11:11:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.25.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.25.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.25.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.25.Final/manifests"},{"name":"netty-4.1.24.Final","sha":"04fac00c8c98ed26c5a75887c8e7e53b1e1b68d0","kind":"tag","published_at":"2018-04-19T11:55:56.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.24.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.24.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.24.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.24.Final/manifests"},{"name":"netty-4.1.23.Final","sha":"8c549bad3821f9b63f2313b83a15c531e94dfaf0","kind":"tag","published_at":"2018-04-04T10:44:38.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.23.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.23.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.23.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.23.Final/manifests"},{"name":"netty-4.1.22.Final","sha":"786f35c6c9d5d2061e518975dae5100caa43cf52","kind":"tag","published_at":"2018-02-21T12:52:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.22.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.22.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.22.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.22.Final/manifests"},{"name":"netty-4.0.56.Final","sha":"a15dd48862b2b4cd76d19c73b41a29da9a2fbae8","kind":"tag","published_at":"2018-02-05T14:31:49.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.56.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.56.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.56.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.56.Final/manifests"},{"name":"netty-4.1.21.Final","sha":"41ebb5fcca149e9f95372038c687b5d94517d78c","kind":"tag","published_at":"2018-02-05T12:02:28.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.21.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.21.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.21.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.21.Final/manifests"},{"name":"netty-4.0.55.Final","sha":"8a4654ae9f456c4a57ff66a155905ee4ed81aab4","kind":"tag","published_at":"2018-01-21T18:01:52.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.55.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.55.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.55.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.55.Final/manifests"},{"name":"netty-4.1.20.Final","sha":"96c7132dee669998b4fda60bb8ec8e94cb33fcb9","kind":"tag","published_at":"2018-01-21T12:53:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.20.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.20.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.20.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.20.Final/manifests"},{"name":"netty-4.1.19.Final","sha":"0786c4c8d92a6cca2e2a35521a4ee046761dad80","kind":"tag","published_at":"2017-12-15T13:09:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.19.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.19.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.19.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.19.Final/manifests"},{"name":"netty-4.0.54.Final","sha":"ae43640088ed2a4f0e61e8509d741444697b0c15","kind":"tag","published_at":"2017-12-08T14:30:29.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.54.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.54.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.54.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.54.Final/manifests"},{"name":"netty-4.1.18.Final","sha":"96732f47d895c99f8bfe272077cf850d4a7f2b83","kind":"tag","published_at":"2017-12-08T09:26:06.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.18.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.18.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.18.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.18.Final/manifests"},{"name":"netty-4.0.53.Final","sha":"f57115179415e8088bbf583c22f407ee0a25ce18","kind":"tag","published_at":"2017-11-09T00:08:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.53.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.53.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.53.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.53.Final/manifests"},{"name":"netty-4.1.17.Final","sha":"812354cf1f5835d9c2627a48c4c50e18daa43f61","kind":"tag","published_at":"2017-11-08T22:36:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.17.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.17.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.17.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.17.Final/manifests"},{"name":"netty-4.1.16.Final","sha":"f57d8f00e17a3cbd127aeb2b499c3f2787c002e4","kind":"tag","published_at":"2017-09-25T04:12:24.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.16.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.16.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.16.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.16.Final/manifests"},{"name":"netty-4.0.52.Final","sha":"4e9a6e5ab64525194f056027a463dbf0e464229c","kind":"tag","published_at":"2017-09-21T19:47:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.52.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.52.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.52.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.52.Final/manifests"},{"name":"netty-4.1.15.Final","sha":"da8e010a42d01081dc2b2232a0c0f563f86b2455","kind":"tag","published_at":"2017-08-24T13:38:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.15.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.15.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.15.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.15.Final/manifests"},{"name":"netty-4.0.51.Final","sha":"cf89fb78b8f2275ec97f76f6b83e0113b8715d87","kind":"tag","published_at":"2017-08-24T12:47:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.51.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.51.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.51.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.51.Final/manifests"},{"name":"netty-4.0.50.Final","sha":"5d304e9521e7aa263fc6bb3299d91a18e0510576","kind":"tag","published_at":"2017-08-02T18:29:07.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.50.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.50.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.50.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.50.Final/manifests"},{"name":"netty-4.1.14.Final","sha":"8cc1071881e90b0130bdd35a0441abcd0df6ffa9","kind":"tag","published_at":"2017-08-02T12:54:58.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.14.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.14.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.14.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.14.Final/manifests"},{"name":"netty-4.1.13.Final","sha":"c7f8168324eeba89e4a8e4086948bacbdc3e6a14","kind":"tag","published_at":"2017-07-06T11:23:59.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.13.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.13.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.13.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.13.Final/manifests"},{"name":"netty-4.0.49.Final","sha":"1e50efb615da25712dc5b312e59d8ec19229407b","kind":"tag","published_at":"2017-07-06T05:37:37.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.49.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.49.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.49.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.49.Final/manifests"},{"name":"netty-4.0.48.Final","sha":"b6be3a77bce9de5bab0e434a04d7347ca35c1f44","kind":"tag","published_at":"2017-06-09T09:22:54.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.48.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.48.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.48.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.48.Final/manifests"},{"name":"netty-4.1.12.Final","sha":"3acd5c68ea4739e500610d1783059c04fa01f5d8","kind":"tag","published_at":"2017-06-08T19:06:15.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.12.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.12.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.12.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.12.Final/manifests"},{"name":"netty-4.1.11.Final","sha":"f7a19d330c725316c56ff8690ca453f7998d532d","kind":"tag","published_at":"2017-05-11T14:00:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.11.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.11.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.11.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.11.Final/manifests"},{"name":"netty-4.0.47.Final","sha":"9c432f8ae1bd0198db7eb7d85414f9342d88ae3e","kind":"tag","published_at":"2017-05-11T10:26:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.47.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.47.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.47.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.47.Final/manifests"},{"name":"netty-4.0.46.Final","sha":"cdc667182841243add2fae4cb3c753cd46894572","kind":"tag","published_at":"2017-04-29T13:21:41.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.46.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.46.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.46.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.46.Final/manifests"},{"name":"netty-4.1.10.Final","sha":"f30f242fee89ec37e2c65b49693ad386aa870c00","kind":"tag","published_at":"2017-04-29T12:09:45.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.10.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.10.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.10.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.10.Final/manifests"},{"name":"netty-4.0.45.Final","sha":"f994184afd0b18e6f3724c3419ad2404c56932e0","kind":"tag","published_at":"2017-03-10T08:37:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.45.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.45.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.45.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.45.Final/manifests"},{"name":"netty-4.1.9.Final","sha":"1db58ea9800a3839ccf495103e5918debf8479d0","kind":"tag","published_at":"2017-03-10T06:45:57.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.9.Final/manifests"},{"name":"netty-4.0.44.Final","sha":"452812a62d0bd62cd006c2c56e91aeb030c15cde","kind":"tag","published_at":"2017-01-30T16:42:27.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.44.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.44.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.44.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.44.Final/manifests"},{"name":"netty-4.1.8.Final","sha":"76e22e63f35f52d17b407a7f29f709e4c1efb46b","kind":"tag","published_at":"2017-01-30T14:13:34.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.8.Final/manifests"},{"name":"netty-4.0.43.Final","sha":"91a0bdc17a8298437d6de08a8958d753799bd4a6","kind":"tag","published_at":"2017-01-12T12:24:35.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.43.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.43.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.43.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.43.Final/manifests"},{"name":"netty-4.1.7.Final","sha":"7a21eb1178c8ed0072adcd5f2ac6e8d68c7caa05","kind":"tag","published_at":"2017-01-12T10:36:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.7.Final/manifests"},{"name":"netty-4.0.42.Final","sha":"73306e017dfe0b7c969551266964ac9c5418c5aa","kind":"tag","published_at":"2016-10-14T12:32:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.42.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.42.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.42.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.42.Final/manifests"},{"name":"netty-4.1.6.Final","sha":"35fb0babe269d8e584521d069492c910569b244c","kind":"tag","published_at":"2016-10-14T11:20:30.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.6.Final/manifests"},{"name":"netty-4.0.41.Final","sha":"8bdfc9ce392bb73adb9a58b3ba2f5d7fea3efaa0","kind":"tag","published_at":"2016-08-26T06:36:47.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.41.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.41.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.41.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.41.Final/manifests"},{"name":"netty-4.1.5.Final","sha":"1208b90f57b12b081074e02cdd543992c7f1e6d9","kind":"tag","published_at":"2016-08-26T03:00:33.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.5.Final/manifests"},{"name":"netty-4.1.4.Final","sha":"9466b32d05ecf63b7e3a16e8e432ca5def21dc1e","kind":"tag","published_at":"2016-07-27T11:29:50.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.4.Final/manifests"},{"name":"netty-4.0.40.Final","sha":"837d9947ecdc51a056801506dcf4a50dc097d0fd","kind":"tag","published_at":"2016-07-27T08:46:56.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.40.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.40.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.40.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.40.Final/manifests"},{"name":"netty-4.1.3.Final","sha":"b2adea87a0e3173aeefae86f64f4fd29b673c82c","kind":"tag","published_at":"2016-07-15T07:09:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.3.Final/manifests"},{"name":"netty-4.0.39.Final","sha":"38bdf86ba14525ad6a5a83603583141f685c1bbb","kind":"tag","published_at":"2016-07-15T05:10:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.39.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.39.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.39.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.39.Final/manifests"},{"name":"netty-4.1.2.Final","sha":"ad270c02b928a56cb1a51574536566cc2f0d5fb8","kind":"tag","published_at":"2016-07-01T08:33:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.2.Final/manifests"},{"name":"netty-4.0.38.Final","sha":"8642f16f352eb9b1c412d89a94be6c6c3ae2dfc2","kind":"tag","published_at":"2016-07-01T05:59:46.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.38.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.38.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.38.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.38.Final/manifests"},{"name":"netty-3.10.6.Final","sha":"5f56a03bcb0aa23bdc9f68686e5c2abcf963a9cd","kind":"tag","published_at":"2016-06-29T12:41:50.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.6.Final/manifests"},{"name":"netty-4.0.37.Final","sha":"4169779352fb91c69b41077033135a24f898ad1d","kind":"tag","published_at":"2016-06-07T18:00:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.37.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.37.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.37.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.37.Final/manifests"},{"name":"netty-4.1.1.Final","sha":"cf670fab75ad3c77d6b37883104b259894d4bd71","kind":"tag","published_at":"2016-06-07T16:52:28.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.1.Final/manifests"},{"name":"netty-4.1.0.Final","sha":"446b38db5220a3934064ee4e26f40d81dfa6b714","kind":"tag","published_at":"2016-05-25T17:16:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Final/manifests"},{"name":"netty-4.1.0.CR7","sha":"c6121a6f494c84ff5bf88a2bb290dd7a5885eefd","kind":"tag","published_at":"2016-04-10T06:37:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR7","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR7/manifests"},{"name":"netty-4.0.36.Final","sha":"e8fa848f435961c4e5771ae8fe28445e5514a412","kind":"tag","published_at":"2016-04-04T14:53:09.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.36.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.36.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.36.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.36.Final/manifests"},{"name":"netty-4.1.0.CR6","sha":"7368ccc539a2ebe624fc99018d1a6ca5a2058d71","kind":"tag","published_at":"2016-04-02T05:24:59.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR6","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR6/manifests"},{"name":"netty-4.1.0.CR5","sha":"9cd9e7daeb04d825bcb418f389b9cab8c21fac9b","kind":"tag","published_at":"2016-03-29T14:45:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR5","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR5/manifests"},{"name":"netty-4.1.0.CR4","sha":"4653dc1d05cfac8766bed63c4dd28c8d06128423","kind":"tag","published_at":"2016-03-21T10:51:35.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR4","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR4/manifests"},{"name":"netty-4.0.35.Final","sha":"e444e8d7a65d45fbd98d0d9552fe8b6e2b7c7331","kind":"tag","published_at":"2016-03-21T09:34:08.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.35.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.35.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.35.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.35.Final/manifests"},{"name":"netty-4.1.0.CR3","sha":"f39eb9a6b26cf86a2eff56aa0ce59f0df0b2ccf9","kind":"tag","published_at":"2016-02-19T22:00:02.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR3","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR3/manifests"},{"name":"netty-4.1.0.CR2","sha":"7eb3a60dba59cce87d1ad5c77771fdcd560a6812","kind":"tag","published_at":"2016-02-04T15:51:31.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR2","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR2/manifests"},{"name":"netty-4.0.34.Final","sha":"cf1777b61977f05177640f130d2e50e9419fc9c3","kind":"tag","published_at":"2016-01-29T08:56:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.34.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.34.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.34.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.34.Final/manifests"},{"name":"netty-4.1.0.CR1","sha":"c681a40a78cabf34138ad48126b99b5c683882b5","kind":"tag","published_at":"2016-01-21T14:34:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.CR1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.CR1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.CR1/manifests"},{"name":"netty-4.1.0.Beta8","sha":"6a93f331d3b12bbebcb2b6c2f65fd4ee00a134ea","kind":"tag","published_at":"2015-11-10T21:59:28.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta8","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta8/manifests"},{"name":"netty-4.0.33.Final","sha":"69b5aefd09eaedf08c12d6bdb70a75ba900de76f","kind":"tag","published_at":"2015-11-03T13:18:29.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.33.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.33.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.33.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.33.Final/manifests"},{"name":"netty-3.10.5.Final","sha":"97523c38ae6af76068d0bfe70df375c0de39286e","kind":"tag","published_at":"2015-10-13T10:09:08.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.5.Final/manifests"},{"name":"netty-4.1.0.Beta7","sha":"5a43de10f7470f7132070565fbcb1ac9da6c599d","kind":"tag","published_at":"2015-10-02T07:03:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta7","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta7/manifests"},{"name":"netty-4.0.32.Final","sha":"fb2d5623069566ba9705de6e70d2d8b236747b0b","kind":"tag","published_at":"2015-09-30T07:30:35.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.32.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.32.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.32.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.32.Final/manifests"},{"name":"netty-4.1.0.Beta6","sha":"2eb444ec1da91e7e280418ed65f88becda96bd4e","kind":"tag","published_at":"2015-09-02T09:44:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta6","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta6/manifests"},{"name":"netty-4.0.31.Final","sha":"26bbcc38c2aedcbc21464a43158bf535ea86caaf","kind":"tag","published_at":"2015-09-02T06:58:18.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.31.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.31.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.31.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.31.Final/manifests"},{"name":"netty-4.0.30.Final","sha":"11cc2d5197c46b2de1295ea8d95c694de900b5df","kind":"tag","published_at":"2015-07-24T08:11:27.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.30.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.30.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.30.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.30.Final/manifests"},{"name":"netty-3.9.9.Final","sha":"22fcfe7c94c722842f491448a38b5078caf1d417","kind":"tag","published_at":"2015-07-21T07:50:56.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.9.Final/manifests"},{"name":"netty-3.10.4.Final","sha":"c74fe083007ee8a0d9de471b9311dad97e6b189a","kind":"tag","published_at":"2015-06-30T13:16:33.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.4.Final/manifests"},{"name":"netty-4.0.29.Final","sha":"4c482c1215ef4c0c1d2d25f9f7bd24cb4587a474","kind":"tag","published_at":"2015-06-23T09:08:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.29.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.29.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.29.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.29.Final/manifests"},{"name":"netty-3.10.3.Final","sha":"ad29ba95f59fd0ec9ec87c9929e0c735b998dd1a","kind":"tag","published_at":"2015-05-08T15:28:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.3.Final/manifests"},{"name":"netty-3.9.8.Final","sha":"e9c8d38db7c83e1dfeeeec94ca5aaf8d9bb6bad0","kind":"tag","published_at":"2015-05-08T14:58:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.8.Final/manifests"},{"name":"netty-3.10.2.Final","sha":"db0375fd3b3031383eb042d8ee1e49bf0c3aa540","kind":"tag","published_at":"2015-05-08T08:34:18.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.2.Final/manifests"},{"name":"netty-3.9.7.Final","sha":"4e7c962aa3e888d1c578ccc97eab752ee7678bee","kind":"tag","published_at":"2015-05-08T08:21:10.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.7.Final/manifests"},{"name":"netty-4.1.0.Beta5","sha":"871ce43b1f431536e08a36d420875494ef3e9451","kind":"tag","published_at":"2015-05-07T18:20:55.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta5","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta5/manifests"},{"name":"netty-4.0.28.Final","sha":"005d4a42fc7271b2a58a16450b15b039fdff68f7","kind":"tag","published_at":"2015-05-07T15:33:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.28.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.28.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.28.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.28.Final/manifests"},{"name":"netty-4.0.27.Final","sha":"054e7c5d1746e7dbbba8ce637258ca0a021d0152","kind":"tag","published_at":"2015-04-01T02:06:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.27.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.27.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.27.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.27.Final/manifests"},{"name":"netty-3.10.1.Final","sha":"56af5d5f1c97d9aeb2c319c31e5d306b12f467cb","kind":"tag","published_at":"2015-03-23T18:45:47.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.1.Final/manifests"},{"name":"netty-4.1.0.Beta4","sha":"ca3b1bc4b7eb90f9dacb0c9e9346ab503015e3e2","kind":"tag","published_at":"2015-03-03T07:06:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta4","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta4/manifests"},{"name":"netty-4.0.26.Final","sha":"0dbc96cffdf7a55865d058ac5d76f3460915ede3","kind":"tag","published_at":"2015-03-02T06:31:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.26.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.26.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.26.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.26.Final/manifests"},{"name":"netty-4.0.25.Final","sha":"087db82e787883c467938aadd9c4cf9aae798c67","kind":"tag","published_at":"2014-12-31T11:58:38.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.25.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.25.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.25.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.25.Final/manifests"},{"name":"netty-3.10.0.Final","sha":"432fdbfd5d0b38eaed63daa0f0e896c39356d67e","kind":"tag","published_at":"2014-12-17T04:56:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.10.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.10.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.10.0.Final/manifests"},{"name":"netty-3.9.6.Final","sha":"f2fdcc9d4fe26e0e570567083fcedf9c8f7fbf66","kind":"tag","published_at":"2014-12-17T04:07:21.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.6.Final/manifests"},{"name":"netty-3.9.5.Final","sha":"977692b19b62b115b12c8791fccb3c475c480c65","kind":"tag","published_at":"2014-10-30T10:59:27.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.5.Final/manifests"},{"name":"netty-4.0.24.Final","sha":"c170e7df3f06801e545298d25d3b9b84d5e526ad","kind":"tag","published_at":"2014-10-29T10:48:31.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.24.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.24.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.24.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.24.Final/manifests"},{"name":"netty-3.8.3.Final","sha":"a0b9a461a4a7f07d9f33469609559e327195e779","kind":"tag","published_at":"2014-10-17T05:22:34.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.8.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.8.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.3.Final/manifests"},{"name":"netty-3.6.10.Final","sha":"266dbdfc79dcda2e3b713d01c12304c3fad4b0fd","kind":"tag","published_at":"2014-09-12T11:11:36.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.10.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.10.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.10.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.10.Final/manifests"},{"name":"netty-3.9.4.Final","sha":"79c0e1ee6b459866e2f2bb97cc9b5efae3ebc08f","kind":"tag","published_at":"2014-08-26T08:16:13.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.4.Final/manifests"},{"name":"netty-4.1.0.Beta3","sha":"76ac3b21a5196e29e704518b8ea03793ca2fa654","kind":"tag","published_at":"2014-08-15T18:27:39.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta3","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta3/manifests"},{"name":"netty-4.0.23.Final","sha":"208198c0cb14521f6d35ae7dd1205adc45f6342f","kind":"tag","published_at":"2014-08-15T18:02:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.23.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.23.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.23.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.23.Final/manifests"},{"name":"netty-4.1.0.Beta2","sha":"e013b2400fb9b24219c7c9b19a5d37149922376b","kind":"tag","published_at":"2014-08-15T00:31:01.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta2","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta2/manifests"},{"name":"netty-4.0.22.Final","sha":"3051db9d598328bf47f7c044da5b1733a7dd7df9","kind":"tag","published_at":"2014-08-14T00:41:30.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.22.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.22.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.22.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.22.Final/manifests"},{"name":"netty-3.9.3.Final","sha":"617d376dc054903c5b9ba89ee3c77303db42e90f","kind":"tag","published_at":"2014-08-06T18:54:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.3.Final/manifests"},{"name":"netty-3.9.1.1.Final","sha":"b061b67c2333aa3a1d454b481d0a263a77f3b71d","kind":"tag","published_at":"2014-07-30T23:48:54.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.1.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.1.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.1.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.1.1.Final/manifests"},{"name":"netty-4.1.0.Beta1","sha":"ba50cb829bb2a2dbbb88d80559f7ce0b1f6cb762","kind":"tag","published_at":"2014-07-04T08:25:58.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.1.0.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.1.0.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.1.0.Beta1/manifests"},{"name":"netty-4.0.21.Final","sha":"25e3c8ce3d06bcf470ee4493c5744a4c955601cc","kind":"tag","published_at":"2014-06-30T12:29:21.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.21.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.21.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.21.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.21.Final/manifests"},{"name":"netty-4.0.20.Final","sha":"1709113a1f27be021e890d07c4d94576e2e7710c","kind":"tag","published_at":"2014-06-12T14:20:43.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.20.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.20.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.20.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.20.Final/manifests"},{"name":"netty-3.9.2.Final","sha":"3ca6c4d9385134d730567a932812c281d772f320","kind":"tag","published_at":"2014-06-11T09:16:18.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.2.Final/manifests"},{"name":"netty-3.9.1.Final","sha":"1e4fa0565ad5da61b705868179e69cf04a4627e3","kind":"tag","published_at":"2014-04-30T13:46:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.1.Final/manifests"},{"name":"netty-4.0.19.Final","sha":"b562148e2d8d0f0487495fb5dd2d5de62306c5e0","kind":"tag","published_at":"2014-04-30T13:40:38.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.19.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.19.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.19.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.19.Final/manifests"},{"name":"netty-3.8.2.Final","sha":"08c155cfddc2b91427dba9464db0eaf25d9eb766","kind":"tag","published_at":"2014-04-30T13:29:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.8.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.8.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.2.Final/manifests"},{"name":"netty-3.7.1.Final","sha":"ffac27efc7554f7b6a3b4e6d8158da2a3ec3c904","kind":"tag","published_at":"2014-04-30T13:13:55.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.7.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.7.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.7.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.7.1.Final/manifests"},{"name":"netty-3.6.9.Final","sha":"a753969c3a570a7a0b7d83fd875197e0a31bf5b6","kind":"tag","published_at":"2014-04-30T12:56:29.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.9.Final/manifests"},{"name":"netty-4.0.18.Final","sha":"1512a4dccacfd9bf14f06b5c96b2ec46d22760c2","kind":"tag","published_at":"2014-04-01T05:21:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.18.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.18.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.18.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.18.Final/manifests"},{"name":"netty-3.8.1.Final","sha":"baf96ab1bbf89121643714dd3d702b61dd844ddf","kind":"tag","published_at":"2014-03-13T05:23:13.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.8.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.8.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.1.Final/manifests"},{"name":"netty-3.6.8.Final","sha":"1381a14885c30d673b943851bcec2e221ed88bbb","kind":"tag","published_at":"2014-03-12T08:41:08.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.8.Final/manifests"},{"name":"netty-4.0.17.Final","sha":"33587eb18357dfece421167aea52cd722ee101f9","kind":"tag","published_at":"2014-02-24T14:37:39.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.17.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.17.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.17.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.17.Final/manifests"},{"name":"netty-4.0.16.Final","sha":"c466bb803d2a9b4e50b445fe05ae822c1da42c2e","kind":"tag","published_at":"2014-02-19T02:41:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.16.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.16.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.16.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.16.Final/manifests"},{"name":"netty-4.0.15.Final","sha":"287515210d2215d8355a60809871fe09ac943f10","kind":"tag","published_at":"2014-01-21T07:18:29.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.15.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.15.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.15.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.15.Final/manifests"},{"name":"netty-4.0.14.Final","sha":"cdb700c7a4d0aad49ca38e17c0c746548869641f","kind":"tag","published_at":"2013-12-22T12:57:44.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.14.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.14.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.14.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.14.Final/manifests"},{"name":"netty-3.9.0.Final","sha":"a06d4dddd5a7da411ba4014eeb84dd39c3a8cf26","kind":"tag","published_at":"2013-12-22T10:45:24.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.9.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.9.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.9.0.Final/manifests"},{"name":"netty-3.6.7.Final","sha":"99b1b26a200db6a849b1603f44fad68dda247ccd","kind":"tag","published_at":"2013-12-03T05:42:54.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.7.Final/manifests"},{"name":"netty-4.0.14.Beta1","sha":"ead617fdcc1164f1e66e147a2484dea1193ede3c","kind":"tag","published_at":"2013-11-29T18:30:58.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.14.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.14.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.14.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.14.Beta1/manifests"},{"name":"netty-4.0.13.Final","sha":"5fe7596f4931e816b8e1f04e6dbe044c05421b86","kind":"tag","published_at":"2013-11-28T14:04:49.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.13.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.13.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.13.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.13.Final/manifests"},{"name":"netty-3.2.10.Final","sha":"4ec4abe2e7ac9e1a5e4be88e6dd09403592f9512","kind":"tag","published_at":"2013-11-28T11:27:52.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.10.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.10.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.10.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.10.Final/manifests"},{"name":"netty-4.0.12.Final","sha":"2386777af8d7f828383e6ac6a547ad4bcbe94aa6","kind":"tag","published_at":"2013-11-07T17:11:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.12.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.12.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.12.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.12.Final/manifests"},{"name":"netty-3.8.0.Final","sha":"6e67ddeed70313a0b81946454a3b3a05f199c6e4","kind":"tag","published_at":"2013-11-07T09:18:37.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.8.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.8.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.8.0.Final/manifests"},{"name":"netty-4.0.11.Final","sha":"27a89d6032a90168137e491af7de39a1bbab28d1","kind":"tag","published_at":"2013-10-21T05:43:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.11.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.11.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.11.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.11.Final/manifests"},{"name":"netty-4.0.10.Final","sha":"d35768ae117e7f9f20fca5b5297c96019b9a574a","kind":"tag","published_at":"2013-10-02T13:48:49.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.10.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.10.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.10.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.10.Final/manifests"},{"name":"netty-4.0.9.Final","sha":"b6ade7f91d38269b1691ae4647129b16f62c5780","kind":"tag","published_at":"2013-09-06T07:28:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.9.Final/manifests"},{"name":"netty-3.7.0.Final","sha":"5b2cb54bb659e1a8ff69c32d6e2cbc66022c1723","kind":"tag","published_at":"2013-09-05T14:14:44.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.7.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.7.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.7.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.7.0.Final/manifests"},{"name":"netty-4.0.8.Final","sha":"b67659a866c40fd04ac38e5838ee1d562a6db5d5","kind":"tag","published_at":"2013-08-26T10:00:58.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.8.Final/manifests"},{"name":"netty-4.0.7.Final","sha":"8e97e6c4610182b14ae20d66e1a0bd50cf43ebba","kind":"tag","published_at":"2013-08-08T11:53:24.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.7.Final/manifests"},{"name":"netty-4.0.6.Final","sha":"3f70d5caa4bf0201ff1861e8dcb111a537a4a64c","kind":"tag","published_at":"2013-08-01T08:59:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.6.Final/manifests"},{"name":"netty-4.0.5.Final","sha":"0e124583d65940ba30e70d05e7e919d6e60a197d","kind":"tag","published_at":"2013-07-31T18:08:09.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.5.Final/manifests"},{"name":"netty-4.0.4.Final","sha":"ca0018279754557576bb2ecc17d209c2b6874609","kind":"tag","published_at":"2013-07-23T08:04:19.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.4.Final/manifests"},{"name":"netty-4.0.3.Final","sha":"10d395e82921c255985de4f6bf13bd8abcd3dd58","kind":"tag","published_at":"2013-07-18T02:17:37.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.3.Final/manifests"},{"name":"netty-4.0.2.Final","sha":"bbbf72359e5a38851cd2b2e3eba9af71477ea3c2","kind":"tag","published_at":"2013-07-17T13:58:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.2.Final/manifests"},{"name":"netty-4.0.1.Final","sha":"76cefcc421681622831e5e38709d5552c916d6c5","kind":"tag","published_at":"2013-07-16T08:16:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.1.Final/manifests"},{"name":"netty-4.0.0.Final","sha":"c5d8af446a39db10a1744d47e5a466fa1c87a374","kind":"tag","published_at":"2013-07-15T13:48:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Final/manifests"},{"name":"netty-4.0.0.CR9","sha":"ca73eaef0dcf4f4889492253d78f679a84a1917b","kind":"tag","published_at":"2013-07-02T09:41:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR9","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR9/manifests"},{"name":"netty-4.0.0.CR8","sha":"149db34c1907ee162b785560289877d20ba44138","kind":"tag","published_at":"2013-07-02T01:26:40.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR8","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR8/manifests"},{"name":"netty-4.0.0.CR7","sha":"a6abd2feb202e9a54da7bb37620656054489f5ac","kind":"tag","published_at":"2013-06-28T13:15:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR7","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR7/manifests"},{"name":"netty-4.0.0.CR6","sha":"14851373dfd2deddc274c32e7ba27d626491aebe","kind":"tag","published_at":"2013-06-20T23:59:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR6","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR6/manifests"},{"name":"netty-3.5.13.Final","sha":"35baac44bf910406f3190e33459c12eda8cc0465","kind":"tag","published_at":"2013-06-20T05:04:41.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.13.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.13.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.13.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.13.Final/manifests"},{"name":"netty-4.0.0.CR5","sha":"f5377cc8d7a5f8a32bfd5ad54b3caa03fe176f2f","kind":"tag","published_at":"2013-06-14T03:55:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR5","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR5/manifests"},{"name":"netty-4.0.0.CR4","sha":"381063e09c4ea3c756048fd88a603aea6ede35cc","kind":"tag","published_at":"2013-06-13T08:02:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR4","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR4/manifests"},{"name":"netty-4.0.0.CR3","sha":"99caefdf398baca4fefaab3d0f821644630aa233","kind":"tag","published_at":"2013-05-18T07:59:02.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR3","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR3/manifests"},{"name":"netty-3.6.6.Final","sha":"90e1eb23eaa9f96bb98078f7b450a7d436dc46fe","kind":"tag","published_at":"2013-05-15T06:04:49.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.6.Final/manifests"},{"name":"netty-4.0.0.CR2","sha":"ae765020402f19a010f88bbed8b65791df75c9f5","kind":"tag","published_at":"2013-05-08T16:19:44.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR2","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR2/manifests"},{"name":"netty-3.6.5.Final","sha":"1ad09202c9b5d289612342364a2159ec805e836b","kind":"tag","published_at":"2013-04-09T08:18:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.5.Final/manifests"},{"name":"netty-3.6.4.Final","sha":"06418640a1148e8a71240bd1da73016a81ab4785","kind":"tag","published_at":"2013-04-05T00:21:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.4.Final/manifests"},{"name":"netty-4.0.0.CR1","sha":"60fc7dac4dea95211df7d636e2b9c45ca44a6bae","kind":"tag","published_at":"2013-03-22T14:20:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.CR1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.CR1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.CR1/manifests"},{"name":"netty-4.0.0.Beta3","sha":"adfb29330bbd081a9ab11e2656d110ce062b3746","kind":"tag","published_at":"2013-03-16T09:41:17.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Beta3","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Beta3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta3/manifests"},{"name":"netty-3.5.12.Final","sha":"c65ad8fea1813a1ec151f30f87f5a525f83e102d","kind":"tag","published_at":"2013-03-04T23:42:32.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.12.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.12.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.12.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.12.Final/manifests"},{"name":"netty-4.0.0.Beta2","sha":"5026c2f359e11ac24149be91bf44d34f6c0d0171","kind":"tag","published_at":"2013-02-27T00:55:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Beta2","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Beta2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta2/manifests"},{"name":"netty-3.6.3.Final","sha":"d70e3c1561f96903104edb15802adf591e80d77c","kind":"tag","published_at":"2013-02-21T13:31:03.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.3.Final/manifests"},{"name":"netty-4.0.0.Beta1","sha":"59e638f8f5f801618cf82bbbc97aee4a79f4db93","kind":"tag","published_at":"2013-02-14T20:56:20.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Beta1/manifests"},{"name":"netty-3.2.9.Final","sha":"3b5550e16b30d0046862ab3c634400ee6e1b9b7e","kind":"tag","published_at":"2013-01-21T06:44:54.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.9.Final/manifests"},{"name":"netty-3.6.2.Final","sha":"c0d783c76f1731a543d522be6a15449df22bf213","kind":"tag","published_at":"2013-01-16T11:28:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.2.Final/manifests"},{"name":"netty-3.6.1.Final","sha":"af307c4ad718a131697a24de4722a243e09b6f32","kind":"tag","published_at":"2013-01-03T14:16:04.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.1.Final/manifests"},{"name":"netty-3.2.8.Final","sha":"f0044891ee047366d896181bf9f23c88dbe9ac07","kind":"tag","published_at":"2012-12-20T09:21:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.8.Final/manifests"},{"name":"netty-3.6.0.Final","sha":"06b3c8afd1a85b994251001b04ad657fbdb587af","kind":"tag","published_at":"2012-12-20T06:08:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.0.Final/manifests"},{"name":"netty-4.0.0.Alpha8","sha":"17d77ed160517d8b1b56f6e96a201bd634e76738","kind":"tag","published_at":"2012-12-03T19:34:01.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha8","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha8/manifests"},{"name":"netty-3.5.11.Final","sha":"1f5a1efeda47a5e77b82d32f50115c355845c4c8","kind":"tag","published_at":"2012-11-29T19:39:15.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.11.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.11.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.11.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.11.Final/manifests"},{"name":"netty-3.6.0.Beta1","sha":"1198e18133a1548a9fcb594b760d3e5e06be5122","kind":"tag","published_at":"2012-11-11T18:00:52.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.6.0.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-3.6.0.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.0.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.6.0.Beta1/manifests"},{"name":"netty-3.5.10.Final","sha":"27159fff7bce798a066c020f9fe582871e12a130","kind":"tag","published_at":"2012-11-11T12:08:53.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.10.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.10.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.10.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.10.Final/manifests"},{"name":"netty-4.0.0.Alpha7","sha":"57da8222a4359816b5ac7dbf9bcb889c10300513","kind":"tag","published_at":"2012-11-05T22:08:34.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha7","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha7/manifests"},{"name":"netty-4.0.0.Alpha6","sha":"7315490fcaea567113cd8833f3a0a12f632af8db","kind":"tag","published_at":"2012-10-28T17:41:21.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha6","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha6/manifests"},{"name":"netty-3.5.9.Final","sha":"dd58ff8bfc6a7b8c44f21ebbd042f7c0b9c309db","kind":"tag","published_at":"2012-10-25T05:34:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.9.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.9.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.9.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.9.Final/manifests"},{"name":"netty-3.5.8.Final","sha":"84feb9f2e99edeb01d8da07d64fc2041b0d926b5","kind":"tag","published_at":"2012-09-29T07:25:49.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.8.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.8.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.8.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.8.Final/manifests"},{"name":"netty-4.0.0.Alpha5","sha":"595e1067c7caf059d889181a5ada11d750d7c0c7","kind":"tag","published_at":"2012-09-28T08:57:20.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha5","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha5/manifests"},{"name":"netty-4.0.0.Alpha4","sha":"42685759dec119e6c992774b824dd653bdaa80ab","kind":"tag","published_at":"2012-09-13T08:40:48.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha4","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha4/manifests"},{"name":"netty-3.5.7.Final","sha":"2386073bb42e4d65bb0eb1b0fbefac2902148db8","kind":"tag","published_at":"2012-09-05T08:03:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.7.Final/manifests"},{"name":"netty-3.5.6.Final","sha":"9717b2f62a318c24e636fd0a6de9d89a06da3447","kind":"tag","published_at":"2012-08-30T09:31:25.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.6.Final/manifests"},{"name":"netty-4.0.0.Alpha3","sha":"628c5598b326336f67feccb5e48a44838731763b","kind":"tag","published_at":"2012-08-30T07:47:26.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha3","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha3/manifests"},{"name":"netty-3.5.5.Final","sha":"fc5dae16805d48539a9fd291d9b3d125802cb74e","kind":"tag","published_at":"2012-08-22T12:31:02.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.5.Final/manifests"},{"name":"netty-4.0.0.Alpha2","sha":"68bef8cb99eb8c962838fe125a09f7600af65a77","kind":"tag","published_at":"2012-08-21T06:40:55.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha2","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha2/manifests"},{"name":"netty-3.5.4.Final","sha":"22433f9841adfbe2767f2f010113d313fdcb482f","kind":"tag","published_at":"2012-08-16T09:00:51.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.4.Final/manifests"},{"name":"netty-3.5.3.Final","sha":"fd363ce96969a60ae4b0d64f811d10db8489a817","kind":"tag","published_at":"2012-07-23T10:12:23.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.3.Final/manifests"},{"name":"netty-4.0.0.Alpha1","sha":"527f2f6c6e2d37274ad02a646f58a2718bc88021","kind":"tag","published_at":"2012-07-10T14:11:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-4.0.0.Alpha1","html_url":"https://github.com/netty/netty/releases/tag/netty-4.0.0.Alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-4.0.0.Alpha1/manifests"},{"name":"netty-3.5.2.Final","sha":"6e80df52f7504980a022014bfa156b1086353fed","kind":"tag","published_at":"2012-07-05T08:51:15.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.2.Final/manifests"},{"name":"netty-3.5.1.Final","sha":"db7fcc806cbd88dec3101ebbfb1dfc11b2e2fb09","kind":"tag","published_at":"2012-06-24T13:26:00.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.1.Final/manifests"},{"name":"netty-3.5.0.Final","sha":"7fa8b8b3de5f8e18edbbe96d83f1fe162aac9675","kind":"tag","published_at":"2012-06-08T16:18:19.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.0.Final/manifests"},{"name":"netty-3.4.6.Final","sha":"4782f3f7122b930e52b81a4fb400e84667be5bb4","kind":"tag","published_at":"2012-05-29T07:04:14.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.6.Final/manifests"},{"name":"netty-3.5.0.Beta1","sha":"68c1a1e02f54cd5fc5c39d715de9939a74c72acc","kind":"tag","published_at":"2012-05-25T12:56:39.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.5.0.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-3.5.0.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.0.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.5.0.Beta1/manifests"},{"name":"netty-3.4.5.Final","sha":"2da5b0ee99f0a9c729d66d051b28735b58d5e2ac","kind":"tag","published_at":"2012-05-15T19:44:20.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.5.Final/manifests"},{"name":"netty-3.4.4.Final","sha":"41fcee42559003d1e3443017e4591baf2e7c766d","kind":"tag","published_at":"2012-05-06T14:45:12.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.4.Final/manifests"},{"name":"netty-3.4.3.Final","sha":"b678abf5711cd2cd45850dbac2b7e33d84a2298b","kind":"tag","published_at":"2012-05-04T18:39:27.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.3.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.3.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.3.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.3.Final/manifests"},{"name":"netty-3.4.2.Final","sha":"4f849dfceb02ae315120b551c6b2925f344ee1f4","kind":"tag","published_at":"2012-04-27T07:01:16.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.2.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.2.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.2.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.2.Final/manifests"},{"name":"netty-3.4.1.Final","sha":"8c1ac84c31eaf2ef40cef5abaa12a0de6aea537b","kind":"tag","published_at":"2012-04-20T18:57:18.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.1.Final/manifests"},{"name":"netty-3.4.0.Final","sha":"71d8949fb2c7b061bf4daeee7d2351b939dfb4d6","kind":"tag","published_at":"2012-04-12T16:04:53.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Final/manifests"},{"name":"netty-3.4.0.Beta1","sha":"dfec26d4cc2c90b4dd82ec84f09d663478be193f","kind":"tag","published_at":"2012-04-04T18:13:05.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.0.Beta1","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.0.Beta1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Beta1/manifests"},{"name":"netty-3.4.0.Alpha2","sha":"89c8abab62d95105331faa9885a2a4c546cea0fa","kind":"tag","published_at":"2012-03-26T16:26:02.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.0.Alpha2","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.0.Alpha2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Alpha2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Alpha2/manifests"},{"name":"netty-3.4.0.Alpha1","sha":"210aaa1ed1c1c8236f4c3c27143aa6b1766cd5fe","kind":"tag","published_at":"2012-03-02T20:49:08.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.4.0.Alpha1","html_url":"https://github.com/netty/netty/releases/tag/netty-3.4.0.Alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.4.0.Alpha1/manifests"},{"name":"netty-3.3.1.Final","sha":"08a823965552c3b104d5667ac88a5cbd5c09209d","kind":"tag","published_at":"2012-02-04T15:18:28.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.3.1.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.3.1.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.3.1.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.3.1.Final/manifests"},{"name":"netty-3.3.0.Final","sha":"6ec46bc17f11186b5ce7537dd042fe58409de708","kind":"tag","published_at":"2012-01-19T04:52:09.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.3.0.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.3.0.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.3.0.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.3.0.Final/manifests"},{"name":"netty-3.2.7.Final","sha":"0b5abecc002059c00c55c20eff90d96603b083c0","kind":"tag","published_at":"2011-11-24T03:24:45.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.7.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.7.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.7.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.7.Final/manifests"},{"name":"netty-3.2.6.Final","sha":"20df06911ef6bc186bd68a4507279d83a5532b9c","kind":"tag","published_at":"2011-10-23T05:39:11.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.6.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.6.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.6.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.6.Final/manifests"},{"name":"netty-3.2.5.Final","sha":"a96d88c251e635d5ca18180b522e345667ddcf71","kind":"tag","published_at":"2011-08-02T01:47:13.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.5.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.5.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.5.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.5.Final/manifests"},{"name":"netty-3.2.4.Final","sha":"0b47c34036edb6beab4d90ac6e584fef3f10c89f","kind":"tag","published_at":"2011-02-07T12:34:42.000Z","download_url":"https://codeload.github.com/netty/netty/tar.gz/netty-3.2.4.Final","html_url":"https://github.com/netty/netty/releases/tag/netty-3.2.4.Final","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.4.Final","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netty%2Fnetty/tags/netty-3.2.4.Final/manifests"}]},"repo_metadata_updated_at":"2023-11-27T18:09:50.321Z","dependent_packages_count":556,"downloads":null,"downloads_period":null,"dependent_repos_count":1457,"rankings":{"downloads":null,"dependent_repos_count":0.30355854772781915,"dependent_packages_count":0.17732628035585477,"stargazers_count":0.7401618978921215,"forks_count":0.5081349683417489,"docker_downloads_count":0.01663060030456039,"average":0.34916245892442094},"purl":"pkg:maven/io.netty/netty-codec-http2","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYyNTYtajk2NS03ZjMy","url":"https://github.com/advisories/GHSA-f256-j965-7f32","title":"Possible request smuggling in HTTP/2 due missing validation of content-length","description":"### Impact\nThe content-length header is not correctly validated if the request only use a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1\n\nThis is a followup of https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj which did miss to fix this one case. \n\n### Patches\nThis was fixed as part of 4.1.61.Final\n\n### Workarounds\nValidation can be done by the user before proxy the request by validating the header.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-03-30T15:10:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32","https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj","https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295","https://nvd.nist.gov/vuln/detail/CVE-2021-21409","https://www.debian.org/security/2021/dsa-4885","https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898@%3Cdev.flink.apache.org%3E","https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183@%3Cnotifications.zookeeper.apache.org%3E","https://security.netapp.com/advisory/ntap-20210604-0003/","https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5@%3Cissues.flink.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://github.com/advisories/GHSA-f256-j965-7f32"],"source_kind":"github","identifiers":["GHSA-f256-j965-7f32","CVE-2021-21409"],"repository_url":"https://github.com/netty/netty","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c 4.0.0"}],"ecosystem":"maven","package_name":"io.netty:netty"},{"versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c 4.0.0"}],"ecosystem":"maven","package_name":"org.jboss.netty:netty"},{"versions":[{"first_patched_version":"4.1.61.Final","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.1.61.Final"}],"ecosystem":"maven","package_name":"io.netty:netty-codec-http2"}],"created_at":"2022-12-21T16:12:58.906Z","updated_at":"2023-08-16T05:02:24.000Z","epss_percentage":0.04983,"epss_percentile":0.88692},{"uuid":"GSA_kwCzR0hTQS14cHc4LXJjd3YtOGY4cM4AA2X-","url":"https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","title":"io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack","description":"A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. \n\n### Impact\nThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.\n\n### Patches\nThis is patched in version 4.1.100.Final.\n\n### Workarounds\nA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).\n\n### References\n- https://www.cve.org/CVERecord?id=CVE-2023-44487\n- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/\n- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-10-10T22:22:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","https://nvd.nist.gov/vuln/detail/CVE-2023-44487","https://www.cve.org/CVERecord?id=CVE-2023-44487","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p"],"source_kind":"github","identifiers":["GHSA-xpw8-rcwv-8f8p"],"repository_url":"https://github.com/netty/netty","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"4.1.100.Final","vulnerable_version_range":"\u003c 4.1.100.Final"}],"ecosystem":"maven","package_name":"io.netty:netty-codec-http2"}],"created_at":"2023-10-10T23:05:57.832Z","updated_at":"2023-11-06T22:08:37.000Z","epss_percentage":null,"epss_percentile":null},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdtNDctOHY1cC13anBq","url":"https://github.com/advisories/GHSA-wm47-8v5p-wjpj","title":"Possible request smuggling in HTTP/2 due missing validation","description":"### Impact\nIf a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up.  This is fine as long as the request is not proxied through as HTTP/1.1.\nIf the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling.  \n\nIn a proxy case, users  may assume the content-length is validated somehow, which is not the case.  If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked.\n\nAn attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1.   A sample attack request looks like:\n\n```\nPOST / HTTP/2\n:authority:: externaldomain.com\nContent-Length: 4\n\nasdfGET /evilRedirect HTTP/1.1\nHost: internaldomain.com\n```\n\nUsers are only affected if all of this is `true`:\n * `HTTP2MultiplexCodec` or `Http2FrameCodec` is used\n * `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects\n * These  HTTP/1.1 objects are forwarded to another remote peer.\n \n\n### Patches\nThis has been patched in 4.1.60.Final\n\n### Workarounds\nThe user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`.\n\n### References\nRelated change to workaround the problem: https://github.com/Netflix/zuul/pull/980 ","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-03-09T18:49:49.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj","https://github.com/Netflix/zuul/pull/980","https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4","https://nvd.nist.gov/vuln/detail/CVE-2021-21295","https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r490ca5611c150d193b320a2608209180713b7c68e501b67b0cffb925@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r57245853c7245baab09eae08728c52b58fd77666538092389cc3e882@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r6d32fc3cd547f7c9a288a57c7f525f5d00a00d5d163613e0d10a23ef@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rb523bb6c60196c5f58514b86a8585c2069a4852039b45de3818b29d2@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r040a5e4d9cca2f98354b58a70b27099672276f66995c4e2e39545d0b@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r15f66ada9a5faf4bac69d9e7c4521cedfefa62df9509881603791969@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r1bca0b81193b74a451fc6d687ab58ef3a1f5ec40f6c61561d8dd9509@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r22adb45fe902aeafcd0a1c4db13984224a667676c323c66db3af38a1@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r22b2f34447d71c9a0ad9079b7860323d5584fb9b40eb42668c21eaf1@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r268850f26639ebe249356ed6d8edb54ee8943be6f200f770784fb190@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r27b7e5a588ec826b15f38c40be500c50073400019ce7b8adfd07fece@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r2e93ce23e04c3f0a61e987d1111d0695cb668ac4ec4edbf237bd3e80@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r312ce5bd3c6bf08c138349b507b6f1c25fe9cf40b6f2b0014c9d12b1@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r393a339ab0b63ef9e6502253eeab26e7643b3e69738d5948b2b1d064@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r3c293431c781696681abbfe1c573c2d9dcdae6fd3ff330ea22f0433f@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r3ff9e735ca33612d900607dc139ebd38a64cadc6bce292e53eb86d7f@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5232e33a1f3b310a3e083423f736f3925ebdb150844d60ac582809f8@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5470456cf1409a99893ae9dd57439799f6dc1a60fda90e11570f66fe@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5fc5786cdd640b1b0a3c643237ce0011f0a08a296b11c0e2c669022c@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r67e6a636cbc1958383a1cd72b7fd0cd7493360b1dd0e6c12f5761798@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r6a122c25e352eb134d01e7f4fc4d345a491c5ee9453fef6fc754d15b@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r6a29316d758db628a1df49ca219d64caf493999b52cc77847bfba675@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r6aee7e3566cb3e51eeed2fd8786704d91f80a7581e00a787ba9f37f6@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r70cebada51bc6d49138272437d8a28fe971d0197334ef906b575044c@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r837bbcbf12e335e83ab448b1bd2c1ad7e86efdc14034b23811422e6a@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r86cd38a825ab2344f3e6cad570528852f29a4ffdf56ab67d75c36edf@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/r8db1d7b3b9acc9e8d2776395e280eb9615dd7790e1da8c57039963de@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9051e4f484a970b5566dc1870ecd9c1eb435214e2652cf3ea4d0c0cc@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r905b92099998291956eebf4f1c5d95f5a0cbcece2946cc46d32274fd@%3Cdev.hbase.apache.org%3E","https://lists.apache.org/thread.html/r96ce18044880c33634c4b3fcecc57b8b90673c9364d63eba00385523@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/ra83096bcbfe6e1f4d54449f8a013117a0536404e9d307ab4a0d34f81@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb95d42ce220ed4a4683aa17833b5006d657bc4254bc5cb03cd5e6bfb@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/rbadcbcb50195f00bbd196403865ced521ca70787999583c07be38d0e@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rbed09768f496244a2e138dbbe6d2847ddf796c9c8ef9e50f2e3e30d9@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rc165e36ca7cb5417aec3f21bbc4ec00fb38ecebdd96a82cfab9bd56f@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rc73b8dd01b1be276d06bdf07883ecd93fe1a01f139a99ef30ba4308c@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rcf3752209a8b04996373bf57fdc808b3bfaa2be8702698a0323641f8@%3Ccommits.hbase.apache.org%3E","https://lists.apache.org/thread.html/rcfc535afd413d9934d6ee509dce234dac41fa3747a7555befb17447e@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd25c88aad0e76240dd09f0eb34bdab924933946429e068a167adcb73@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rdb4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rdc096e13ac4501ea2e2b03a197682a313b85d3d3ec89d5ae5551b384@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re6207ebe2ca4d44f2a6deee695ad6f27fd29d78980f1d46ed1574f91@%3Cissues.zookeeper.apache.org%3E","https://www.debian.org/security/2021/dsa-4885","https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898@%3Cdev.flink.apache.org%3E","https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/rcfc154eb2de23d2dc08a56100341161e1a40a8ea86c693735437e8f2@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/ra96c74c37ed7252f78392e1ad16442bd16ae72a4d6c8db50dd55c88b@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e@%3Cissues.flink.apache.org%3E","https://security.netapp.com/advisory/ntap-20210604-0003/","https://lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/racc191a1f70a4f13155e8002c61bddef2870b26441971c697436ad5d@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794b60@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r16c4b55ac82be72f28adad4f8061477e5f978199d5725691dcc82c24@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rae198f44c3f7ac5264045e6ba976be1703cff38dcf1609916e50210d@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r3c4596b9b37f5ae91628ccf169d33cd5a0da4b16b6c39d5bad8e03f3@%3Cdev.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/re4f70b62843e92163fab03b65e2aa8078693293a0c36f1cc260079ed@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r8bcaf7821247b1836b10f6a1a3a3212b06272fd4cde4a859de1b78cf@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b@%3Cissues.kudu.apache.org%3E","https://lists.apache.org/thread.html/r32b0b640ad2be3b858f0af51c68a7d5c5a66a462c8bbb93699825cd3@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r33eb06b05afbc7df28d31055cae0cb3fd36cab808c884bf6d680bea5@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rfff6ff8ffb31e8a32619c79774def44b6ffbb037c128c5ad3eab7171@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E","https://www.oracle.com/security-alerts/cpuapr2022.html","https://github.com/advisories/GHSA-wm47-8v5p-wjpj"],"source_kind":"github","identifiers":["GHSA-wm47-8v5p-wjpj","CVE-2021-21295"],"repository_url":"https://github.com/netty/netty","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c 4.0.0"}],"ecosystem":"maven","package_name":"io.netty:netty"},{"versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c 4.0.0"}],"ecosystem":"maven","package_name":"org.jboss.netty:netty"},{"versions":[{"first_patched_version":"4.1.60.Final","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.1.60.Final"}],"ecosystem":"maven","package_name":"io.netty:netty-codec-http2"}],"created_at":"2022-12-21T16:12:58.916Z","updated_at":"2025-05-11T01:12:01.799Z","epss_percentage":0.013,"epss_percentile":0.78639}],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/io.netty:netty-codec-http2","docker_dependents_count":9659,"docker_downloads_count":5408636460,"usage_url":"https://repos.ecosyste.ms/usage/maven/io.netty:netty-codec-http2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/io.netty:netty-codec-http2/dependencies","status":null,"funding_links":["https://github.com/sponsors/netty","https://ko-fi.com/netty_project","https://liberapay.com/netty","https://patreon.com/netty","https://paypal.me/nettyproject"],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.netty:netty-codec-http2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.netty:netty-codec-http2/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.netty:netty-codec-http2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.netty:netty-codec-http2/related_packages","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":517647,"maintainers_count":0,"namespaces_count":68787,"keywords_count":32037,"github":"maven-central","metadata":{"funded_packages_count":24975},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-06-06T05:59:03.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},"unique_repositories_count":90,"unique_repositories_count_past_30_days":8,"recent_issues":[{"uuid":"4617350350","node_id":"PR_kwDODKEBwM7kIojd","number":2005,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.1.133.Final to 4.1.135.Final in /generated-platform-project/quarkus/bom","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:23:04.000Z","updated_at":"2026-06-09T03:24:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.133.Final","new_version":"4.1.135.Final","repository_url":"https://github.com/netty/netty"}],"path":"/generated-platform-project/quarkus/bom","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.133.Final to 4.1.135.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.135.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuto-port 4.1: MQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16834\"\u003enetty/netty#16834\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16847\"\u003enetty/netty#16847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x (4.1 backport) by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16856\"\u003enetty/netty#16856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16861\"\u003enetty/netty#16861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpSubnetFilter: Correctly handle ipv6 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16860\"\u003enetty/netty#16860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConfigurable bound on RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16858\"\u003enetty/netty#16858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit decoded length by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16859\"\u003enetty/netty#16859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Ensure query id is not predictible by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16870\"\u003enetty/netty#16870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrapping plain trust manager silently disables hostname verification by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16868\"\u003enetty/netty#16868\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16852\"\u003enetty/netty#16852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16892\"\u003enetty/netty#16892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Reject HAProxyMessages with malformated TLV and not leak memory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16866\"\u003enetty/netty#16866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL: Use sane defaults as limits for the client hello length and timeout by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16871\"\u003enetty/netty#16871\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Only cache CNAME if part of the queried domain by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16873\"\u003enetty/netty#16873\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Enforce max concurrent streams for misbehaving clients by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16876\"\u003enetty/netty#16876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDns: Insufficient Bailiwick Validation for NS Records by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16877\"\u003enetty/netty#16877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: DelegatingDecompressorFrameListener must release memory in all cases by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16880\"\u003enetty/netty#16880\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16886\"\u003enetty/netty#16886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16883\"\u003enetty/netty#16883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16894\"\u003enetty/netty#16894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Fix ByteBuf leak when parsing nested SSL TLVs by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16881\"\u003enetty/netty#16881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll / Kqueue: Correctly handle receive of FD by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16872\"\u003enetty/netty#16872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSCTP: Limit the number of inflight incomplete SCTP messages and the number of fragments by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16875\"\u003enetty/netty#16875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Correctly release incomplete message on removal when using RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16878\"\u003enetty/netty#16878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit the maximum number of nested arrays by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16882\"\u003enetty/netty#16882\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f05f765d81460799c53123a207f665bf3b465171\"\u003e\u003ccode\u003ef05f765\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.135.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/728c98b8ec6597faaccebdc20bf757d6f4b6310b\"\u003e\u003ccode\u003e728c98b\u003c/code\u003e\u003c/a\u003e Redis: Limit the maximum number of nested arrays (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16882\"\u003e#16882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ced30adba26730f0c004c828f607059a050fefb1\"\u003e\u003ccode\u003eced30ad\u003c/code\u003e\u003c/a\u003e Redis: Correctly release incomplete message on removal when using RedisArrayA...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/cef5395186369f6bf7a8caac34e4de1596ba9f15\"\u003e\u003ccode\u003ecef5395\u003c/code\u003e\u003c/a\u003e SCTP: Limit the number of inflight incomplete SCTP messages and the number of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/652663cb50c3be6378969be2cf84472743e0109f\"\u003e\u003ccode\u003e652663c\u003c/code\u003e\u003c/a\u003e Epoll / Kqueue: Correctly handle receive of FD (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16872\"\u003e#16872\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bd6214fe1c3bae1d42aad6e372657b5b2c1f5105\"\u003e\u003ccode\u003ebd6214f\u003c/code\u003e\u003c/a\u003e HAProxy: Fix ByteBuf leak when parsing nested SSL TLVs (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16881\"\u003e#16881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/d7f9069d9e966e0f426429b18973417af066e3d4\"\u003e\u003ccode\u003ed7f9069\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b831454889b20776be6a73daad329404c4682e94\"\u003e\u003ccode\u003eb831454\u003c/code\u003e\u003c/a\u003e HTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16883\"\u003e#16883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/51260aa57e8e9538d31083624226afd793cc675f\"\u003e\u003ccode\u003e51260aa\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16886\"\u003e#16886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e\"\u003e\u003ccode\u003edb6138b\u003c/code\u003e\u003c/a\u003e HTTP2: DelegatingDecompressorFrameListener must release memory in all cases (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.133.Final...netty-4.1.135.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.133.Final\u0026new-version=4.1.135.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quarkusio/quarkus-platform/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/quarkusio/quarkus-platform/pull/2005","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/quarkusio%2Fquarkus-platform/issues/2005","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2005/packages"},{"uuid":"4617347650","node_id":"PR_kwDOQEzLMs7kIn9b","number":232,"state":"open","title":"deps(deps-dev): Bump io.netty:netty-codec-http2 from 4.1.130.Final to 4.1.135.Final","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:22:32.000Z","updated_at":"2026-06-08T23:22:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps-dev): Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.130.Final","new_version":"4.1.135.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.130.Final to 4.1.135.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.135.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuto-port 4.1: MQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16834\"\u003enetty/netty#16834\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16847\"\u003enetty/netty#16847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x (4.1 backport) by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16856\"\u003enetty/netty#16856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16861\"\u003enetty/netty#16861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpSubnetFilter: Correctly handle ipv6 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16860\"\u003enetty/netty#16860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConfigurable bound on RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16858\"\u003enetty/netty#16858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit decoded length by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16859\"\u003enetty/netty#16859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Ensure query id is not predictible by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16870\"\u003enetty/netty#16870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrapping plain trust manager silently disables hostname verification by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16868\"\u003enetty/netty#16868\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16852\"\u003enetty/netty#16852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16892\"\u003enetty/netty#16892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Reject HAProxyMessages with malformated TLV and not leak memory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16866\"\u003enetty/netty#16866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL: Use sane defaults as limits for the client hello length and timeout by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16871\"\u003enetty/netty#16871\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Only cache CNAME if part of the queried domain by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16873\"\u003enetty/netty#16873\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Enforce max concurrent streams for misbehaving clients by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16876\"\u003enetty/netty#16876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDns: Insufficient Bailiwick Validation for NS Records by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16877\"\u003enetty/netty#16877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: DelegatingDecompressorFrameListener must release memory in all cases by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16880\"\u003enetty/netty#16880\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16886\"\u003enetty/netty#16886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16883\"\u003enetty/netty#16883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16894\"\u003enetty/netty#16894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Fix ByteBuf leak when parsing nested SSL TLVs by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16881\"\u003enetty/netty#16881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll / Kqueue: Correctly handle receive of FD by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16872\"\u003enetty/netty#16872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSCTP: Limit the number of inflight incomplete SCTP messages and the number of fragments by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16875\"\u003enetty/netty#16875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Correctly release incomplete message on removal when using RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16878\"\u003enetty/netty#16878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit the maximum number of nested arrays by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16882\"\u003enetty/netty#16882\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f05f765d81460799c53123a207f665bf3b465171\"\u003e\u003ccode\u003ef05f765\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.135.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/728c98b8ec6597faaccebdc20bf757d6f4b6310b\"\u003e\u003ccode\u003e728c98b\u003c/code\u003e\u003c/a\u003e Redis: Limit the maximum number of nested arrays (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16882\"\u003e#16882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ced30adba26730f0c004c828f607059a050fefb1\"\u003e\u003ccode\u003eced30ad\u003c/code\u003e\u003c/a\u003e Redis: Correctly release incomplete message on removal when using RedisArrayA...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/cef5395186369f6bf7a8caac34e4de1596ba9f15\"\u003e\u003ccode\u003ecef5395\u003c/code\u003e\u003c/a\u003e SCTP: Limit the number of inflight incomplete SCTP messages and the number of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/652663cb50c3be6378969be2cf84472743e0109f\"\u003e\u003ccode\u003e652663c\u003c/code\u003e\u003c/a\u003e Epoll / Kqueue: Correctly handle receive of FD (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16872\"\u003e#16872\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bd6214fe1c3bae1d42aad6e372657b5b2c1f5105\"\u003e\u003ccode\u003ebd6214f\u003c/code\u003e\u003c/a\u003e HAProxy: Fix ByteBuf leak when parsing nested SSL TLVs (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16881\"\u003e#16881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/d7f9069d9e966e0f426429b18973417af066e3d4\"\u003e\u003ccode\u003ed7f9069\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b831454889b20776be6a73daad329404c4682e94\"\u003e\u003ccode\u003eb831454\u003c/code\u003e\u003c/a\u003e HTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16883\"\u003e#16883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/51260aa57e8e9538d31083624226afd793cc675f\"\u003e\u003ccode\u003e51260aa\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16886\"\u003e#16886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e\"\u003e\u003ccode\u003edb6138b\u003c/code\u003e\u003c/a\u003e HTTP2: DelegatingDecompressorFrameListener must release memory in all cases (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.130.Final...netty-4.1.135.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.130.Final\u0026new-version=4.1.135.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/montge/ddf/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/montge/ddf/pull/232","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/montge%2Fddf/issues/232","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/232/packages"},{"uuid":"4617321829","node_id":"PR_kwDODyN6Yc7kIiXz","number":3320,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.2.4.Final to 4.2.15.Final in /forms-flow-bpm","user":"dependabot[bot]","labels":["dependencies","java","Review effort 1/5"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:16:48.000Z","updated_at":"2026-06-08T23:18:07.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.2.4.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"}],"path":"/forms-flow-bpm","ecosystem":"maven"},"body":"### **User description**\nBumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.2.4.Final to 4.2.15.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.4.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.2.4.Final\u0026new-version=4.2.15.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AOT-Technologies/forms-flow-ai/network/alerts).\n\n\u003c/details\u003e\n\n\n___\n\n### **PR Type**\nEnhancement\n\n\n___\n\n### **Description**\n- Upgrade Netty HTTP/2 codec dependency\n\n- Apply update in BPM Maven modules\n\n\n___\n\n### Diagram Walkthrough\n\n\n```mermaid\nflowchart LR\n  A[\"Maven POMs\"] \n  B[\"netty-codec-http2 4.2.4.Final\"]\n  C[\"netty-codec-http2 4.2.15.Final\"]\n  A -- \"updates dependency\" --\u003e C\n  B -- \"replaced by\" --\u003e C\n```\n\n\n\n\u003cdetails\u003e \u003csummary\u003e\u003ch3\u003e File Walkthrough\u003c/h3\u003e\u003c/summary\u003e\n\n\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003e\u003c/th\u003e\u003cth align=\"left\"\u003eRelevant files\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eDependencies\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003ctable\u003e\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003epom.xml\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate Camunda Netty HTTP/2 dependency\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\nforms-flow-bpm/forms-flow-bpm-camunda/pom.xml\n\n\u003cul\u003e\u003cli\u003eUpdates \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e\u003cbr\u003e \u003cli\u003e Changes version to \u003ccode\u003e4.2.15.Final\u003c/code\u003e\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320/files#diff-3d37dc342176b12271ca8dd6e5baadc861fd99d91063994fd4ca0d8fc6f8f98b\"\u003e+1/-1\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003epom.xml\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate parent Netty HTTP/2 dependency\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\nforms-flow-bpm/pom.xml\n\n\u003cul\u003e\u003cli\u003eUpdates profile-managed \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e\u003cbr\u003e \u003cli\u003e Changes version to \u003ccode\u003e4.2.15.Final\u003c/code\u003e\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320/files#diff-f122323a7f27b262aa27d0d86418e0b0341780f2431f6d9dddeebf94bc60b48f\"\u003e+1/-1\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\u003c/table\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\n\n\u003c/details\u003e\n\n___\n\n","html_url":"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AOT-Technologies%2Fforms-flow-ai/issues/3320","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3320/packages"},{"uuid":"4610340303","node_id":"PR_kwDODyN6Yc7jxTxZ","number":3317,"state":"open","title":"Bump the bpm-minor-patch group across 1 directory with 29 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T05:49:46.000Z","updated_at":"2026-06-08T05:50:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"bpm-minor-patch","update_count":29,"packages":[{"name":"org.camunda.bpm:camunda-bom","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm:camunda-engine-rest-core","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.extension:camunda-platform-7-keycloak","old_version":"7.21.5","new_version":"7.24.0","repository_url":"https://github.com/camunda/camunda-platform-7-keycloak"},{"name":"org.slf4j:slf4j-api","old_version":"2.0.6","new_version":"2.0.18"},{"name":"org.postgresql:postgresql","old_version":"42.7.2","new_version":"42.7.11","repository_url":"https://github.com/pgjdbc/pgjdbc"},{"name":"javax.xml.bind:jaxb-api","old_version":"2.2.3","new_version":"2.3.1","repository_url":"https://github.com/javaee/jaxb-spec"},{"name":"org.assertj:assertj-core","old_version":"3.21.0","new_version":"3.27.7","repository_url":"https://github.com/assertj/assertj"},{"name":"org.codehaus.groovy:groovy-all","old_version":"3.0.21","new_version":"3.0.25","repository_url":"https://github.com/apache/groovy"},{"name":"org.jsoup:jsoup","old_version":"1.15.3","new_version":"1.22.2","repository_url":"https://github.com/jhy/jsoup"},{"name":"com.fasterxml.jackson.core:jackson-databind","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"com.fasterxml.jackson.dataformat:jackson-dataformat-xml","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson-dataformat-xml"},{"name":"com.fasterxml.jackson.core:jackson-annotations","old_version":"2.15.0","new_version":"2.22.0"},{"name":"org.apache.commons:commons-collections4","old_version":"4.4","new_version":"4.5.0"},{"name":"org.projectlombok:lombok","old_version":"1.18.20","new_version":"1.18.46","repository_url":"https://github.com/projectlombok/lombok"},{"name":"commons-io:commons-io","old_version":"2.16.1","new_version":"2.22.0"},{"name":"org.testng:testng","old_version":"7.7.1","new_version":"7.12.0","repository_url":"https://github.com/testng-team/testng"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.4.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.1.125.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.18.0","new_version":"3.20.0"},{"name":"org.bouncycastle:bcprov-jdk18on","old_version":"1.78","new_version":"1.84","repository_url":"https://github.com/bcgit/bc-java"},{"name":"org.bouncycastle:bcpkix-jdk18on","old_version":"1.79","new_version":"1.84","repository_url":"https://github.com/bcgit/bc-java"},{"name":"org.yaml:snakeyaml","old_version":"2.2","new_version":"2.6"},{"name":"org.apache.maven.plugins:maven-surefire-plugin","old_version":"3.0.0-M7","new_version":"3.6.0-M1","repository_url":"https://github.com/apache/maven-surefire"},{"name":"org.jacoco:jacoco-maven-plugin","old_version":"0.8.8","new_version":"0.8.15","repository_url":"https://github.com/jacoco/jacoco"},{"name":"org.codehaus.mojo:exec-maven-plugin","old_version":"3.0.0","new_version":"3.6.3","repository_url":"https://github.com/mojohaus/exec-maven-plugin"}],"path":null,"ecosystem":"maven"},"body":"Bumps the bpm-minor-patch group with 28 updates in the /forms-flow-bpm directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.camunda.bpm:camunda-bom | `7.21.0` | `7.24.0` |\n| org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp | `7.21.0` | `7.24.0` |\n| org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest | `7.21.0` | `7.24.0` |\n| org.camunda.bpm:camunda-engine-rest-core | `7.21.0` | `7.24.0` |\n| [org.camunda.bpm.extension:camunda-platform-7-keycloak](https://github.com/camunda/camunda-platform-7-keycloak) | `7.21.5` | `7.24.0` |\n| org.slf4j:slf4j-api | `2.0.6` | `2.0.18` |\n| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.2` | `42.7.11` |\n| [javax.xml.bind:jaxb-api](https://github.com/javaee/jaxb-spec) | `2.2.3` | `2.3.1` |\n| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.21.0` | `3.27.7` |\n| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `3.0.21` | `3.0.25` |\n| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.15.3` | `1.22.2` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.15.0` | `2.22.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.15.0` | `2.22.0` |\n| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.15.0` | `2.22.0` |\n| com.fasterxml.jackson.core:jackson-annotations | `2.15.0` | `2.22.0` |\n| org.apache.commons:commons-collections4 | `4.4` | `4.5.0` |\n| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.20` | `1.18.46` |\n| commons-io:commons-io | `2.16.1` | `2.22.0` |\n| [org.testng:testng](https://github.com/testng-team/testng) | `7.7.1` | `7.12.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.4.Final` | `4.2.15.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.125.Final` | `4.2.15.Final` |\n| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |\n| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.78` | `1.84` |\n| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.79` | `1.84` |\n| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.2` | `2.6` |\n| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M7` | `3.6.0-M1` |\n| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.8` | `0.8.15` |\n| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.0.0` | `3.6.3` |\n\n\nUpdates `org.camunda.bpm:camunda-bom` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm:camunda-engine-rest-core` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.extension:camunda-platform-7-keycloak` from 7.21.5 to 7.24.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/camunda/camunda-platform-7-keycloak/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest` from 7.21.0 to 7.24.0\n\nUpdates `org.slf4j:slf4j-api` from 2.0.6 to 2.0.18\n\nUpdates `org.postgresql:postgresql` from 42.7.2 to 42.7.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pgjdbc/pgjdbc/releases\"\u003eorg.postgresql:postgresql's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev42.7.11\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Limit SCRAM PBKDF2 iterations accepted from the server.\npgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins.\nSee the \u003ca href=\"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq\"\u003eSecurity Advisory\u003c/a\u003e for more detail.\nThe following \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-42198\"\u003eCVE-2026-42198\u003c/a\u003e has been issued.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Add sources and javadocs to shaded published lib generation \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4043\"\u003e#4043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate Changelog and website for release of 42.7.11 \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4042\"\u003e#4042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix scram fix location in changelog and update published artifact developer list \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4041\"\u003e#4041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRestrict test with scram_iterations to v16+ and release notes \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4040\"\u003e#4040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(deps): update ubuntu:24.04 docker digest to 84e77de \u003ca href=\"https://github.com/renovate-bot\"\u003e\u003ccode\u003e@​renovate-bot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4017\"\u003e#4017\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add tests for QueryExecutor#getTransactionState \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4006\"\u003e#4006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(deps): update actions/create-github-app-token action to v2.2.2 \u003ca href=\"https://github.com/renovate-bot\"\u003e\u003ccode\u003e@​renovate-bot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3983\"\u003e#3983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: fix flaky CopyBothResponseTest by using WAL flush LSN \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3979\"\u003e#3979\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: fix flaky replication restart tests by waiting for confirmed_flush_lsn \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3975\"\u003e#3975\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3974\"\u003e#3974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: replace Appveyor with ikalnytskyi/action-setup-postgres \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3966\"\u003e#3966\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: move test table creation from \u003ca href=\"https://github.com/BeforeEach\"\u003e\u003ccode\u003e@​BeforeEach\u003c/code\u003e\u003c/a\u003e to \u003ca href=\"https://github.com/BeforeAll\"\u003e\u003ccode\u003e@​BeforeAll\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3967\"\u003e#3967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn jsonb as PGObject fixes Issue \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3926\"\u003e#3926\u003c/a\u003e \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3956\"\u003e#3956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate docker scripts  \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3958\"\u003e#3958\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimplement require_auth, this is pretty much how libpq does this.  \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3895\"\u003e#3895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: add SCRAM authentication test setup section to TESTING.md \u003ca href=\"https://github.com/emmaeng700\"\u003e\u003ccode\u003e@​emmaeng700\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3945\"\u003e#3945\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd RequireServerVersion annotation for tests \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3939\"\u003e#3939\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: ensure extended protocol messages end with Sync message \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3728\"\u003e#3728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: enable cursor-based fetching in extended protocol when transaction started via SQL command \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3996\"\u003e#3996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: retry with SSL on IOException when sslMode=ALLOW \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3973\"\u003e#3973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: catch SecurityException from setContextClassLoader on ForkJoinPool workers \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3962\"\u003e#3962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: use compareTo for LogSequenceNumber comparison \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3961\"\u003e#3961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: release COPY lock on IOException to prevent connection hang (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3957\"\u003e#3957\u003c/a\u003e) \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3960\"\u003e#3960\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003estyle: replace \u003ca href=\"https://github.com/exception\"\u003e\u003ccode\u003e@​exception\u003c/code\u003e\u003c/a\u003e with \u003ca href=\"https://github.com/throws\"\u003e\u003ccode\u003e@​throws\u003c/code\u003e\u003c/a\u003e in getBoolean javadoc \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4035\"\u003e#4035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use \u003ccode\u003e@​vlsi/github-actions-random-matrix\u003c/code\u003e npm package \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4008\"\u003e#4008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4007\"\u003e#4007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: bump errorprone to 2.48.0 \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add \u003ca href=\"https://github.com/DisableLogger\"\u003e\u003ccode\u003e@​DisableLogger\u003c/code\u003e\u003c/a\u003e annotation to suppress expected log warnings in tests \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3971\"\u003e#3971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: suppress deprecations in test code to reduce build verbosity \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3972\"\u003e#3972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3970\"\u003e#3970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use greedy pairwise coverage for CI matrix generation \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3965\"\u003e#3965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use full version tags in GitHub Actions comments \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3963\"\u003e#3963\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⬆️ Dependencies\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md\"\u003eorg.postgresql:postgresql's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[42.7.11] (2026-04-28)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: Limit SCRAM PBKDF2 iterations accepted from the server.\npgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins.\nSee the \u003ca href=\"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq\"\u003eSecurity Advisory\u003c/a\u003e for more detail.\nThe following \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-42198\"\u003eCVE-2026-42198\u003c/a\u003e has been issued.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: implement require_auth connection property, aligning with libpq behavior [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3895\"\u003e#3895\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3895\"\u003epgjdbc/pgjdbc#3895\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3966\"\u003e#3966\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3966\"\u003epgjdbc/pgjdbc#3966\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: upgrade Gradle to v9 [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3978\"\u003e#3978\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3978\"\u003epgjdbc/pgjdbc#3978\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: ensure extended protocol messages end with Sync message [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3728\"\u003e#3728\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3728\"\u003epgjdbc/pgjdbc#3728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3996\"\u003e#3996\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3996\"\u003epgjdbc/pgjdbc#3996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: retry with SSL on IOException when sslMode=ALLOW [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3973\"\u003e#3973\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3973\"\u003epgjdbc/pgjdbc#3973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: make sure the driver honours connectTimeout when retrying the connection [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3968\"\u003epgjdbc/pgjdbc#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3968\"\u003epgjdbc/pgjdbc#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3962\"\u003e#3962\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3962\"\u003epgjdbc/pgjdbc#3962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3961\"\u003e#3961\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3961\"\u003epgjdbc/pgjdbc#3961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: release COPY lock on IOException to prevent connection hang [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3957\"\u003e#3957\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3957\"\u003epgjdbc/pgjdbc#3957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: return jsonb as PGObject instead of String [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3956\"\u003e#3956\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3956\"\u003epgjdbc/pgjdbc#3956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: align SSL key file permission check with libpq [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3952\"\u003e#3952\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3952\"\u003epgjdbc/pgjdbc#3952\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3905\"\u003e#3905\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3905\"\u003epgjdbc/pgjdbc#3905\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[42.7.10] (2026-02-11)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: Migrate to Shadow 9 \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3931\"\u003ePR 3931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estyle: fix empty line before javadoc for checkstyle compliance [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3925\"\u003e#3925\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3925\"\u003epgjdbc/pgjdbc#3925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estyle: fix lambda argument indentation for checkstyle compliance [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3922\"\u003e#3922\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3922\"\u003epgjdbc/pgjdbc#3922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add autosave=always|never|conservative and cleanupSavepoints=true|false to the randomized CI jobs [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3917\"\u003e#3917\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3917\"\u003epgjdbc/pgjdbc#3917\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: non-standard strings failing test for version 19 [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3934\"\u003e#3934\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3934\"\u003epgjdbc/pgjdbc#3934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: small issues in ConnectionFactoryImpl [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3929\"\u003e#3929\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3929\"\u003epgjdbc/pgjdbc#3929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: process pending responses before fastpath to avoid protocol errors \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3913\"\u003ePR # 3913\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: use.md, fix typos [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3911\"\u003e#3911\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3911\"\u003epgjdbc/pgjdbc#3911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edoc: datasource.md, fix minor formatting issue [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3912\"\u003e#3912\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3912\"\u003epgjdbc/pgjdbc#3912\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edoc: add the new PGP signing key to the official documentation [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3912\"\u003e#3912\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3813\"\u003epgjdbc/pgjdbc#3813\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: make all Calendar instances proleptic Gregorian (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3837\"\u003e#3837\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3887\"\u003e#3887\u003c/a\u003e)\u0026quot; [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3932\"\u003e#3932\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3932\"\u003epgjdbc/pgjdbc#3932\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[42.7.9] (2026-01-14)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/78e261ff2a7f16a37bdceb2204f67e484387da2f\"\u003e\u003ccode\u003e78e261f\u003c/code\u003e\u003c/a\u003e fix: Add sources and javadocs to shaded published lib generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/1e09fa0496377296c9e2ef3bfd2b409945fba17a\"\u003e\u003ccode\u003e1e09fa0\u003c/code\u003e\u003c/a\u003e update Changelog and website for release of 42.7.11 (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4042\"\u003e#4042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/d479fa5b8c8c915a441ce1f2448f69f23dd0b66c\"\u003e\u003ccode\u003ed479fa5\u003c/code\u003e\u003c/a\u003e Fix scram fix location in changelog and update published artifact developer l...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/b04fc46af6c207bc7ce9e788fea8c43d18b73d0f\"\u003e\u003ccode\u003eb04fc46\u003c/code\u003e\u003c/a\u003e docs: Add scram max iters fix to changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/cf548225b4078db954765339720ffdf3bc94e5a6\"\u003e\u003ccode\u003ecf54822\u003c/code\u003e\u003c/a\u003e test: Disable scram test on older version without scram_iterations GUC\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/7dbcc79b2b4adf7b71458c9434d2c43cec7713b9\"\u003e\u003ccode\u003e7dbcc79\u003c/code\u003e\u003c/a\u003e test: Add SCRAM max iteration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/c9d41d1332a7426fcef19ff89f2e6b1116429143\"\u003e\u003ccode\u003ec9d41d1\u003c/code\u003e\u003c/a\u003e fix: Limit SCRAM PBKDF2 iterations accepted from the server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/a340cb2b0ae24c0d98ad9dec569200ebb704d6aa\"\u003e\u003ccode\u003ea340cb2\u003c/code\u003e\u003c/a\u003e style: replace \u003ca href=\"https://github.com/exception\"\u003e\u003ccode\u003e@​exception\u003c/code\u003e\u003c/a\u003e with \u003ca href=\"https://github.com/throws\"\u003e\u003ccode\u003e@​throws\u003c/code\u003e\u003c/a\u003e in getBoolean javadoc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/77837f80c0c20a9f33f9e21b091f4d4552f8e753\"\u003e\u003ccode\u003e77837f8\u003c/code\u003e\u003c/a\u003e fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/23af03bc839af5217ea141946ae41e648264061c\"\u003e\u003ccode\u003e23af03b\u003c/code\u003e\u003c/a\u003e chore(deps): update actions/checkout action to v6\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pgjdbc/pgjdbc/compare/REL42.7.2...REL42.7.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `javax.xml.bind:jaxb-api` from 2.2.3 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/javaee/jaxb-spec/commits/2.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.codehaus.groovy:groovy-all` from 3.0.21 to 3.0.25\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apache/groovy/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.jsoup:jsoup` from 1.15.3 to 1.22.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jhy/jsoup/releases\"\u003eorg.jsoup:jsoup's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ejsoup Java HTML Parser release 1.22.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup 1.22.2\u003c/strong\u003e is out now, with fixes and refinements across the library. It makes editing the DOM during traversal more predictable, refreshes the default HTML tag definitions with newer elements and better text boundaries, and improves reliability in parsing and HTTP transport. The release also fixes a number of edge cases in cleaning, stream parsing, XML doctype handling, and Android packaging.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup\u003c/strong\u003e is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jhy/jsoup/blob/HEAD/download\"\u003e\u003cstrong\u003eDownload\u003c/strong\u003e\u003c/a\u003e jsoup now.\u003c/p\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eExpanded and clarified \u003ccode\u003eNodeTraversor\u003c/code\u003e support for in-place DOM rewrites during \u003ccode\u003eNodeVisitor.head()\u003c/code\u003e. Current-node edits such as \u003ccode\u003eremove\u003c/code\u003e, \u003ccode\u003ereplace\u003c/code\u003e, and \u003ccode\u003eunwrap\u003c/code\u003e now recover more predictably, while traversal stays within the original root subtree. This makes single-pass tree cleanup and normalization visitors easier to write, for example when unwrapping presentational elements or replacing text nodes as you walk the DOM. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation: clarified that a configured \u003ccode\u003eCleaner\u003c/code\u003e may be reused across concurrent threads, and that shared \u003ccode\u003eSafelist\u003c/code\u003e instances should not be mutated while in use. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2473\"\u003e#2473\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the default HTML \u003ccode\u003eTagSet\u003c/code\u003e for current HTML elements: added \u003ccode\u003edialog\u003c/code\u003e, \u003ccode\u003esearch\u003c/code\u003e, \u003ccode\u003epicture\u003c/code\u003e, and \u003ccode\u003eslot\u003c/code\u003e; made \u003ccode\u003eins\u003c/code\u003e, \u003ccode\u003edel\u003c/code\u003e, \u003ccode\u003ebutton\u003c/code\u003e, \u003ccode\u003eaudio\u003c/code\u003e, \u003ccode\u003evideo\u003c/code\u003e, and \u003ccode\u003ecanvas\u003c/code\u003e inline by default (\u003ccode\u003eTag#isInline()\u003c/code\u003e, aligned to phrasing content in the spec); and added readable \u003ccode\u003eElement.text()\u003c/code\u003e boundaries for controls and embedded objects via the new \u003ccode\u003eTag.TextBoundary\u003c/code\u003e option. This improves pretty-printing and keeps normalized text from running adjacent words together. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2493\"\u003e#2493\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAndroid (R8/ProGuard): added a rule to ignore the optional \u003ccode\u003ere2j\u003c/code\u003e dependency when not present. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2459\"\u003e#2459\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a \u003ccode\u003eNodeTraversor\u003c/code\u003e regression in 1.21.2 where removing or replacing the current node during \u003ccode\u003ehead()\u003c/code\u003e could revisit the replacement node and loop indefinitely. The traversal docs now also clarify which inserted nodes are visited in the current pass. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eParsing during charset sniffing no longer fails if an advisory \u003ccode\u003eavailable()\u003c/code\u003e call throws \u003ccode\u003eIOException\u003c/code\u003e, as seen on JDK 8 \u003ccode\u003eHttpURLConnection\u003c/code\u003e. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2474\"\u003e#2474\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer makes relative URL attributes in the input document absolute when cleaning or validating a \u003ccode\u003eDocument\u003c/code\u003e. URL normalization now applies only to the cleaned output, and \u003ccode\u003eSafelist.isSafeAttribute()\u003c/code\u003e is side effect free. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2475\"\u003e#2475\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer duplicates enforced attributes when the input \u003ccode\u003eDocument\u003c/code\u003e preserves attribute case. A case-variant source attribute is now replaced by the enforced attribute in the cleaned output. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2476\"\u003e#2476\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eIf a per-request SOCKS proxy is configured, jsoup now avoids using the JDK \u003ccode\u003eHttpClient\u003c/code\u003e, because the JDK would silently ignore that proxy and attempt to connect directly. Those requests now fall back to the legacy \u003ccode\u003eHttpURLConnection\u003c/code\u003e transport instead, which does support SOCKS. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2468\"\u003e#2468\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eConnection.Response.streamParser()\u003c/code\u003e and \u003ccode\u003eDataUtil.streamParser(Path, ...)\u003c/code\u003e could fail on small inputs without a declared charset, if the initial 5 KB charset sniff fully consumed the input and closed it before the stream parse began. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2483\"\u003e#2483\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eIn XML mode, doctypes with an internal subset, such as \u003ccode\u003e\u0026lt;!DOCTYPE root [\u0026lt;!ENTITY name \u0026quot;value\u0026quot;\u0026gt;]\u0026gt;\u003c/code\u003e, now round-trip correctly. The subset is preserved as raw text only; entities are not expanded and external DTDs are not loaded. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2486\"\u003e#2486\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBuild Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated the integration test server from Jetty to Netty, which actively maintains support for our minimum JDK target (8). \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2491\"\u003e#2491\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eMy sincere thanks to everyone who contributed to this release!\nIf you have any suggestions for the next release, I would love to hear them; please get in touch via \u003ca href=\"https://github.com/jhy/jsoup/discussions\"\u003ejsoup discussions\u003c/a\u003e, or with me \u003ca href=\"https://jhedley.com/\"\u003edirectly\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eYou can also \u003c!-- raw HTML omitted --\u003efollow me\u003c!-- raw HTML omitted --\u003e (\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e@\u003ca href=\"mailto:jhy@tilde.zone\"\u003ejhy@tilde.zone\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e) on Mastodon / Fediverse to receive occasional notes about jsoup releases.\u003c/p\u003e\n\u003ch2\u003ejsoup Java HTML Parser release 1.22.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup 1.22.1\u003c/strong\u003e is out now, adding support for the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors, a configurable maximum parser depth, and numerous bug fixes and improvements.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup\u003c/strong\u003e is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://jsoup.org/download\"\u003e\u003cstrong\u003eDownload\u003c/strong\u003e\u003c/a\u003e jsoup now.\u003c/p\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for using the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors (e.g. \u003ccode\u003e[attr~=regex]\u003c/code\u003e, \u003ccode\u003e:matches(regex)\u003c/code\u003e), which ensures linear-time performance for regex evaluation. This allows safer handling of arbitrary user-supplied query regexes. To enable, add the \u003ccode\u003ecom.google.re2j\u003c/code\u003e dependency to your classpath, e.g.:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"xml\"\u003e\u003ccode\u003e  \u0026lt;dependency\u0026gt;\r\n    \u0026lt;groupId\u0026gt;com.google.re2j\u0026lt;/groupId\u0026gt;\r\n    \u0026lt;artifactId\u0026gt;re2j\u0026lt;/artifactId\u0026gt;\r\n    \u0026lt;version\u0026gt;1.8\u0026lt;/version\u0026gt;\r\n  \u0026lt;/dependency\u0026gt;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e(If you already have that dependency in your classpath, but you want to keep using the Java regex engine, you can disable re2j via \u003ccode\u003eSystem.setProperty(\u0026quot;jsoup.useRe2j\u0026quot;, \u0026quot;false\u0026quot;)\u003c/code\u003e.) You can confirm that the re2j engine has been enabled correctly by calling \u003ccode\u003eRegex.usingRe2j()\u003c/code\u003e. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2407\"\u003e#2407\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jhy/jsoup/blob/master/CHANGES.md\"\u003eorg.jsoup:jsoup's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.22.2 (2026-Apr-20)\u003c/h2\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpanded and clarified \u003ccode\u003eNodeTraversor\u003c/code\u003e support for in-place DOM rewrites during \u003ccode\u003eNodeVisitor.head()\u003c/code\u003e. Current-node edits such as \u003ccode\u003eremove\u003c/code\u003e, \u003ccode\u003ereplace\u003c/code\u003e, and \u003ccode\u003eunwrap\u003c/code\u003e now recover more predictably, while traversal stays within the original root subtree. This makes single-pass tree cleanup and normalization visitors easier to write, for example when unwrapping presentational elements or replacing text nodes as you walk the DOM. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation: clarified that a configured \u003ccode\u003eCleaner\u003c/code\u003e may be reused across concurrent threads, and that shared \u003ccode\u003eSafelist\u003c/code\u003e instances should not be mutated while in use. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2473\"\u003e#2473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the default HTML \u003ccode\u003eTagSet\u003c/code\u003e for current HTML elements: added \u003ccode\u003edialog\u003c/code\u003e, \u003ccode\u003esearch\u003c/code\u003e, \u003ccode\u003epicture\u003c/code\u003e, and \u003ccode\u003eslot\u003c/code\u003e; made \u003ccode\u003eins\u003c/code\u003e, \u003ccode\u003edel\u003c/code\u003e, \u003ccode\u003ebutton\u003c/code\u003e, \u003ccode\u003eaudio\u003c/code\u003e, \u003ccode\u003evideo\u003c/code\u003e, and \u003ccode\u003ecanvas\u003c/code\u003e inline by default (\u003ccode\u003eTag#isInline()\u003c/code\u003e, aligned to phrasing content in the spec); and added readable \u003ccode\u003eElement.text()\u003c/code\u003e boundaries for controls and embedded objects via the new \u003ccode\u003eTag.TextBoundary\u003c/code\u003e option. This improves pretty-printing and keeps normalized text from running adjacent words together. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2493\"\u003e#2493\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAndroid (R8/ProGuard): added a rule to ignore the optional \u003ccode\u003ere2j\u003c/code\u003e dependency when not present. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2459\"\u003e#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a \u003ccode\u003eNodeTraversor\u003c/code\u003e regression in 1.21.2 where removing or replacing the current node during \u003ccode\u003ehead()\u003c/code\u003e could revisit the replacement node and loop indefinitely. The traversal docs now also clarify which inserted nodes are visited in the current pass. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eParsing during charset sniffing no longer fails if an advisory \u003ccode\u003eavailable()\u003c/code\u003e call throws \u003ccode\u003eIOException\u003c/code\u003e, as seen on JDK 8 \u003ccode\u003eHttpURLConnection\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2474\"\u003e#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer makes relative URL attributes in the input document absolute when cleaning or validating a \u003ccode\u003eDocument\u003c/code\u003e. URL normalization now applies only to the cleaned output, and \u003ccode\u003eSafelist.isSafeAttribute()\u003c/code\u003e is side effect free. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer duplicates enforced attributes when the input \u003ccode\u003eDocument\u003c/code\u003e preserves attribute case. A case-variant source attribute is now replaced by the enforced attribute in the cleaned output. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIf a per-request SOCKS proxy is configured, jsoup now avoids using the JDK \u003ccode\u003eHttpClient\u003c/code\u003e, because the JDK would silently ignore that proxy and attempt to connect directly. Those requests now fall back to the legacy \u003ccode\u003eHttpURLConnection\u003c/code\u003e transport instead, which does support SOCKS. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eConnection.Response.streamParser()\u003c/code\u003e and \u003ccode\u003eDataUtil.streamParser(Path, ...)\u003c/code\u003e could fail on small inputs without a declared charset, if the initial 5 KB charset sniff fully consumed the input and closed it before the stream parse began. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2483\"\u003e#2483\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIn XML mode, doctypes with an internal subset, such as \u003ccode\u003e\u0026lt;!DOCTYPE root [\u0026lt;!ENTITY name \u0026quot;value\u0026quot;\u0026gt;]\u0026gt;\u003c/code\u003e, now round-trip correctly. The subset is preserved as raw text only; entities are not expanded and external DTDs are not loaded. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2486\"\u003e#2486\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated the integration test server from Jetty to Netty, which actively maintains support for our minimum JDK target (8). \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2491\"\u003e#2491\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.22.1 (2026-Jan-01)\u003c/h2\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for using the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors (e.g. \u003ccode\u003e[attr~=regex]\u003c/code\u003e, \u003ccode\u003e:matches(regex)\u003c/code\u003e), which ensures linear-time performance for regex evaluation. This allows safer handling of arbitrary user-supplied query regexes. To enable, add the \u003ccode\u003ecom.google.re2j\u003c/code\u003e dependency to your classpath, e.g.:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"xml\"\u003e\u003ccode\u003e  \u0026lt;dependency\u0026gt;\n    \u0026lt;groupId\u0026gt;com.google.re2j\u0026lt;/groupId\u0026gt;\n    \u0026lt;artifactId\u0026gt;re2j\u0026lt;/artifactId\u0026gt;\n    \u0026lt;version\u0026gt;1.8\u0026lt;/version\u0026gt;\n  \u0026lt;/dependency\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e(If you already have that dependency in your classpath, but you want to keep using the Java regex engine, you can disable re2j via \u003ccode\u003eSystem.setProperty(\u0026quot;jsoup.useRe2j\u0026quot;, \u0026quot;false\u0026quot;)\u003c/code\u003e.) You can confirm that the re2j engine has been enabled correctly by calling \u003ccode\u003eorg.jsoup.helper.Regex.usingRe2j()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded an instance method \u003ccode\u003eParser#unescape(String, boolean)\u003c/code\u003e that unescapes HTML entities using the parser's configuration (e.g. to support error tracking), complementing the existing static utility \u003ccode\u003eParser.unescapeEntities(String, boolean)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2396\"\u003e#2396\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a configurable maximum parser depth (to limit the number of open elements on stack) to both HTML and XML parsers. The HTML parser now defaults to a depth of 512 to match browser behavior, and protect against unbounded stack growth, while the XML parser keeps unlimited depth by default, but can opt into a limit via \u003ccode\u003eorg.jsoup.parser.Parser#setMaxDepth\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2421\"\u003e#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild: added CI coverage for JDK 25 \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2403\"\u003e#2403\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild: added a CI fuzzer for contextual fragment parsing (in addition to existing full body HTML and XML fuzzers). [oss-fuzz \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/14041\"\u003e#14041\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/google/oss-fuzz/pull/14041\"\u003egoogle/oss-fuzz#14041\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSet a removal schedule of jsoup 1.24.1 for previously deprecated APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously cached child \u003ccode\u003eElements\u003c/code\u003e of an \u003ccode\u003eElement\u003c/code\u003e were not correctly invalidated in \u003ccode\u003eNode#replaceWith(Node)\u003c/code\u003e, which could lead to incorrect results when subsequently calling \u003ccode\u003eElement#children()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2391\"\u003e#2391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAttribute selector values are now compared literally without trimming. Previously, jsoup trimmed whitespace from selector values and from element attribute values, which could cause mismatches with browser behavior (e.g. \u003ccode\u003e[attr=\u0026quot; foo \u0026quot;]\u003c/code\u003e). Now matches align with the CSS specification and browser engines. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2380\"\u003e#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWhen using the JDK HttpClient, any system default proxy (\u003ccode\u003eProxySelector.getDefault()\u003c/code\u003e) was ignored. Now, the system proxy is used if a per-request proxy is not set. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2388\"\u003e#2388\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2390\"\u003e#2390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA \u003ccode\u003eValidationException\u003c/code\u003e could be thrown in the adoption agency algorithm with particularly broken input. Now logged as a parse error. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNull characters in the HTML body were not consistently removed; and in foreign content were not correctly replaced. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2395\"\u003e#2395\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAn \u003ccode\u003eIndexOutOfBoundsException\u003c/code\u003e could be thrown when parsing a body fragment with crafted input. Now logged as a parse error. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2397\"\u003e#2397\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2406\"\u003e#2406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWhen using StructuralEvaluators (e.g., a \u003ccode\u003eparent child\u003c/code\u003e selector) across many retained threads, their memoized results could also be retained, increasing memory use. These results are now cleared immediately after use, reducing overall memory consumption. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2411\"\u003e#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCloning a \u003ccode\u003eParser\u003c/code\u003e now preserves any custom \u003ccode\u003eTagSet\u003c/code\u003e applied to the parser. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2422\"\u003e#2422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2423\"\u003e#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/ac28afe6e5bf96d39fd17c3e0a797a7585e1958c\"\u003e\u003ccode\u003eac28afe\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jsoup-1.22.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/52f2cd3ea2004b9be0e0a09021bac7ce2daf8ae4\"\u003e\u003ccode\u003e52f2cd3\u003c/code\u003e\u003c/a\u003e Improve entity example in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/cf6ffe08616f8633ee6113b91f9d6a07acef38c6\"\u003e\u003ccode\u003ecf6ffe0\u003c/code\u003e\u003c/a\u003e Add Tag#TextBoundary option; bring TagSet to spec (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2493\"\u003e#2493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/2be739c1c659a1592c402a5441f8be6f7881280c\"\u003e\u003ccode\u003e2be739c\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4 to 4.35.1 (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2492\"\u003e#2492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/45de7cbc215eb3f1189d23eaf57acf6f7b1a5edf\"\u003e\u003ccode\u003e45de7cb\u003c/code\u003e\u003c/a\u003e Migrate integration test server from Jetty to Netty (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2491\"\u003e#2491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/1df14edbfc327a1ef309142ef5e8ed68324de320\"\u003e\u003ccode\u003e1df14ed\u003c/code\u003e\u003c/a\u003e Preserve XML doctype internal subset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/06fa52d15a22003b67dfdb3f8220cc025d493a43\"\u003e\u003ccode\u003e06fa52d\u003c/code\u003e\u003c/a\u003e Adding Contribution Guide\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/d4a8941820c037327538c30a8723ec715b67b6f6\"\u003e\u003ccode\u003ed4a8941\u003c/code\u003e\u003c/a\u003e Simplify the test; doesn't need the buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/823709f519995492d9a092fe315af389616e58f8\"\u003e\u003ccode\u003e823709f\u003c/code\u003e\u003c/a\u003e Don't reuse a fully read sniffed doc for StreamParser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/e1b0df5fec53710214cd700de38d82e1ca92bd79\"\u003e\u003ccode\u003ee1b0df5\u003c/code\u003e\u003c/a\u003e NodeFilter javadoc tweak\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jhy/jsoup/compare/jsoup-1.15.3...jsoup-1.22.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/d763562443cc9d6e224a6265ca3710195c813cf5\"\u003e\u003ccode\u003ed763562\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/e5c69fe5f7be957490d52dae70787e7a8138ddda\"\u003e\u003ccode\u003ee5c69fe\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0ba6a369eaa19a71b2b63fe40b1e9d317c0eb522\"\u003e\u003ccode\u003e0ba6a36\u003c/code\u003e\u003c/a\u003e Bump version after release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b106011025f6447695e21ddbb9fd3952d284d10c\"\u003e\u003ccode\u003eb106011\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/18a7fe416a0bf666f6c2ddc6da883bc96382dd2d\"\u003e\u003ccode\u003e18a7fe4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/503a14ffa4a74ad56a02fd25f0cd997df163c647\"\u003e\u003ccode\u003e503a14f\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/ab95bc0056119f08ef721849be5e5f2c256b82cd\"\u003e\u003ccode\u003eab95bc0\u003c/code\u003e\u003c/a\u003e ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0a4b8dedee08e159fddca5eb8e812c1ad881017a\"\u003e\u003ccode\u003e0a4b8de\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/719a42f3676ab3c10e3cd057966807b2206151e7\"\u003e\u003ccode\u003e719a42f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/92488484b64bc348c43e5a7ff910d93c2f9e9b9c\"\u003e\u003ccode\u003e9248848\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.15.0...jackson-core-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c702ae0cd9870cb7415fb09d9b22412db78b972\"\u003e\u003ccode\u003e4c702ae\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e6a9a509481c03c4cdd2e4bc7745a076bbf06942\"\u003e\u003ccode\u003ee6a9a50\u003c/code\u003e\u003c/a\u003e Prep for 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/80735f20d588dc859ff2bf9427f0d6dfb5c71a7e\"\u003e\u003ccode\u003e80735f2\u003c/code\u003e\u003c/a\u003e Merge branch '2.21' into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5e5f3faa1232ad49c0a0ff0a3e7bd96cc659f850\"\u003e\u003ccode\u003e5e5f3fa\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c482a6404e6c076130ea2fa3d06e0809f20971d\"\u003e\u003ccode\u003e4c482a6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e29dfd957b47ec3982d20c4a97aa608516ce5ee9\"\u003e\u003ccode\u003ee29dfd9\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5d81f46097903e1e88b90ef06515d559caf1ef68\"\u003e\u003ccode\u003e5d81f46\u003c/code\u003e\u003c/a\u003e Prep for 2.21.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5db34fe1003e7f6bed78d5e7dc43c75842895f4c\"\u003e\u003ccode\u003e5db34fe\u003c/code\u003e\u003c/a\u003e Merge branch '2.20' into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/a12b8dfd547b08f808b4189746e00bb203ab08c1\"\u003e\u003ccode\u003ea12b8df\u003c/code\u003e\u003c/a\u003e Merge branch '2.19' into 2.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/7ae7fdbb007ac18c44bddb7515becc1789830db5\"\u003e\u003ccode\u003e7ae7fdb\u003c/code\u003e\u003c/a\u003e Merge branch '2.18' into 2.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.15.0...jackson-dataformat-xml-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-annotations` from 2.15.0 to 2.22.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/d763562443cc9d6e224a6265ca3710195c813cf5\"\u003e\u003ccode\u003ed763562\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/e5c69fe5f7be957490d52dae70787e7a8138ddda\"\u003e\u003ccode\u003ee5c69fe\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0ba6a369eaa19a71b2b63fe40b1e9d317c0eb522\"\u003e\u003ccode\u003e0ba6a36\u003c/code\u003e\u003c/a\u003e Bump version after release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b106011025f6447695e21ddbb9fd3952d284d10c\"\u003e\u003ccode\u003eb106011\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/18a7fe416a0bf666f6c2ddc6da883bc96382dd2d\"\u003e\u003ccode\u003e18a7fe4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/503a14ffa4a74ad56a02fd25f0cd997df163c647\"\u003e\u003ccode\u003e503a14f\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/ab95bc0056119f08ef721849be5e5f2c256b82cd\"\u003e\u003ccode\u003eab95bc0\u003c/code\u003e\u003c/a\u003e ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0a4b8dedee08e159fddca5eb8e812c1ad881017a\"\u003e\u003ccode\u003e0a4b8de\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/719a42f3676ab3c10e3cd057966807b2206151e7\"\u003e\u003ccode\u003e719a42f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/92488484b64bc348c43e5a7ff910d93c2f9e9b9c\"\u003e\u003ccode\u003e9248848\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.15.0...jackson-core-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c702ae0cd9870cb7415fb09d9b22412db78b972\"\u003e\u003ccode\u003e4c702ae\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e6a9a509481c03c4cdd2e4bc7745a076bbf06942\"\u003e\u003ccode\u003ee6a9a50\u003c/code\u003e\u003c/a\u003e Prep for 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/80735f20d588dc859ff2bf9427f0d6dfb5c71a7e\"\u003e\u003ccode\u003e80735f2\u003c/code\u003e\u003c/a\u003e Merge branch '2.21' into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5e5f3faa1232ad49c0a0ff0a3e7bd96cc659f850\"\u003e\u003ccode\u003e5e5f3fa\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c482a6404e6c076130ea2fa3d06e0809f20971d\"\u003e\u003ccode\u003e4c482a6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e29dfd957b47ec3982d20c4a97aa608516ce5ee9\"\u003e\u003ccode\u003ee29dfd9\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5d81f46097903e1e88b90ef06515d559caf1ef68\"\u003e\u003ccode\u003e5d81f46\u003c/code\u003e\u003c/a\u003e Prep for 2.21.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5db34fe1003e7f6bed78d5e7dc43c75842895f4c\"\u003e\u003ccode\u003e5db34fe\u003c/code\u003e\u003c/a\u003e Merge branch '2.20' into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/a12b8dfd547b08f808b4189746e00bb203ab08c1\"\u003e\u003ccode\u003ea12b8df\u003c/code\u003e\u003c/a\u003e Merge branch '2.19' into 2.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/7ae7fdbb007ac18c44bddb7515becc1789830db5\"\u003e\u003ccode\u003e7ae7fdb\u003c/code\u003e\u003c/a\u003e Merge branch '2.18' into 2.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.15.0...jackson-dataformat-xml-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-annotations` from 2.15.0 to 2.22.0\n\nUpdates `org.apache.commons:commons-collections4` from 4.4 to 4.5.0\n\nUpdates `org.projectlombok:lombok` from 1.18.20 to 1.18.46\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown\"\u003eorg.projectlombok:lombok's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003ev1.18.46 (April 22nd, 2026)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK26 support added \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4019\"\u003e#4019\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003ePLATFORM: Spring Tools Suite 5 supported \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3985\"\u003e#3985\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: \u003ccode\u003e@Jacksonized\u003c/code\u003e no longer stops generating \u003ccode\u003e@JsonProperty\u003c/code\u003e once an explicit \u003ccode\u003e@JsonIgnore\u003c/code\u003e annotations is encountered \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4022\"\u003e#4022\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: In eclipse, mixing \u003ccode\u003e@Jacksonized\u003c/code\u003e and \u003ccode\u003efluent = true\u003c/code\u003e no longer causes the error \u003ccode\u003ecom.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3934\"\u003e#3934\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Some finishing touches for v1.18.44's support of Jackson3 \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4004\"\u003e#4004\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.44 (March 11th, 2026)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Jacksonized\u003c/code\u003e now supports both Jackson2 and Jackson3; you'll get a warning until you configure which one (or even both!) you want lombok to generate. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3950\"\u003e#3950\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: On JDK25, \u003ccode\u003eval\u003c/code\u003e and \u003ccode\u003e@ExtensionMethod\u003c/code\u003e could sometimes cause erroneous errors (in that you see errors but compilation succeeds anyway) using javac. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3947\"\u003e#3947\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: \u003ccode\u003e@Jacksonized\u003c/code\u003e + fields marked \u003ccode\u003etransient\u003c/code\u003e would result in those transient fields being serialised which is surprising (and thus undesired) behaviour. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3936\"\u003e#3936\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.42 (September 18th, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFEATURE: All the various \u003ccode\u003e@Log\u003c/code\u003e annotations now allow you to change their access level (they still default to \u003ccode\u003eprivate\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2280\"\u003e#2280\u003c/a\u003e. Thanks to new contributor Liam Pace!\u003c/li\u003e\n\u003cli\u003eBUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3940\"\u003e#3940\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.40 (September 4th, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK25 support added \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3859\"\u003e#3859\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused \u003ccode\u003ejava.lang.IllegalArgumentException: Document does not match the AST\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3886\"\u003e#3886\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3886\"\u003eprojectlombok/lombok#3886\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePERFORMANCE: \u003ccode\u003e@ExtensionMethod\u003c/code\u003e is now significantly faster [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3866\"\u003e#3866\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3866\"\u003eprojectlombok/lombok#3866\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: the command line \u003ccode\u003econfig\u003c/code\u003e tool would emit incorrect output for nullity annotations. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3931\"\u003e#3931\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3931\"\u003eprojectlombok/lombok#3931\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Jacksonized @Accessors(fluent=true)\u003c/code\u003e automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3265\"\u003e#3265\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3265\"\u003eprojectlombok/lombok#3265\u003c/a\u003e), [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3270\"\u003e#3270\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3270\"\u003eprojectlombok/lombok#3270\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., \u003ccode\u003e@JsonProperty\u003c/code\u003e) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the \u003ca href=\"https://projectlombok.org/features/configuration\"\u003econfig key\u003c/a\u003e \u003ccode\u003elombok.copyJacksonAnnotationsToAccessors = true\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.38 (March 31st, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK24 support added.\u003c/li\u003e\n\u003cli\u003eFEATURE: Lombok's nullity annotation now supports \u003ca href=\"https://jspecify.dev\"\u003eJSpecify\u003c/a\u003e out of the box, using \u003ca href=\"https://projectlombok.org/features/configuration\"\u003econfig key\u003c/a\u003e \u003ccode\u003ejspecify\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3823\"\u003e#3823\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3823\"\u003eprojectlombok/lombok#3823\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3783\"\u003e#3783\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3783\"\u003eprojectlombok/lombok#3783\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.36 (November 15th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK23 support added.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Eclipse projects using the \u003ccode\u003ecom.pro-crafting.tools:jasperreports-maven-plugin\u003c/code\u003e will now compile.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.34 (June 28th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: Added support for Eclipse 2024-06; you'd get some \u003ccode\u003eNoSuchMethodError\u003c/code\u003e traces in your logs if using \u003ccode\u003e@Builder\u003c/code\u003e or \u003ccode\u003e@Singular\u003c/code\u003e prior to this fix. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3638\"\u003e#3638\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3638\"\u003eprojectlombok/lombok#3638\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: Lombok now adds \u003ccode\u003e@lombok.Generated\u003c/code\u003e by default to methods and types it generates. This may result in accidentally increasing your test coverage percentage. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3667\"\u003e#3667\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3667\"\u003eprojectlombok/lombok#3667\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: When \u003ccode\u003elombok.config\u003c/code\u003e contains \u003ccode\u003elombok.onX.flagUsage = WARNING\u003c/code\u003e, from now on warnings will actually be generated if onX is used.[Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2848\"\u003e#2848\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2848\"\u003eprojectlombok/lombok#2848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBUGFIX: When \u003ccode\u003e@SuperBuilder\u003c/code\u003e was used on a type with an generic array type, it would error \u003ccode\u003ewrong number of type arguments\u003c/code\u003e.  [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3694\"\u003e#3694\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3694\"\u003eprojectlombok/lombok#3694\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: Lombok generates javadoc for you for most of the methods it adds; with this release, javadoc is also added to generated constructors. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/933\"\u003e#933\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/933\"\u003eprojectlombok/lombok#933\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.32 (March 20th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: Initial JDK22 support added.\u003c/li\u003e\n\u003cli\u003ePLAFTORM  Added support for Eclipse 2024-03. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3620\"\u003e#3620\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3620\"\u003eprojectlombok/lombok#3620\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as \u003ccode\u003ejava.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3564\"\u003e#3564\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3564\"\u003eprojectlombok/lombok#3564\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Locked\u003c/code\u003e has been introduced. Like \u003ccode\u003e@Synchronized\u003c/code\u003e but with \u003ccode\u003ejava.util.concurrent.locks\u003c/code\u003e locks instead of the \u003ccode\u003esynchronized\u003c/code\u003e primitive. Thanks, Pim van der Loos for the PR! [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3506\"\u003e#3506\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3506\"\u003eprojectlombok/lombok#3506\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eNECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with \u003ccode\u003e@Getter\u003c/code\u003e instead of the actual field's name. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/562\"\u003e#562\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/562\"\u003eprojectlombok/lombok#562\u003c/a\u003e). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.\u003c/li\u003e\n\u003cli\u003eBUGFIX: When \u003ccode\u003e@SuperBuilder\u003c/code\u003e was used on a type with an annotated generic type, it would error \u003ccode\u003ewrong number of type arguments\u003c/code\u003e.  [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3592\"\u003e#3592\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3592\"\u003eprojectlombok/lombok#3592\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: It was possible to create an infinite build loop using \u003ccode\u003e@ExtensionMethod\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3225\"\u003e#3225\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3225\"\u003eprojectlombok/lombok#3225\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: Using \u003ccode\u003e@Getter(lazy=true)\u003c/code\u003e would fail if the expression contained a variable called \u003ccode\u003evalue\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2917\"\u003e#2917\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2917\"\u003eprojectlombok/lombok#2917\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/projectlombok/lombok/commit/936ca59baf844fd6c0ad641974295498785d8091\"\u003e\u003ccode\u003e936ca59\u003c/code\u003e\u003c/a\u003e [build] lombok's launcher is still intended to be 1.4 compatible, or at least...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/projectlombok/lombok/commit/fcdab3f29e1b48...\n\n_Description has been truncated_","html_url":"https://github.com/AOT-Technologies/forms-flow-ai/pull/3317","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AOT-Technologies%2Fforms-flow-ai/issues/3317","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3317/packages"},{"uuid":"4575210161","node_id":"PR_kwDOI6x-Os7h-zrQ","number":450,"state":"closed","title":"Bump the all-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-04T02:09:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-02T21:50:29.000Z","updated_at":"2026-06-04T02:09:36.000Z","time_to_close":101945,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":8,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.2.14.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-http3","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-dns","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-compression","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-transport-native-epoll","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-resolver-dns","old_version":"4.2.14.Final","new_version":"4.2.15.Final"}],"path":null,"ecosystem":"maven"},"body":"Bumps the all-dependencies group with 2 updates in the / directory: [io.netty:netty-codec-http](https://github.com/netty/netty) and [no.nav.klage:klage-kodeverk](https://github.com/navikt/klage-kodeverk).\n\nUpdates `io.netty:netty-codec-http` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http3` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-dns` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-dns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-compression` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-compression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-transport-native-epoll's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-resolver-dns` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-resolver-dns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `no.nav.klage:klage-kodeverk...\n\n_Description has been truncated_","html_url":"https://github.com/navikt/kabin-api/pull/450","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/navikt%2Fkabin-api/issues/450","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/450/packages"},{"uuid":"4568238191","node_id":"PR_kwDORtpFYc7hn6yC","number":17,"state":"open","title":"build(deps): Bump the maven-dependencies group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-02T03:47:21.000Z","updated_at":"2026-06-02T03:47:22.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"maven-dependencies","update_count":6,"packages":[{"name":"com.nimbusds:nimbus-jose-jwt","old_version":"10.8","new_version":"10.9.1"},{"name":"commons-io:commons-io","old_version":"2.16.1","new_version":"2.22.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.maven.plugins:maven-surefire-plugin","old_version":"3.5.5","new_version":"3.5.6","repository_url":"https://github.com/apache/maven-surefire"},{"name":"org.apache.maven.plugins:maven-failsafe-plugin","old_version":"3.5.5","new_version":"3.5.6","repository_url":"https://github.com/apache/maven-surefire"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven-dependencies group with 6 updates in the /booking-api directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.8` | `10.9.1` |\n| commons-io:commons-io | `2.16.1` | `2.22.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.14.Final` |\n| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |\n| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |\n\n\nUpdates `com.nimbusds:nimbus-jose-jwt` from 10.8 to 10.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:nimbus-jose-jwt's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-03-01)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst version based on the OpenInfoCard JWT, JWS and JWE code base.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.1 (2012-03-06)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces type-safe enumeration of the JSON Web Algorithms (JWA).\u003c/li\u003e\n\u003cli\u003eRefactors the JWT class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.2 (2012-03-08)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMoves JWS and JWE code into separate classes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.3 (2012-03-09)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSwitches to Apache Commons Codec for Base64URL encoding and decoding\u003c/li\u003e\n\u003cli\u003eConsolidates the crypto utilities within the package.\u003c/li\u003e\n\u003cli\u003eIntroduces a JWT content serialiser class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.4 (2012-03-09)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRefactoring of JWT class and JUnit tests.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.5 (2012-03-18)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSwitches to JSON Smart for JSON serialisation and parsing.\u003c/li\u003e\n\u003cli\u003eIntroduces claims set class with JSON objects, string, Base64URL and\nbyte array views.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.6 (2012-03-20)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCreates class for representing, serialising and parsing JSON Web Keys\n(JWK).\u003c/li\u003e\n\u003cli\u003eIntroduces separate class for representing JWT headers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.7 (2012-04-01)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces separate classes for plain, JWS and JWE headers.\u003c/li\u003e\n\u003cli\u003eIntroduces separate classes for plain, signed and encrypted JWTs.\u003c/li\u003e\n\u003cli\u003eRemoves the JWTContent class.\u003c/li\u003e\n\u003cli\u003eRemoves password-based (PE820) encryption support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.8 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdds support for the ZIP JWE header parameter.\u003c/li\u003e\n\u003cli\u003eRemoves unsupported algorithms from the JWA enumeration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.9 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenames JWEHeader.{get|set}EncryptionAlgorithm() to\nJWEHeader.{get|set}EncryptionMethod().\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.9.1 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrades JSON Smart JAR to 1.1.1.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.10 (2012-04-14)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces serialize() method to base abstract JWT class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.11 (2012-05-13)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJWT.serialize() throws checked JWTException instead of\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/e48aa077d55aee0e5160494911abf9df0c03f9b6\"\u003e\u003ccode\u003ee48aa07\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/4b02531a241cd5fcfeaa90fe7c6c263dd49061b9\"\u003e\u003ccode\u003e4b02531\u003c/code\u003e\u003c/a\u003e Adds X509CertUtils.computeSHA1Thumbprint(X509Certificate) method\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6b52455a9d156da7f9083212dfd6df70e5e129fe\"\u003e\u003ccode\u003e6b52455\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release 10.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/94f438725ca20584102d04d3bb908c38da19cbfa\"\u003e\u003ccode\u003e94f4387\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/53704466a79d5446119498d2c39d0f235487257f\"\u003e\u003ccode\u003e5370446\u003c/code\u003e\u003c/a\u003e Back-ports fix for iss \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/619\"\u003e#619\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/62d00fcf1edad741989eb22da4b586b250b655ea\"\u003e\u003ccode\u003e62d00fc\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release 10.9.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9.1..10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commons-io:commons-io` from 2.16.1 to 2.22.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.14.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin HTTP/RTSP version + method normalization to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16765\"\u003enetty/netty#16765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFill MsgHdrMemoryArray#hdrs with null entry on release by \u003ca href=\"https://github.com/tsegismont\"\u003e\u003ccode\u003e@​tsegismont\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16764\"\u003enetty/netty#16764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevapi: Use default \u0026quot;oldVersion\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16774\"\u003enetty/netty#16774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptive: Fix concurrency issue in adaptive allocator by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16767\"\u003enetty/netty#16767\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Make bulk byte moving in ByteBuf faster by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16781\"\u003enetty/netty#16781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16768\"\u003enetty/netty#16768\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dead native declarations by \u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIsolate tests that modify available Security providers by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16793\"\u003enetty/netty#16793\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove test annotations from a method that isn't a test by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16792\"\u003enetty/netty#16792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by \u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: extend user data from short to long by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16682\"\u003enetty/netty#16682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert CompositeByteBuf component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16811\"\u003enetty/netty#16811\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Use 100 as default max concurrent streams setting by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16804\"\u003enetty/netty#16804\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ResumptionController wrapping by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16815\"\u003enetty/netty#16815\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve all localhost addresses without querying DNS servers by \u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16803\"\u003enetty/netty#16803\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16788\"\u003enetty/netty#16788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRoute synchronous onLookupComplete exceptions via fireExceptionCaught by \u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Stop generic FileRegion drain loop when transferred() reaches count() by \u003ca href=\"https://github.com/LuciferYang\"\u003e\u003ccode\u003e@​LuciferYang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16826\"\u003enetty/netty#16826\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MQTT decoder size check after variable header replay by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16787\"\u003enetty/netty#16787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2\"\u003e\u003ccode\u003e0a60b75\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.14.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269\"\u003e\u003ccode\u003e72df658\u003c/code\u003e\u003c/a\u003e Fix MQTT decoder size check after variable header replay (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16787\"\u003e#16787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9\"\u003e\u003ccode\u003e7125dba\u003c/code\u003e\u003c/a\u003e MQTT: Allow MQTT 5 CONNECT with password only (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16833\"\u003e#16833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d\"\u003e\u003ccode\u003e9e19320\u003c/code\u003e\u003c/a\u003e IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162\"\u003e\u003ccode\u003e4ce9f17\u003c/code\u003e\u003c/a\u003e Route synchronous onLookupComplete exceptions via fireExceptionCaught (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16794\"\u003e#16794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759\"\u003e\u003ccode\u003ef7b1b7d\u003c/code\u003e\u003c/a\u003e Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc\"\u003e\u003ccode\u003e0ccb265\u003c/code\u003e\u003c/a\u003e IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794\"\u003e\u003ccode\u003ea6aeb6d\u003c/code\u003e\u003c/a\u003e Resolve all localhost addresses without querying DNS servers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16749\"\u003e#16749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b\"\u003e\u003ccode\u003ec328ba2\u003c/code\u003e\u003c/a\u003e Fix ResumptionController wrapping (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16815\"\u003e#16815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880\"\u003e\u003ccode\u003ebc5862b\u003c/code\u003e\u003c/a\u003e HTTP2: Use 100 as default max concurrent streams setting (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16804\"\u003e#16804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.14.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.14.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin HTTP/RTSP version + method normalization to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16765\"\u003enetty/netty#16765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFill MsgHdrMemoryArray#hdrs with null entry on release by \u003ca href=\"https://github.com/tsegismont\"\u003e\u003ccode\u003e@​tsegismont\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16764\"\u003enetty/netty#16764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevapi: Use default \u0026quot;oldVersion\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16774\"\u003enetty/netty#16774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptive: Fix concurrency issue in adaptive allocator by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16767\"\u003enetty/netty#16767\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Make bulk byte moving in ByteBuf faster by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16781\"\u003enetty/netty#16781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16768\"\u003enetty/netty#16768\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dead native declarations by \u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIsolate tests that modify available Security providers by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16793\"\u003enetty/netty#16793\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove test annotations from a method that isn't a test by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16792\"\u003enetty/netty#16792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by \u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: extend user data from short to long by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16682\"\u003enetty/netty#16682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert CompositeByteBuf component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16811\"\u003enetty/netty#16811\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Use 100 as default max concurrent streams setting by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16804\"\u003enetty/netty#16804\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ResumptionController wrapping by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16815\"\u003enetty/netty#16815\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve all localhost addresses without querying DNS servers by \u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16803\"\u003enetty/netty#16803\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16788\"\u003enetty/netty#16788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRoute synchronous onLookupComplete exceptions via fireExceptionCaught by \u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Stop generic FileRegion drain loop when transferred() reaches count() by \u003ca href=\"https://github.com/LuciferYang\"\u003e\u003ccode\u003e@​LuciferYang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16826\"\u003enetty/netty#16826\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MQTT decoder size check after variable header replay by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16787\"\u003enetty/netty#16787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2\"\u003e\u003ccode\u003e0a60b75\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.14.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269\"\u003e\u003ccode\u003e72df658\u003c/code\u003e\u003c/a\u003e Fix MQTT decoder size check after variable header replay (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16787\"\u003e#16787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9\"\u003e\u003ccode\u003e7125dba\u003c/code\u003e\u003c/a\u003e MQTT: Allow MQTT 5 CONNECT with password only (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16833\"\u003e#16833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d\"\u003e\u003ccode\u003e9e19320\u003c/code\u003e\u003c/a\u003e IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162\"\u003e\u003ccode\u003e4ce9f17\u003c/code\u003e\u003c/a\u003e Route synchronous onLookupComplete exceptions via fireExceptionCaught (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16794\"\u003e#16794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759\"\u003e\u003ccode\u003ef7b1b7d\u003c/code\u003e\u003c/a\u003e Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc\"\u003e\u003ccode\u003e0ccb265\u003c/code\u003e\u003c/a\u003e IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794\"\u003e\u003ccode\u003ea6aeb6d\u003c/code\u003e\u003c/a\u003e Resolve all localhost addresses without querying DNS servers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16749\"\u003e#16749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b\"\u003e\u003ccode\u003ec328ba2\u003c/code\u003e\u003c/a\u003e Fix ResumptionController wrapping (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16815\"\u003e#16815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880\"\u003e\u003ccode\u003ebc5862b\u003c/code\u003e\u003c/a\u003e HTTP2: Use 100 as default max concurrent streams setting (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16804\"\u003e#16804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.14.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-surefire-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-failsafe-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-failsafe-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/onyxsellmoore/resale_tracker/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/onyxsellmoore%2Fresale_tracker/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"},{"uuid":"4566348362","node_id":"PR_kwDOShEBj87hhxOz","number":6,"state":"closed","title":"build(deps): bump the gradle-dependencies group across 1 directory with 33 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-03T22:48:36.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-01T20:53:58.000Z","updated_at":"2026-06-03T22:48:38.000Z","time_to_close":179678,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"gradle-dependencies","update_count":33,"packages":[{"name":"org.junit.platform:junit-platform-launcher","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.jupiter:junit-jupiter-api","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.jupiter:junit-jupiter-engine","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.vintage:junit-vintage-engine","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"androidx.compose.ui:ui-text-google-fonts","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-graphics","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-tooling","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-tooling-preview","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-test-manifest","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-test-junit4","old_version":"1.11.1","new_version":"1.11.2"},{"name":"com.google.genai:google-genai","old_version":"1.53.0","new_version":"1.56.0","repository_url":"https://github.com/googleapis/java-genai"},{"name":"androidx.compose.animation:animation","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.foundation:foundation","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.glance:glance","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"androidx.glance:glance-appwidget","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"androidx.glance:glance-material3","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"com.google.code.gson:gson","old_version":"2.10.1","new_version":"2.14.0","repository_url":"https://github.com/google/gson"},{"name":"org.junit.jupiter:junit-jupiter-params","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"androidx.compose:compose-bom","old_version":"2026.05.00","new_version":"2026.05.01"},{"name":"androidx.compose.material3:material3","old_version":"1.5.0-alpha19","new_version":"1.5.0-alpha20"},{"name":"com.google.protobuf:protobuf-javalite","old_version":"4.34.1","new_version":"4.35.0"},{"name":"org.checkerframework:checker-qual","old_version":"4.1.0","new_version":"4.2.0","repository_url":"https://github.com/typetools/checker-framework"},{"name":"io.mockk:mockk","old_version":"1.14.9","new_version":"1.14.11","repository_url":"https://github.com/mockk/mockk"},{"name":"androidx.wear.compose:compose-material","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-material3","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-foundation","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-navigation","old_version":"1.6.1","new_version":"1.6.2"},{"name":"io.netty:netty-common","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-handler","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.google.devtools.ksp","old_version":"2.3.8","new_version":"2.3.9","repository_url":"https://github.com/google/ksp"}],"path":null,"ecosystem":"maven"},"body":"Bumps the gradle-dependencies group with 33 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.vintage:junit-vintage-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| androidx.compose.ui:ui-text-google-fonts | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-graphics | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-tooling | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-tooling-preview | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-test-manifest | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-test-junit4 | `1.11.1` | `1.11.2` |\n| [com.google.genai:google-genai](https://github.com/googleapis/java-genai) | `1.53.0` | `1.56.0` |\n| androidx.compose.animation:animation | `1.11.1` | `1.11.2` |\n| androidx.compose.foundation:foundation | `1.11.1` | `1.11.2` |\n| androidx.glance:glance | `1.2.0-rc01` | `1.3.0-alpha01` |\n| androidx.glance:glance-appwidget | `1.2.0-rc01` | `1.3.0-alpha01` |\n| androidx.glance:glance-material3 | `1.2.0-rc01` | `1.3.0-alpha01` |\n| [com.google.code.gson:gson](https://github.com/google/gson) | `2.10.1` | `2.14.0` |\n| [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| androidx.compose:compose-bom | `2026.05.00` | `2026.05.01` |\n| androidx.compose.material3:material3 | `1.5.0-alpha19` | `1.5.0-alpha20` |\n| com.google.protobuf:protobuf-javalite | `4.34.1` | `4.35.0` |\n| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `4.1.0` | `4.2.0` |\n| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.9` | `1.14.11` |\n| androidx.wear.compose:compose-material | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-material3 | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-foundation | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-navigation | `1.6.1` | `1.6.2` |\n| [io.netty:netty-common](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-handler](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [com.google.devtools.ksp](https://github.com/google/ksp) | `2.3.8` | `2.3.9` |\n\n\nUpdates `org.junit.platform:junit-platform-launcher` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.platform:junit-platform-launcher's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-engine's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.vintage:junit-vintage-engine` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.vintage:junit-vintage-engine's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose.ui:ui-text-google-fonts` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-graphics` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling-preview` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-manifest` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-junit4` from 1.11.1 to 1.11.2\n\nUpdates `com.google.genai:google-genai` from 1.53.0 to 1.56.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/java-genai/releases\"\u003ecom.google.genai:google-genai's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.56.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.55.0...v1.56.0\"\u003e1.56.0\u003c/a\u003e (2026-05-28)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadditional computer_use field support for vertex. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e94671df\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Reinforcement Tuning in GenAI SDK (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003ec0248fb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.55.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.54.0...v1.55.0\"\u003e1.55.0\u003c/a\u003e (2026-05-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for the Gemini API. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e1a496a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd new fields (\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003ed4b0867\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.54.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.54.0\"\u003e1.54.0\u003c/a\u003e (2026-05-20)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove the experimental Interactions module. This feature will be supported in the future.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more details to the ApiResponse error message (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c429c2b11538eee98cf3ace98c0d3c92145c001b\"\u003ec429c2b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport Blocking FunctionCall in Live API in AgentPlatform (Vertex) (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0d1cc9c39b3f9f7f7d722cbafdcd478c3492f7c7\"\u003e0d1cc9c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMissing jackson-module-kotlin in classpath (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0849b863ff42f91e5086c4b95fb2ad2b985a6cb2\"\u003e0849b86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest level timeout is ignored in favor of client level timeout (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c9464b5fea4ad8f5cf50b682ecc6d79f8eb071c0\"\u003ec9464b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest URL is incorrectly rewritten when baseUrl is configured as a proxy address (\u003ca href=\"https://github.com/googleapis/java-genai/commit/400776d150a7e0e445ea361a8b50096a936071e1\"\u003e400776d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the README (\u003ca href=\"https://github.com/googleapis/java-genai/commit/beb39f79194682e1ddd355219760adeedd4c0f1a\"\u003ebeb39f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/java-genai/blob/main/CHANGELOG.md\"\u003ecom.google.genai:google-genai's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.55.0...v1.56.0\"\u003e1.56.0\u003c/a\u003e (2026-05-28)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadditional computer_use field support for vertex. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e94671df\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Reinforcement Tuning in GenAI SDK (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003ec0248fb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.54.0...v1.55.0\"\u003e1.55.0\u003c/a\u003e (2026-05-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for the Gemini API. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e1a496a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd new fields (\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003ed4b0867\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.54.0\"\u003e1.54.0\u003c/a\u003e (2026-05-20)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove the experimental Interactions module. This feature will be supported in the future.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more details to the ApiResponse error message (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c429c2b11538eee98cf3ace98c0d3c92145c001b\"\u003ec429c2b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport Blocking FunctionCall in Live API in AgentPlatform (Vertex) (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0d1cc9c39b3f9f7f7d722cbafdcd478c3492f7c7\"\u003e0d1cc9c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMissing jackson-module-kotlin in classpath (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0849b863ff42f91e5086c4b95fb2ad2b985a6cb2\"\u003e0849b86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest level timeout is ignored in favor of client level timeout (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c9464b5fea4ad8f5cf50b682ecc6d79f8eb071c0\"\u003ec9464b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest URL is incorrectly rewritten when baseUrl is configured as a proxy address (\u003ca href=\"https://github.com/googleapis/java-genai/commit/400776d150a7e0e445ea361a8b50096a936071e1\"\u003e400776d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the README (\u003ca href=\"https://github.com/googleapis/java-genai/commit/beb39f79194682e1ddd355219760adeedd4c0f1a\"\u003ebeb39f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/19fb4ce563e33ccbdd84d56efb47e1548e4387a9\"\u003e\u003ccode\u003e19fb4ce\u003c/code\u003e\u003c/a\u003e chore(main): release 1.56.0 (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1047\"\u003e#1047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/eced1f86e1511eab075f15a2a63623aea44b821d\"\u003e\u003ccode\u003eeced1f8\u003c/code\u003e\u003c/a\u003e chore: Update native-image configuration.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e\u003ccode\u003e94671df\u003c/code\u003e\u003c/a\u003e feat: additional computer_use field support for vertex.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/bf99a9215fe6035a702091263ab89bdea204f77e\"\u003e\u003ccode\u003ebf99a92\u003c/code\u003e\u003c/a\u003e chore: Internal cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003e\u003ccode\u003ec0248fb\u003c/code\u003e\u003c/a\u003e feat: Support Reinforcement Tuning in GenAI SDK\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/8d2a8926253b07fa6ee6ad8a7b26f37b9f3ae53c\"\u003e\u003ccode\u003e8d2a892\u003c/code\u003e\u003c/a\u003e chore(main): release 1.56.0-SNAPSHOT (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1045\"\u003e#1045\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/4dff18a45bf809d8796dcbe97459eb86d8c158b1\"\u003e\u003ccode\u003e4dff18a\u003c/code\u003e\u003c/a\u003e chore(main): release 1.55.0 (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1041\"\u003e#1041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e\u003ccode\u003e1a496a7\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for th...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003e\u003ccode\u003ed4b0867\u003c/code\u003e\u003c/a\u003e feat: add new fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/e59c8cc665aa40e009f3cc7dd730569a9d02c649\"\u003e\u003ccode\u003ee59c8cc\u003c/code\u003e\u003c/a\u003e chore: update versions to main pom.xml and ApiClient\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.56.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose.animation:animation` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.foundation:foundation` from 1.11.1 to 1.11.2\n\nUpdates `androidx.glance:glance` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-appwidget` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-material3` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-appwidget` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-material3` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `com.google.code.gson:gson` from 2.10.1 to 2.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/gson/releases\"\u003ecom.google.code.gson:gson's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGson 2.14.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd type adapters for \u003ccode\u003ejava.time\u003c/code\u003e classes by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2948\"\u003egoogle/gson#2948\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen the \u003ccode\u003ejava.time\u003c/code\u003e API is available, Gson automatically can read and write instances of classes like \u003ccode\u003eInstant\u003c/code\u003e and \u003ccode\u003eDuration\u003c/code\u003e. The format it uses essentially freezes the JSON representation that \u003ccode\u003eReflectiveTypeAdapterFactory\u003c/code\u003e established by default, based on the private fields of \u003ccode\u003ejava.time\u003c/code\u003e classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.\u003c/p\u003e\n\u003cp\u003eWith this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with \u003ccode\u003e--add-opens\u003c/code\u003e for these classes on recent JDKs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003ecom.google.gson.graph\u003c/code\u003e by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2990\"\u003egoogle/gson#2990\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis package was not part of any released artifact and depended on Gson internals in potentially problematic ways.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eValidate that strings being parsed as integers consist of ASCII characters by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2995\"\u003egoogle/gson#2995\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ePreviously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix duplicate key detection when first value is null by \u003ca href=\"https://github.com/andrewstellman\"\u003e\u003ccode\u003e@​andrewstellman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3006\"\u003egoogle/gson#3006\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: \u003ccode\u003e{\u0026quot;foo\u0026quot;: null, \u0026quot;foo\u0026quot;: bar}\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003eSerializable\u003c/code\u003e from internal \u003ccode\u003eType\u003c/code\u003e implementation classes. by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3011\"\u003egoogle/gson#3011\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe nested classes \u003ccode\u003eParameterizedTypeImpl\u003c/code\u003e, \u003ccode\u003eGenericArrayTypeImpl\u003c/code\u003e, and \u003ccode\u003eWildcardTypeImpl\u003c/code\u003e in \u003ccode\u003eGsonTypes\u003c/code\u003e are implementations of the corresponding types (without \u003ccode\u003eImpl\u003c/code\u003e) in \u003ccode\u003ejava.lang.reflect\u003c/code\u003e. For some reason, they were serializable, even though the \u003ccode\u003ejava.lang.reflect\u003c/code\u003e implementations are not. Having unnecessarily serializable classes could \u003cem\u003econceivably\u003c/em\u003e have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd \u003ccode\u003eLegacyProtoTypeAdapterFactory\u003c/code\u003e. by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3014\"\u003egoogle/gson#3014\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eMake AppendableWriter do flush and close if delegation object supports by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2925\"\u003egoogle/gson#2925\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther less visible changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd default capacity to EnumTypeAdapter maps by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2959\"\u003egoogle/gson#2959\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: move derived adapters from Gson to TypeAdapters by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2951\"\u003egoogle/gson#2951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize \u003ccode\u003enew Gson()\u003c/code\u003e by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2864\"\u003egoogle/gson#2864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ThirdGoddess\"\u003e\u003ccode\u003e@​ThirdGoddess\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/2944\"\u003egoogle/gson#2944\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lmj798\"\u003e\u003ccode\u003e@​lmj798\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/2988\"\u003egoogle/gson#2988\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Eng-YasminKotb\"\u003e\u003ccode\u003e@​Eng-YasminKotb\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/3005\"\u003egoogle/gson#3005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrewstellman\"\u003e\u003ccode\u003e@​andrewstellman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/3006\"\u003egoogle/gson#3006\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0\"\u003ehttps://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eGson 2.13.2\u003c/h2\u003e\n\u003cp\u003eThe main changes in this release are just newer dependencies.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/3ff35d6269894901ab8006258395aafc4b9765cd\"\u003e\u003ccode\u003e3ff35d6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release gson-parent-2.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/a3024fde2a5c12b9a9a0b6b914ae4899aa574d81\"\u003e\u003ccode\u003ea3024fd\u003c/code\u003e\u003c/a\u003e Bump the maven group with 13 updates (\u003ca href=\"https://redirect.github.com/google/gson/issues/3002\"\u003e#3002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/5689ffe44952ca6ed44c595886b9043286311b23\"\u003e\u003ccode\u003e5689ffe\u003c/code\u003e\u003c/a\u003e Bump the github-actions group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/google/gson/issues/3018\"\u003e#3018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/48db33cbf93af6b2f5b117dfdfd826de47f7229c\"\u003e\u003ccode\u003e48db33c\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eLegacyProtoTypeAdapterFactory\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/google/gson/issues/3014\"\u003e#3014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/53d703ee76ca3e951fa4a727307c1f28dbcaf3aa\"\u003e\u003ccode\u003e53d703e\u003c/code\u003e\u003c/a\u003e Update outdated comment regarding serializable types (\u003ca href=\"https://redirect.github.com/google/gson/issues/3012\"\u003e#3012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/0189b727761f31596d1a27b7c60b42478dc9f331\"\u003e\u003ccode\u003e0189b72\u003c/code\u003e\u003c/a\u003e Remove \u003ccode\u003eSerializable\u003c/code\u003e from internal \u003ccode\u003eType\u003c/code\u003e implementation classes. (\u003ca href=\"https://redirect.github.com/google/gson/issues/3011\"\u003e#3011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/f4d371d29c04066dbe7fdb31f642831f9c7f40cd\"\u003e\u003ccode\u003ef4d371d\u003c/code\u003e\u003c/a\u003e Fix duplicate key detection when first value is null (\u003ca href=\"https://redirect.github.com/google/gson/issues/3006\"\u003e#3006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/27d9ba1eeeeb156540cf5397504a4f9f256e911f\"\u003e\u003ccode\u003e27d9ba1\u003c/code\u003e\u003c/a\u003e Fix typo in README (JPMS dependencies section) (\u003ca href=\"https://redirect.github.com/google/gson/issues/3005\"\u003e#3005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/1fa9b7a0a994b006b3be00e2df9de778e71e6807\"\u003e\u003ccode\u003e1fa9b7a\u003c/code\u003e\u003c/a\u003e Validate that strings being parsed as integers consist of ASCII characters (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/b7d59549188867deb42e46073fb38735a5beda1c\"\u003e\u003ccode\u003eb7d5954\u003c/code\u003e\u003c/a\u003e Add iterator fail-fast tests for LinkedTreeMap.clear() (\u003ca href=\"https://redirect.github.com/google/gson/issues/2992\"\u003e#2992\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/gson/compare/gson-parent-2.10.1...gson-parent-2.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-params` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-params's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose:compose-bom` from 2026.05.00 to 2026.05.01\n\nUpdates `androidx.compose.ui:ui` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-graphics` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling-preview` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-manifest` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-junit4` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.material3:material3` from 1.5.0-alpha19 to 1.5.0-alpha20\n\nUpdates `com.google.protobuf:protobuf-javalite` from 4.34.1 to 4.35.0\n\nUpdates `org.checkerframework:checker-qual` from 4.1.0 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key \u0026quot;createsmustcallfor.target.unparseable\u0026quot; to \u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror, TypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key \u0026quot;createsmustcallfor.target.unparseable\u0026quot; to \u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror, TypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/231e85507cb0166a94145d2e35b8d3d355c3ced6\"\u003e\u003ccode\u003e231e855\u003c/code\u003e\u003c/a\u003e new release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/e59f66f668bfffbadbd3185c103a898ee69fa745\"\u003e\u003ccode\u003ee59f66f\u003c/code\u003e\u003c/a\u003e Prep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/bcc021ff1928ddb3e2ca9afa876bb16a6e924396\"\u003e\u003ccode\u003ebcc021f\u003c/code\u003e\u003c/a\u003e Fix problem with type var in a method reference (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7729\"\u003e#7729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/91392e5f6a521ee48baa974f39038a3ff309c5e3\"\u003e\u003ccode\u003e91392e5\u003c/code\u003e\u003c/a\u003e Use gradle-git-properties version 4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/cdae25801e483901ce5ebd814ad5286f5e332531\"\u003e\u003ccode\u003ecdae258\u003c/code\u003e\u003c/a\u003e Increase constraint limit (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7752\"\u003e#7752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/dbb553d23011306ced4a7d49fac82aa2df850e9d\"\u003e\u003ccode\u003edbb553d\u003c/code\u003e\u003c/a\u003e Fix check of receiver override (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7746\"\u003e#7746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/264c73dbc2cde531fe88f6546c76727de348d3af\"\u003e\u003ccode\u003e264c73d\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;unneeded.suppression\u0026quot; warning (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7747\"\u003e#7747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/d118b89190356b846201f2488b96710dfee11aef\"\u003e\u003ccode\u003ed118b89\u003c/code\u003e\u003c/a\u003e New methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7745\"\u003e#7745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/a916913c161d0cf6078c32e823d724a4c31890ae\"\u003e\u003ccode\u003ea916913\u003c/code\u003e\u003c/a\u003e Simplify logic (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7744\"\u003e#7744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/227974fbf0e546621a53da5f2db0de83fee61c46\"\u003e\u003ccode\u003e227974f\u003c/code\u003e\u003c/a\u003e Update plugin com-gradleup-shadow to v9.4.2 (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7749\"\u003e#7749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/typetools/checker-framework/compare/checker-framework-4.1.0...checker-framework-4.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Not...\n\n_Description has been truncated_","html_url":"https://github.com/sahilsaraearth-svg/aro-music/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sahilsaraearth-svg%2Faro-music/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"},{"uuid":"4470993564","node_id":"PR_kwDODFDo0s7cvogB","number":9,"state":"closed","title":"Bump the maven group across 8 directories with 10 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T01:44:31.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-18T17:01:18.000Z","updated_at":"2026-05-21T01:44:33.000Z","time_to_close":204193,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":10,"packages":[{"name":"org.asynchttpclient:async-http-client","old_version":"2.7.0","new_version":"2.15.0","repository_url":"https://github.com/AsyncHttpClient/async-http-client"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.32.Final","new_version":"4.1.133.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.4","new_version":"3.18.0"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.10.0","new_version":"2.25.4"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.6.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"org.bouncycastle:bcpkix-jdk15on","old_version":"1.60","new_version":"1.70","repository_url":"https://github.com/bcgit/bc-java"},{"name":"com.jamesmurty.utils:java-xmlbuilder","old_version":"1.1","new_version":"1.2","repository_url":"https://github.com/jmurty/java-xmlbuilder"},{"name":"org.apache.solr:solr-solrj","old_version":"7.5.0","new_version":"8.11.3"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `2.7.0` | `2.15.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.133.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.6.5` | `2.18.6` |\n| [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) | `1.60` | `1.70` |\n| [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder) | `1.1` | `1.2` |\n| org.apache.solr:solr-solrj | `7.5.0` | `8.11.3` |\n\nBumps the maven group with 1 update in the /buildtools directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 1 update in the /examples/flink directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 2 updates in the /pulsar-io/solr directory: org.apache.commons:commons-lang3 and org.apache.solr:solr-solrj.\nBumps the maven group with 1 update in the /pulsar-io/twitter directory: org.apache.commons:commons-lang3.\nBumps the maven group with 7 updates in the /pulsar-sql directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `2.7.0` | `2.15.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.133.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.8.11` | `2.18.6` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.8.11.4` | `2.12.7.1` |\n| [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) | `1.60` | `1.70` |\n\nBumps the maven group with 2 updates in the /pulsar-sql/presto-distribution directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).\nBumps the maven group with 1 update in the /tiered-storage/jcloud directory: [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder).\n\nUpdates `org.asynchttpclient:async-http-client` from 2.7.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/releases\"\u003eorg.asynchttpclient:async-http-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAHC v2.15.0 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.14.5 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.12.4 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003eThis is a breaking release. \u003ccode\u003eRequestBuilderBase.java\u003c/code\u003e has a new method added. This is in response to \u003ccode\u003eGHSA-mfj5-cf8g-g2fv\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/9e52c0ca7cc10d8d19fc77a460e6e016f14a90d9\"\u003e\u003ccode\u003e9e52c0c\u003c/code\u003e\u003c/a\u003e chore: Dependency upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/5eed33962a412a0100f8117dca849930652bfe30\"\u003e\u003ccode\u003e5eed339\u003c/code\u003e\u003c/a\u003e Patch Security Advisory: GHSA-fmxf-pm6p-7xgm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/ae557ad35246721c09dafb2976609cd0004e78ae\"\u003e\u003ccode\u003eae557ad\u003c/code\u003e\u003c/a\u003e Release 2.14.5: Security fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/6afba08b39a10c2a85bb1b38e14ada224cd40705\"\u003e\u003ccode\u003e6afba08\u003c/code\u003e\u003c/a\u003e Release 2.12.4 with CVE Fix: 2024-53990\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7a370af58dc8895a27a14d0a81af2a3b91930651\"\u003e\u003ccode\u003e7a370af\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release async-http-client-project-2.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7201bf111839358226df678fd512961a3db4fc1d\"\u003e\u003ccode\u003e7201bf1\u003c/code\u003e\u003c/a\u003e Bump netty to 4.1.60.Final \u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1775\"\u003e#1775\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1782\"\u003e#1782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/576decf10ca8729c1b3216fcd54c2191872059f4\"\u003e\u003ccode\u003e576decf\u003c/code\u003e\u003c/a\u003e Proxy CONNECT custom headers (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1774\"\u003e#1774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d2fc37154b48c416e9d2dda0095a4a7a32b83f5a\"\u003e\u003ccode\u003ed2fc371\u003c/code\u003e\u003c/a\u003e Fix for NPE when connection is reset by peer (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1771\"\u003e#1771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/bd7b5bd0e3e5f7eb045d3e996d94b9f190fe3232\"\u003e\u003ccode\u003ebd7b5bd\u003c/code\u003e\u003c/a\u003e Use original method in redirects for HEAD / OPTIONS requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1736\"\u003e#1736\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d24ee6ac16e972fd910d1adfdd542e0cd2db59bd\"\u003e\u003ccode\u003ed24ee6a\u003c/code\u003e\u003c/a\u003e Propagate original request user-agent in proxy CONNECT requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.7.0...async-http-client-project-2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.133.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.6.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.6.5 to 2.8.11.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.bouncycastle:bcpkix-jdk15on` from 1.60 to 1.70\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html\"\u003eorg.bouncycastle:bcpkix-jdk15on's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bcgit/bc-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.asynchttpclient:async-http-client` from 2.7.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/releases\"\u003eorg.asynchttpclient:async-http-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAHC v2.15.0 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.14.5 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.12.4 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003eThis is a breaking release. \u003ccode\u003eRequestBuilderBase.java\u003c/code\u003e has a new method added. This is in response to \u003ccode\u003eGHSA-mfj5-cf8g-g2fv\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/9e52c0ca7cc10d8d19fc77a460e6e016f14a90d9\"\u003e\u003ccode\u003e9e52c0c\u003c/code\u003e\u003c/a\u003e chore: Dependency upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/5eed33962a412a0100f8117dca849930652bfe30\"\u003e\u003ccode\u003e5eed339\u003c/code\u003e\u003c/a\u003e Patch Security Advisory: GHSA-fmxf-pm6p-7xgm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/ae557ad35246721c09dafb2976609cd0004e78ae\"\u003e\u003ccode\u003eae557ad\u003c/code\u003e\u003c/a\u003e Release 2.14.5: Security fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/6afba08b39a10c2a85bb1b38e14ada224cd40705\"\u003e\u003ccode\u003e6afba08\u003c/code\u003e\u003c/a\u003e Release 2.12.4 with CVE Fix: 2024-53990\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7a370af58dc8895a27a14d0a81af2a3b91930651\"\u003e\u003ccode\u003e7a370af\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release async-http-client-project-2.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7201bf111839358226df678fd512961a3db4fc1d\"\u003e\u003ccode\u003e7201bf1\u003c/code\u003e\u003c/a\u003e Bump netty to 4.1.60.Final \u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1775\"\u003e#1775\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1782\"\u003e#1782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/576decf10ca8729c1b3216fcd54c2191872059f4\"\u003e\u003ccode\u003e576decf\u003c/code\u003e\u003c/a\u003e Proxy CONNECT custom headers (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1774\"\u003e#1774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d2fc37154b48c416e9d2dda0095a4a7a32b83f5a\"\u003e\u003ccode\u003ed2fc371\u003c/code\u003e\u003c/a\u003e Fix for NPE when connection is reset by peer (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1771\"\u003e#1771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/bd7b5bd0e3e5f7eb045d3e996d94b9f190fe3232\"\u003e\u003ccode\u003ebd7b5bd\u003c/code\u003e\u003c/a\u003e Use original method in redirects for HEAD / OPTIONS requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1736\"\u003e#1736\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d24ee6ac16e972fd910d1adfdd542e0cd2db59bd\"\u003e\u003ccode\u003ed24ee6a\u003c/code\u003e\u003c/a\u003e Propagate original request user-agent in proxy CONNECT requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.7.0...async-http-client-project-2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.133.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.bouncycastle:bcpkix-jdk15on` from 1.60 to 1.70\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html\"\u003eorg.bouncycastle:bcpkix-jdk15on's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bcgit/bc-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vicaya/pulsar/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/vicaya/pulsar/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vicaya%2Fpulsar/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"4464033697","node_id":"PR_kwDOSASMTs7cZgKo","number":12,"state":"closed","title":"build(deps): bump the minor-and-patch group across 1 directory with 23 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T03:18:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T15:55:25.000Z","updated_at":"2026-06-12T03:18:36.000Z","time_to_close":2200982,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"minor-and-patch","update_count":23,"packages":[{"name":"com.google.zxing:core","old_version":"3.5.3","new_version":"3.5.4","repository_url":"https://github.com/zxing/zxing"},{"name":"androidx.core:core","old_version":"1.15.0","new_version":"1.19.0"},{"name":"androidx.core:core-ktx","old_version":"1.15.0","new_version":"1.19.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.135.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"commons-io:commons-io","old_version":"2.14.0","new_version":"2.22.0"},{"name":"org.jetbrains.kotlinx:kotlinx-coroutines-core","old_version":"1.10.2","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.coroutines"},{"name":"org.jetbrains.kotlinx:kotlinx-coroutines-test","old_version":"1.10.2","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.coroutines"},{"name":"org.jetbrains.kotlinx:kotlinx-serialization-json","old_version":"1.7.3","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.serialization"},{"name":"com.juul.kable:kable-core","old_version":"0.42.0","new_version":"0.43.1","repository_url":"https://github.com/JuulLabs/kable"},{"name":"androidx.activity:activity-compose","old_version":"1.9.3","new_version":"1.13.0"},{"name":"com.github.hypfvieh:dbus-java-core","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"com.github.hypfvieh:dbus-java-transport-native-unixsocket","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"com.github.hypfvieh:dbus-java-transport-jnr-unixsocket","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"org.slf4j:slf4j-simple","old_version":"2.0.12","new_version":"2.0.18"},{"name":"org.jetbrains.kotlin.multiplatform","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.kotlin.plugin.compose","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.kotlin.plugin.serialization","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.compose","old_version":"1.7.3","new_version":"1.11.1","repository_url":"https://github.com/JetBrains/compose-multiplatform"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch group with 18 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [com.google.zxing:core](https://github.com/zxing/zxing) | `3.5.3` | `3.5.4` |\n| androidx.core:core | `1.15.0` | `1.19.0` |\n| androidx.core:core-ktx | `1.15.0` | `1.19.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.135.Final` | `4.2.15.Final` |\n| commons-io:commons-io | `2.14.0` | `2.22.0` |\n| [org.jetbrains.kotlinx:kotlinx-coroutines-core](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |\n| [org.jetbrains.kotlinx:kotlinx-coroutines-test](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |\n| [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.7.3` | `1.11.0` |\n| [com.juul.kable:kable-core](https://github.com/JuulLabs/kable) | `0.42.0` | `0.43.1` |\n| androidx.activity:activity-compose | `1.9.3` | `1.13.0` |\n| [com.github.hypfvieh:dbus-java-core](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| [com.github.hypfvieh:dbus-java-transport-native-unixsocket](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| [com.github.hypfvieh:dbus-java-transport-jnr-unixsocket](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| org.slf4j:slf4j-simple | `2.0.12` | `2.0.18` |\n| [org.jetbrains.kotlin.multiplatform](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.kotlin.plugin.compose](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.kotlin.plugin.serialization](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.compose](https://github.com/JetBrains/compose-multiplatform) | `1.7.3` | `1.11.1` |\n\n\nUpdates `com.google.zxing:core` from 3.5.3 to 3.5.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zxing/zxing/releases\"\u003ecom.google.zxing:core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eZXing 3.5.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix container inefficiency in RSSExpandedReader.java by \u003ca href=\"https://github.com/cinsttool\"\u003e\u003ccode\u003e@​cinsttool\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1782\"\u003ezxing/zxing#1782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SYMBOLOGY_IDENTIFIER Loss in QRCodeMultiReader to Ensure Data Integrity and Functional Consistency with QRCodeReader by \u003ca href=\"https://github.com/xiebaiyuan\"\u003e\u003ccode\u003e@​xiebaiyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1839\"\u003ezxing/zxing#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBe more stringent on email validation rules by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1870\"\u003ezxing/zxing#1870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePDF417: Check that input is made of 0...127 chars when using Compaction.TEXT, throw an explicit exception if not the case by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1878\"\u003ezxing/zxing#1878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing issue \u003ca href=\"https://redirect.github.com/zxing/zxing/issues/1831\"\u003e#1831\u003c/a\u003e by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1879\"\u003ezxing/zxing#1879\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd hint to correct wrong dimension by \u003ca href=\"https://github.com/magethle\"\u003e\u003ccode\u003e@​magethle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1901\"\u003ezxing/zxing#1901\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix distortion calculation for isosceles right triangles by \u003ca href=\"https://github.com/magethle\"\u003e\u003ccode\u003e@​magethle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1908\"\u003ezxing/zxing#1908\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd input validation for pixel array length in RGBLuminanceSource to avoid ArrayIndexOutOfBoundsException by \u003ca href=\"https://github.com/leofernandesmo\"\u003e\u003ccode\u003e@​leofernandesmo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1961\"\u003ezxing/zxing#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd 90-degree rotation support to RGBLuminanceSource by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2012\"\u003ezxing/zxing#2012\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd GrayscaleLuminanceSource by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2013\"\u003ezxing/zxing#2013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLoosen ITF max variance for 3x module widths by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2014\"\u003ezxing/zxing#2014\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\"\u003ehttps://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/f651b0a0375676e47144f73397dddff8868b0e4c\"\u003e\u003ccode\u003ef651b0a\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/6d66bd96437e15650b91b7c9c6c7dfaa302b3b3d\"\u003e\u003ccode\u003e6d66bd9\u003c/code\u003e\u003c/a\u003e Restore 3.5.4-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/c65c5506a7f75c6623e8720391487a9db47ed1e0\"\u003e\u003ccode\u003ec65c550\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/00ff3cb5008adbb22f6c396473a3b233076d6cae\"\u003e\u003ccode\u003e00ff3cb\u003c/code\u003e\u003c/a\u003e Add new Sonatype repo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/4a160986ef8b9c1e27efa32d724681f28a1eccfd\"\u003e\u003ccode\u003e4a16098\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] rollback the release of zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/7c58665161d5bfd75593f0d4777f036ffdaf9d1c\"\u003e\u003ccode\u003e7c58665\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/b36e149816fa9e1bc13b6249fd91d0c107967fa7\"\u003e\u003ccode\u003eb36e149\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/8536950144e8cc3f39ca416fb0b2e327bc14f26f\"\u003e\u003ccode\u003e8536950\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] rollback the release of zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/1fe940f09142af819df352b05bc6722e10d99d72\"\u003e\u003ccode\u003e1fe940f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/6cf10626462f7f56ff4e056b29871f87a8105a53\"\u003e\u003ccode\u003e6cf1062\u003c/code\u003e\u003c/a\u003e Manually update secondary packages to 3.5.4. parent\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.core:core` from 1.15.0 to 1.19.0\n\nUpdates `androidx.core:core-ktx` from 1.15.0 to 1.19.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-common` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler-proxy` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler-proxy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"h...\n\n_Description has been truncated_","html_url":"https://github.com/Avicennasis/BluePaper/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Avicennasis%2FBluePaper/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"},{"uuid":"4408508151","node_id":"PR_kwDOPBlamc7ZpB3-","number":14,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.129.Final to 4.1.133.Final","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-08T23:18:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T18:25:56.000Z","updated_at":"2026-06-08T23:18:26.000Z","time_to_close":2695948,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.129.Final","new_version":"4.1.133.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.129.Final to 4.1.133.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.129.Final\u0026new-version=4.1.133.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/aimansharief/knowledge-platform-jobs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/aimansharief/knowledge-platform-jobs/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aimansharief%2Fknowledge-platform-jobs/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"},{"uuid":"4403012111","node_id":"PR_kwDOQ9mKCc7ZW723","number":53,"state":"closed","title":"chore(deps): bump the gradle-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-11T01:16:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T01:11:05.000Z","updated_at":"2026-05-11T01:16:51.000Z","time_to_close":259545,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gradle-dependencies","update_count":8,"packages":[{"name":"com.android.tools.build:gradle","old_version":"9.2.0","new_version":"9.2.1"},{"name":"io.netty:netty-codec-http","old_version":"4.2.12.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-handler","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-codec","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-common","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"com.google.firebase:firebase-bom","old_version":"34.12.0","new_version":"34.13.0"},{"name":"androidx.compose:compose-bom","old_version":"2026.04.01","new_version":"2026.05.00"}],"path":null,"ecosystem":"maven"},"body":"Bumps the gradle-dependencies group with 4 updates in the / directory: com.android.tools.build:gradle, [io.netty:netty-codec-http](https://github.com/netty/netty), com.google.firebase:firebase-bom and androidx.compose:compose-bom.\n\nUpdates `com.android.tools.build:gradle` from 9.2.0 to 9.2.1\n\nUpdates `io.netty:netty-codec-http` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-common` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.google.firebase:firebase-bom` from 34.12.0 to 34.13.0\n\nUpdates `androidx.compose:compose-bom` from 2026.04.01 to 2026.05.00\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AndroidIRCx/NULVEX/pull/53","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AndroidIRCx%2FNULVEX/issues/53","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/53/packages"},{"uuid":"4402766546","node_id":"PR_kwDOKyk85s7ZWI67","number":2312,"state":"closed","title":"chore(deps): bump the all-backend-non-major-dependencies group in /backend with 3 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-11T00:09:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T00:09:00.000Z","updated_at":"2026-05-11T00:09:49.000Z","time_to_close":259247,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"all-backend-non-major-dependencies","update_count":3,"packages":[{"name":"software.amazon.awssdk:bom","old_version":"2.44.0","new_version":"2.44.1"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.12.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec","old_version":"4.1.133.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"}],"path":"/backend","ecosystem":"maven"},"body":"Bumps the all-backend-non-major-dependencies group in /backend with 3 updates: software.amazon.awssdk:bom, [io.netty:netty-codec-http2](https://github.com/netty/netty) and [io.netty:netty-codec](https://github.com/netty/netty).\n\nUpdates `software.amazon.awssdk:bom` from 2.44.0 to 2.44.1\n\nUpdates `io.netty:netty-codec-http2` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.1.133.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.133.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/digitalservicebund/ris-norms/pull/2312","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/digitalservicebund%2Fris-norms/issues/2312","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2312/packages"},{"uuid":"4367871133","node_id":"PR_kwDOAICTps7Xl329","number":1986,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.89.Final to 4.1.132.Final","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-02T22:22:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-02T04:16:06.000Z","updated_at":"2026-05-02T22:23:01.000Z","time_to_close":65206,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.89.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.89.Final to 4.1.132.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.89.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.89.Final\u0026new-version=4.1.132.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mock-server/mockserver/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/mock-server/mockserver/pull/1986","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mock-server%2Fmockserver/issues/1986","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1986/packages"},{"uuid":"4366889374","node_id":"PR_kwDOCeOXyM7Xiwlw","number":395,"state":"closed","title":"chore(deps): Bump io.netty:netty-codec-http2 from 4.1.118.Final to 4.1.132.Final in /docker_images/java/wrapper","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-08T16:28:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-01T22:12:16.000Z","updated_at":"2026-05-08T16:28:59.000Z","time_to_close":584201,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.118.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"}],"path":"/docker_images/java/wrapper","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.118.Final to 4.1.132.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.118.Final\u0026new-version=4.1.132.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Azure/iot-sdks-e2e-fx/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Azure/iot-sdks-e2e-fx/pull/395","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fiot-sdks-e2e-fx/issues/395","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/395/packages"},{"uuid":"4342529288","node_id":"PR_kwDOH66yGc7WTMYO","number":3192,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.127.Final to 4.2.12.Final in /apps/nbs-gateway","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-29T18:28:45.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-28T10:50:12.000Z","updated_at":"2026-04-29T18:28:55.000Z","time_to_close":113913,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.127.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"}],"path":"/apps/nbs-gateway","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.127.Final to 4.2.12.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.127.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=gradle\u0026previous-version=4.1.127.Final\u0026new-version=4.2.12.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CDCgov/NEDSS-Modernization/pull/3192","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CDCgov%2FNEDSS-Modernization/issues/3192","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3192/packages"},{"uuid":"4265420540","node_id":"PR_kwDOCpk-587SeV9E","number":1027,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.2.9.Final to 4.2.10.Final in /dusseldorf-ktor-streams","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:01:30.000Z","updated_at":"2026-04-15T00:02:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.2.9.Final","new_version":"4.2.10.Final","repository_url":"https://github.com/netty/netty"}],"path":"/dusseldorf-ktor-streams","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.2.9.Final to 4.2.10.Final.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4cc98736c3947bc93122e0b64e0bd8fc970c6437\"\u003e\u003ccode\u003e4cc9873\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.10.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/54b8663619577749511269a4149adf018438c8b0\"\u003e\u003ccode\u003e54b8663\u003c/code\u003e\u003c/a\u003e Remove unnecessary allocations and abstractions in HttpContentCompressor (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/961f427289730cd1ff92b734ddeea8dd0b7d276a\"\u003e\u003ccode\u003e961f427\u003c/code\u003e\u003c/a\u003e Update to netty-tcnative 2.0.75.Final (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16227\"\u003e#16227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3007ba9d2853a03d3d0281be1ec9b358e48170b1\"\u003e\u003ccode\u003e3007ba9\u003c/code\u003e\u003c/a\u003e Use recommanded finalize chain pattern when override finalize() method (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16212\"\u003e#16212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b91804287e0e06e8ca9da5e508f0490f9b7e4ad9\"\u003e\u003ccode\u003eb918042\u003c/code\u003e\u003c/a\u003e Update some dependencies (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16198\"\u003e#16198\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16215\"\u003e#16215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/874c99529e1db187cc3f5346f5f8ffea94e34f0c\"\u003e\u003ccode\u003e874c995\u003c/code\u003e\u003c/a\u003e Reduce allocations on DefaultHeaders::containsValue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15843\"\u003e#15843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e0fe7940ce6070be48b8cb5af22ce9e7e4813ec2\"\u003e\u003ccode\u003ee0fe794\u003c/code\u003e\u003c/a\u003e Remove unnecessary null check in WebSocketServerExtensionHandler (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16201\"\u003e#16201\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1b0636b7ac773052c1fefe7f86593e655aacb1b4\"\u003e\u003ccode\u003e1b0636b\u003c/code\u003e\u003c/a\u003e Move default compression options into static variable in HttpContentCompresso...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/85a3a0ee8d67bac9f6a85aa6444e0805564fffc6\"\u003e\u003ccode\u003e85a3a0e\u003c/code\u003e\u003c/a\u003e codec-http2: move the accessors from Http2Headers to DefaultHttp2Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f44a88d340580510cb3a94e454c10cb949dc07fd\"\u003e\u003ccode\u003ef44a88d\u003c/code\u003e\u003c/a\u003e Improve chunk picking for the large-size buddy allocator (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16179\"\u003e#16179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.9.Final...netty-4.2.10.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.2.9.Final\u0026new-version=4.2.10.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/navikt/dusseldorf-ktor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/navikt/dusseldorf-ktor/pull/1027","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/navikt%2Fdusseldorf-ktor/issues/1027","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1027/packages"},{"uuid":"4250771191","node_id":"PR_kwDOCQrD6s7R2Jx5","number":3491,"state":"open","title":"Bump the minor-and-patch-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T02:04:35.000Z","updated_at":"2026-04-13T02:20:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch-dependencies","update_count":5,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.azure:azure-cosmos","old_version":"4.79.0","new_version":"4.79.1","repository_url":"https://github.com/Azure/azure-sdk-for-java"},{"name":"com.azure:azure-storage-blob","old_version":"12.33.0","new_version":"12.33.3","repository_url":"https://github.com/Azure/azure-sdk-for-java"},{"name":"com.google.cloud:google-cloud-storage","old_version":"2.64.1","new_version":"2.66.0","repository_url":"https://github.com/googleapis/google-cloud-java"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch-dependencies group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` |\n| [com.azure:azure-cosmos](https://github.com/Azure/azure-sdk-for-java) | `4.79.0` | `4.79.1` |\n| [com.azure:azure-storage-blob](https://github.com/Azure/azure-sdk-for-java) | `12.33.0` | `12.33.3` |\n| [com.google.cloud:google-cloud-storage](https://github.com/googleapis/google-cloud-java) | `2.64.1` | `2.66.0` |\n\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-cosmos` from 4.79.0 to 4.79.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-cosmos's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-cosmos_4.79.1\u003c/h2\u003e\n\u003ch3\u003e4.79.1 (2026-04-06)\u003c/h3\u003e\n\u003ch4\u003eBugs Fixed\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFixing an NPE caused due to boxed Boolean conversion. - See \u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/pull/48656/\"\u003ePR 48656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/a8a49e90a67c5c6794c9f5f2baa12a1778473b7f\"\u003e\u003ccode\u003ea8a49e9\u003c/code\u003e\u003c/a\u003e Release azure-cosmos 4.79.1 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48700\"\u003e#48700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0be98b6357d0edf37b3246e07fc4ad18f45c4560\"\u003e\u003ccode\u003e0be98b6\u003c/code\u003e\u003c/a\u003e Temporarily Disabling Immutable Storage with Versioning Tests During Diagnost...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/beeb599f0f61ed78f6f8416a67e0f13fdf968ac8\"\u003e\u003ccode\u003ebeeb599\u003c/code\u003e\u003c/a\u003e fix: reset metrics registry per benchmark cycle (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48695\"\u003e#48695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/966398c33e04ffc4b4312d094b06b5527dafc884\"\u003e\u003ccode\u003e966398c\u003c/code\u003e\u003c/a\u003e Set default service version to 2025-07-01 for keyvault secrets (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48690\"\u003e#48690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0ce561cb8496d86d7c6161e67b6d12e7a40fe1d3\"\u003e\u003ccode\u003e0ce561c\u003c/code\u003e\u003c/a\u003e [Key Vault Certificates] Remove preview service version from GA library (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48678\"\u003e#48678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/56dab1344a69eb23c7878801deae928d70d4683a\"\u003e\u003ccode\u003e56dab13\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14922 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48696\"\u003e#48696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/26c01acfa9861f2c36f1b8d9c29cb62a87abfc0a\"\u003e\u003ccode\u003e26c01ac\u003c/code\u003e\u003c/a\u003e March 2026 Patches Merge-back (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48665\"\u003e#48665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/dec14b84ace4ecd2e40b8c6a1d4a6170d9427fda\"\u003e\u003ccode\u003edec14b8\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14890 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48686\"\u003e#48686\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/432a58725e722421c6b0618432c6922b5c8a38d6\"\u003e\u003ccode\u003e432a587\u003c/code\u003e\u003c/a\u003e Clean up azure-identity README (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48685\"\u003e#48685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/9336a4bd0c47b2fe017b4d77bc924cc04a3718cf\"\u003e\u003ccode\u003e9336a4b\u003c/code\u003e\u003c/a\u003e [EventHubs] Migrate to TypeSpec (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48673\"\u003e#48673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-cosmos_4.79.0...com.azure+azure-cosmos_4.79.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-storage-blob` from 12.33.0 to 12.33.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-storage-blob's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-storage-blob_12.33.3\u003c/h2\u003e\n\u003ch2\u003e12.33.3 (2026-03-30)\u003c/h2\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003ch4\u003eDependency Updates\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded \u003ccode\u003eazure-storage-internal-avro\u003c/code\u003e from \u003ccode\u003e12.18.1\u003c/code\u003e to version \u003ccode\u003e12.18.2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/2090030db4739f8824d8e76cb659bc0066258c1f\"\u003e\u003ccode\u003e2090030\u003c/code\u003e\u003c/a\u003e Prepare patch release 20260330 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48640\"\u003e#48640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/d55cdf5cc240dfdf979a1be2dc2fc59544a993fd\"\u003e\u003ccode\u003ed55cdf5\u003c/code\u003e\u003c/a\u003e [AutoPR azure-resourcemanager-search]-generated-from-SDK Generation - Java-60...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/51f7888a9033a6dbce3e2a6579372bed8bfae10b\"\u003e\u003ccode\u003e51f7888\u003c/code\u003e\u003c/a\u003e Temporarily hiding tsplocation for azure-ai-agents/projects. (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48633\"\u003e#48633\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/076a5ed74bc5737e3e4732a4e5f56ff4ee4e9864\"\u003e\u003ccode\u003e076a5ed\u003c/code\u003e\u003c/a\u003e Increment package versions for cosmos releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48616\"\u003e#48616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/b051200eb3632858bd05fc60c5751fedb7b2d0e4\"\u003e\u003ccode\u003eb051200\u003c/code\u003e\u003c/a\u003e Increment package versions for appservice releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48628\"\u003e#48628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/c37240c5e543423c50502d51b98e2e5d3f437ecb\"\u003e\u003ccode\u003ec37240c\u003c/code\u003e\u003c/a\u003e Upgrade external dependencies to align with Spring Boot 4.0.5 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48604\"\u003e#48604\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/01c3b17740113da4b02d565305494b30dd924432\"\u003e\u003ccode\u003e01c3b17\u003c/code\u003e\u003c/a\u003e [AppService] Regenerate SDK with naming compatibility fixes (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48626\"\u003e#48626\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/07308a96bee5bd569fb5c9ffe5c28ba59c567b91\"\u003e\u003ccode\u003e07308a9\u003c/code\u003e\u003c/a\u003e Configurations:  'specification/storagemover/StorageMover.Management/tspconfi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/10cd2553c38b3f5a22af7a8b8ff2d887803e0d21\"\u003e\u003ccode\u003e10cd255\u003c/code\u003e\u003c/a\u003e Final Java Fixes (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48620\"\u003e#48620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/59b98c1fd282415b4ed3a264f7e73a51bd3076ec\"\u003e\u003ccode\u003e59b98c1\u003c/code\u003e\u003c/a\u003e bump deps for spelling and tsp-client - npm update --before 2026-03-24 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48600\"\u003e#48600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-storage-blob_12.33.0...com.azure+azure-storage-blob_12.33.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.google.cloud:google-cloud-storage` from 2.64.1 to 2.66.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-java/blob/main/java-document-ai/CHANGELOG.md\"\u003ecom.google.cloud:google-cloud-storage's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.66.0 (2025-05-06)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.46.3 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11531\"\u003e#11531\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/5f9a9e73df5e44ae38a8d18780873b7896d31c04\"\u003e5f9a9e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.47.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11561\"\u003e#11561\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/9e842300aa2e3e654785cc929aef0d6bb9a1a0a9\"\u003e9e84230\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.63.0 (2025-02-26)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.44.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11456\"\u003e#11456\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/6b0ad6f8243cc60de7ee608237fa61445f0b0526\"\u003e6b0ad6f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.62.0 (2025-02-11)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11426\"\u003e#11426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/afdc2944304a077ce4cbdd8c7675f1ca707b2be0\"\u003eafdc294\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.61.0 (2025-01-29)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.42.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11410\"\u003e#11410\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/34dfd0dc9c5ca042aca0778e8d34b2ca072bfeb1\"\u003e34dfd0d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.60.0 (2025-01-09)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.41.1 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11382\"\u003e#11382\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/a4fd23ce1dfa364959de1e97e3b769996f3c7d0d\"\u003ea4fd23c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.59.0 (2024-12-13)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.41.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11349\"\u003e#11349\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/9bb6334458fdec53ba9fdec501de534d6516f102\"\u003e9bb6334\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.58.0 (2024-11-18)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNo change\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.57.0 (2024-10-28)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/google-cloud-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| io.netty:netty-codec-http | [\u003e= 4.2.a, \u003c 4.3] |\n\u003c/details\u003e\n","html_url":"https://github.com/scalar-labs/scalardb/pull/3491","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/scalar-labs%2Fscalardb/issues/3491","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3491/packages"},{"uuid":"4248767706","node_id":"PR_kwDOCQrD6s7RycEU","number":3489,"state":"closed","title":"Bump the minor-and-patch-dependencies group with 3 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":"2026-04-13T02:03:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-12T16:03:50.000Z","updated_at":"2026-04-13T02:03:52.000Z","time_to_close":36000,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch-dependencies","update_count":3,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.azure:azure-cosmos","old_version":"4.79.0","new_version":"4.79.1","repository_url":"https://github.com/Azure/azure-sdk-for-java"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch-dependencies group with 3 updates: [io.netty:netty-codec-http](https://github.com/netty/netty), [io.netty:netty-codec-http2](https://github.com/netty/netty) and [com.azure:azure-cosmos](https://github.com/Azure/azure-sdk-for-java).\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-cosmos` from 4.79.0 to 4.79.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-cosmos's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-cosmos_4.79.1\u003c/h2\u003e\n\u003ch3\u003e4.79.1 (2026-04-06)\u003c/h3\u003e\n\u003ch4\u003eBugs Fixed\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFixing an NPE caused due to boxed Boolean conversion. - See \u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/pull/48656/\"\u003ePR 48656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/a8a49e90a67c5c6794c9f5f2baa12a1778473b7f\"\u003e\u003ccode\u003ea8a49e9\u003c/code\u003e\u003c/a\u003e Release azure-cosmos 4.79.1 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48700\"\u003e#48700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0be98b6357d0edf37b3246e07fc4ad18f45c4560\"\u003e\u003ccode\u003e0be98b6\u003c/code\u003e\u003c/a\u003e Temporarily Disabling Immutable Storage with Versioning Tests During Diagnost...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/beeb599f0f61ed78f6f8416a67e0f13fdf968ac8\"\u003e\u003ccode\u003ebeeb599\u003c/code\u003e\u003c/a\u003e fix: reset metrics registry per benchmark cycle (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48695\"\u003e#48695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/966398c33e04ffc4b4312d094b06b5527dafc884\"\u003e\u003ccode\u003e966398c\u003c/code\u003e\u003c/a\u003e Set default service version to 2025-07-01 for keyvault secrets (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48690\"\u003e#48690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0ce561cb8496d86d7c6161e67b6d12e7a40fe1d3\"\u003e\u003ccode\u003e0ce561c\u003c/code\u003e\u003c/a\u003e [Key Vault Certificates] Remove preview service version from GA library (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48678\"\u003e#48678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/56dab1344a69eb23c7878801deae928d70d4683a\"\u003e\u003ccode\u003e56dab13\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14922 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48696\"\u003e#48696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/26c01acfa9861f2c36f1b8d9c29cb62a87abfc0a\"\u003e\u003ccode\u003e26c01ac\u003c/code\u003e\u003c/a\u003e March 2026 Patches Merge-back (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48665\"\u003e#48665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/dec14b84ace4ecd2e40b8c6a1d4a6170d9427fda\"\u003e\u003ccode\u003edec14b8\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14890 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48686\"\u003e#48686\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/432a58725e722421c6b0618432c6922b5c8a38d6\"\u003e\u003ccode\u003e432a587\u003c/code\u003e\u003c/a\u003e Clean up azure-identity README (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48685\"\u003e#48685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/9336a4bd0c47b2fe017b4d77bc924cc04a3718cf\"\u003e\u003ccode\u003e9336a4b\u003c/code\u003e\u003c/a\u003e [EventHubs] Migrate to TypeSpec (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48673\"\u003e#48673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-cosmos_4.79.0...com.azure+azure-cosmos_4.79.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/scalar-labs/scalardb/pull/3489","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/scalar-labs%2Fscalardb/issues/3489","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3489/packages"},{"uuid":"4242176397","node_id":"PR_kwDOIdXQSs7RlzU0","number":12,"state":"closed","title":"Bump the maven group across 8 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","java","type:build","module:mixed-spark","module:mixed-trino","module:mixed-flink"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-14T00:24:36.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T23:22:33.000Z","updated_at":"2026-04-14T00:24:37.000Z","time_to_close":262923,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":9,"packages":[{"name":"org.apache.commons:commons-compress","old_version":"1.23.0","new_version":"1.26.0"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.13.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.20.0","new_version":"2.25.4"},{"name":"org.apache.derby:derby","old_version":"10.14.2.0","new_version":"10.17.1.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.129.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.hive:hive-exec","old_version":"2.1.1","new_version":"4.0.1"},{"name":"org.assertj:assertj-core","old_version":"3.21.0","new_version":"3.27.7","repository_url":"https://github.com/assertj/assertj"},{"name":"org.apache.avro:avro","old_version":"1.10.1","new_version":"1.11.4"},{"name":"commons-io:commons-io","old_version":"2.4","new_version":"2.14.0"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.apache.commons:commons-compress | `1.23.0` | `1.26.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.13.5` | `2.18.6` |\n| org.apache.logging.log4j:log4j-core | `2.20.0` | `2.25.4` |\n| org.apache.derby:derby | `10.14.2.0` | `10.17.1.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.129.Final` | `4.1.132.Final` |\n| org.apache.hive:hive-exec | `2.1.1` | `4.0.1` |\n| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.21.0` | `3.27.7` |\n| org.apache.avro:avro | `1.10.1` | `1.11.4` |\n| commons-io:commons-io | `2.4` | `2.14.0` |\n\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-flink/amoro-mixed-flink-common directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-flink/amoro-mixed-flink-common-iceberg-bridge directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.3/amoro-mixed-spark-3.3 directory: org.apache.hive:hive-exec.\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.4/amoro-mixed-spark-3.4 directory: org.apache.hive:hive-exec.\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.5/amoro-mixed-spark-3.5 directory: org.apache.hive:hive-exec.\nBumps the maven group with 3 updates in the /amoro-format-mixed/amoro-mixed-trino directory: org.apache.hive:hive-exec, org.apache.avro:avro and commons-io:commons-io.\nBumps the maven group with 6 updates in the /amoro-openapi-sdk directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.apache.commons:commons-compress | `1.23.0` | `1.26.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.13.5` | `2.18.6` |\n| org.apache.logging.log4j:log4j-core | `2.20.0` | `2.25.4` |\n| org.apache.derby:derby | `10.14.2.0` | `10.17.1.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.129.Final` | `4.1.132.Final` |\n| org.apache.hive:hive-exec | `3.1.3` | `4.0.1` |\n\n\nUpdates `org.apache.commons:commons-compress` from 1.23.0 to 1.26.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.13.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.13.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4\n\nUpdates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.129.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 2.1.1 to 4.0.1\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.avro:avro` from 1.10.1 to 1.11.4\n\nUpdates `commons-io:commons-io` from 2.4 to 2.14.0\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.1.1 to 4.0.1\n\nUpdates `org.apache.avro:avro` from 1.10.1 to 1.11.4\n\nUpdates `commons-io:commons-io` from 2.4 to 2.14.0\n\nUpdates `org.apache.commons:commons-compress` from 1.23.0 to 1.26.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.13.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.13.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4\n\nUpdates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.129.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 3.1.3 to 4.0.1\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/xxubai/amoro/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/xxubai/amoro/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xxubai%2Famoro/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"},{"uuid":"4241853856","node_id":"PR_kwDODFDo0s7Rk1HS","number":4,"state":"closed","title":"Bump the maven group across 8 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-14T01:11:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T21:37:12.000Z","updated_at":"2026-04-14T01:11:49.000Z","time_to_close":272075,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":8,"packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.32.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.4","new_version":"3.18.0"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.10.0","new_version":"2.25.4"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.6.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"com.jamesmurty.utils:java-xmlbuilder","old_version":"1.1","new_version":"1.2","repository_url":"https://github.com/jmurty/java-xmlbuilder"},{"name":"org.apache.solr:solr-solrj","old_version":"7.5.0","new_version":"8.11.3"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.132.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.6.5` | `2.18.6` |\n| [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder) | `1.1` | `1.2` |\n| org.apache.solr:solr-solrj | `7.5.0` | `8.11.3` |\n\nBumps the maven group with 1 update in the /buildtools directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 1 update in the /examples/flink directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 2 updates in the /pulsar-io/solr directory: org.apache.commons:commons-lang3 and org.apache.solr:solr-solrj.\nBumps the maven group with 1 update in the /pulsar-io/twitter directory: org.apache.commons:commons-lang3.\nBumps the maven group with 5 updates in the /pulsar-sql directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.132.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.8.11` | `2.18.6` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.8.11.4` | `2.12.7.1` |\n\nBumps the maven group with 2 updates in the /pulsar-sql/presto-distribution directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).\nBumps the maven group with 1 update in the /tiered-storage/jcloud directory: [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder).\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.6.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.6.5 to 2.8.11.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vicaya/pulsar/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/vicaya/pulsar/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vicaya%2Fpulsar/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}],"issue_packages":[{"old_version":"4.1.133.Final","new_version":"4.1.135.Final","update_type":"patch","path":"/generated-platform-project/quarkus/bom","pr_created_at":"2026-06-08T23:23:04.000Z","version_change":"4.1.133.Final → 4.1.135.Final","issue":{"uuid":"4617350350","node_id":"PR_kwDODKEBwM7kIojd","number":2005,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.1.133.Final to 4.1.135.Final in /generated-platform-project/quarkus/bom","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:23:04.000Z","updated_at":"2026-06-09T03:24:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.133.Final","new_version":"4.1.135.Final","repository_url":"https://github.com/netty/netty"}],"path":"/generated-platform-project/quarkus/bom","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.133.Final to 4.1.135.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.135.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuto-port 4.1: MQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16834\"\u003enetty/netty#16834\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16847\"\u003enetty/netty#16847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x (4.1 backport) by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16856\"\u003enetty/netty#16856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16861\"\u003enetty/netty#16861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpSubnetFilter: Correctly handle ipv6 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16860\"\u003enetty/netty#16860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConfigurable bound on RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16858\"\u003enetty/netty#16858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit decoded length by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16859\"\u003enetty/netty#16859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Ensure query id is not predictible by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16870\"\u003enetty/netty#16870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrapping plain trust manager silently disables hostname verification by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16868\"\u003enetty/netty#16868\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16852\"\u003enetty/netty#16852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16892\"\u003enetty/netty#16892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Reject HAProxyMessages with malformated TLV and not leak memory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16866\"\u003enetty/netty#16866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL: Use sane defaults as limits for the client hello length and timeout by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16871\"\u003enetty/netty#16871\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Only cache CNAME if part of the queried domain by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16873\"\u003enetty/netty#16873\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Enforce max concurrent streams for misbehaving clients by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16876\"\u003enetty/netty#16876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDns: Insufficient Bailiwick Validation for NS Records by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16877\"\u003enetty/netty#16877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: DelegatingDecompressorFrameListener must release memory in all cases by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16880\"\u003enetty/netty#16880\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16886\"\u003enetty/netty#16886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16883\"\u003enetty/netty#16883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16894\"\u003enetty/netty#16894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Fix ByteBuf leak when parsing nested SSL TLVs by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16881\"\u003enetty/netty#16881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll / Kqueue: Correctly handle receive of FD by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16872\"\u003enetty/netty#16872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSCTP: Limit the number of inflight incomplete SCTP messages and the number of fragments by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16875\"\u003enetty/netty#16875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Correctly release incomplete message on removal when using RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16878\"\u003enetty/netty#16878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit the maximum number of nested arrays by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16882\"\u003enetty/netty#16882\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f05f765d81460799c53123a207f665bf3b465171\"\u003e\u003ccode\u003ef05f765\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.135.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/728c98b8ec6597faaccebdc20bf757d6f4b6310b\"\u003e\u003ccode\u003e728c98b\u003c/code\u003e\u003c/a\u003e Redis: Limit the maximum number of nested arrays (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16882\"\u003e#16882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ced30adba26730f0c004c828f607059a050fefb1\"\u003e\u003ccode\u003eced30ad\u003c/code\u003e\u003c/a\u003e Redis: Correctly release incomplete message on removal when using RedisArrayA...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/cef5395186369f6bf7a8caac34e4de1596ba9f15\"\u003e\u003ccode\u003ecef5395\u003c/code\u003e\u003c/a\u003e SCTP: Limit the number of inflight incomplete SCTP messages and the number of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/652663cb50c3be6378969be2cf84472743e0109f\"\u003e\u003ccode\u003e652663c\u003c/code\u003e\u003c/a\u003e Epoll / Kqueue: Correctly handle receive of FD (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16872\"\u003e#16872\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bd6214fe1c3bae1d42aad6e372657b5b2c1f5105\"\u003e\u003ccode\u003ebd6214f\u003c/code\u003e\u003c/a\u003e HAProxy: Fix ByteBuf leak when parsing nested SSL TLVs (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16881\"\u003e#16881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/d7f9069d9e966e0f426429b18973417af066e3d4\"\u003e\u003ccode\u003ed7f9069\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b831454889b20776be6a73daad329404c4682e94\"\u003e\u003ccode\u003eb831454\u003c/code\u003e\u003c/a\u003e HTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16883\"\u003e#16883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/51260aa57e8e9538d31083624226afd793cc675f\"\u003e\u003ccode\u003e51260aa\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16886\"\u003e#16886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e\"\u003e\u003ccode\u003edb6138b\u003c/code\u003e\u003c/a\u003e HTTP2: DelegatingDecompressorFrameListener must release memory in all cases (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.133.Final...netty-4.1.135.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.133.Final\u0026new-version=4.1.135.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quarkusio/quarkus-platform/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/quarkusio/quarkus-platform/pull/2005","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/quarkusio%2Fquarkus-platform/issues/2005","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2005/packages"}},{"old_version":"4.1.130.Final","new_version":"4.1.135.Final","update_type":"patch","path":null,"pr_created_at":"2026-06-08T23:22:32.000Z","version_change":"4.1.130.Final → 4.1.135.Final","issue":{"uuid":"4617347650","node_id":"PR_kwDOQEzLMs7kIn9b","number":232,"state":"open","title":"deps(deps-dev): Bump io.netty:netty-codec-http2 from 4.1.130.Final to 4.1.135.Final","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:22:32.000Z","updated_at":"2026-06-08T23:22:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps-dev): Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.130.Final","new_version":"4.1.135.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.130.Final to 4.1.135.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.135.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuto-port 4.1: MQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16834\"\u003enetty/netty#16834\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16847\"\u003enetty/netty#16847\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x (4.1 backport) by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16856\"\u003enetty/netty#16856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16861\"\u003enetty/netty#16861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpSubnetFilter: Correctly handle ipv6 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16860\"\u003enetty/netty#16860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConfigurable bound on RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16858\"\u003enetty/netty#16858\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit decoded length by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16859\"\u003enetty/netty#16859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Ensure query id is not predictible by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16870\"\u003enetty/netty#16870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrapping plain trust manager silently disables hostname verification by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16868\"\u003enetty/netty#16868\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16852\"\u003enetty/netty#16852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16892\"\u003enetty/netty#16892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Reject HAProxyMessages with malformated TLV and not leak memory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16866\"\u003enetty/netty#16866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL: Use sane defaults as limits for the client hello length and timeout by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16871\"\u003enetty/netty#16871\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDNS: Only cache CNAME if part of the queried domain by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16873\"\u003enetty/netty#16873\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Enforce max concurrent streams for misbehaving clients by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16876\"\u003enetty/netty#16876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDns: Insufficient Bailiwick Validation for NS Records by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16877\"\u003enetty/netty#16877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: DelegatingDecompressorFrameListener must release memory in all cases by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16880\"\u003enetty/netty#16880\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16886\"\u003enetty/netty#16886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16883\"\u003enetty/netty#16883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16894\"\u003enetty/netty#16894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHAProxy: Fix ByteBuf leak when parsing nested SSL TLVs by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16881\"\u003enetty/netty#16881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll / Kqueue: Correctly handle receive of FD by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16872\"\u003enetty/netty#16872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSCTP: Limit the number of inflight incomplete SCTP messages and the number of fragments by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16875\"\u003enetty/netty#16875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Correctly release incomplete message on removal when using RedisArrayAggregator by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16878\"\u003enetty/netty#16878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRedis: Limit the maximum number of nested arrays by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16882\"\u003enetty/netty#16882\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.1.134.Final...netty-4.1.135.Final\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f05f765d81460799c53123a207f665bf3b465171\"\u003e\u003ccode\u003ef05f765\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.135.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/728c98b8ec6597faaccebdc20bf757d6f4b6310b\"\u003e\u003ccode\u003e728c98b\u003c/code\u003e\u003c/a\u003e Redis: Limit the maximum number of nested arrays (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16882\"\u003e#16882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ced30adba26730f0c004c828f607059a050fefb1\"\u003e\u003ccode\u003eced30ad\u003c/code\u003e\u003c/a\u003e Redis: Correctly release incomplete message on removal when using RedisArrayA...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/cef5395186369f6bf7a8caac34e4de1596ba9f15\"\u003e\u003ccode\u003ecef5395\u003c/code\u003e\u003c/a\u003e SCTP: Limit the number of inflight incomplete SCTP messages and the number of...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/652663cb50c3be6378969be2cf84472743e0109f\"\u003e\u003ccode\u003e652663c\u003c/code\u003e\u003c/a\u003e Epoll / Kqueue: Correctly handle receive of FD (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16872\"\u003e#16872\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bd6214fe1c3bae1d42aad6e372657b5b2c1f5105\"\u003e\u003ccode\u003ebd6214f\u003c/code\u003e\u003c/a\u003e HAProxy: Fix ByteBuf leak when parsing nested SSL TLVs (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16881\"\u003e#16881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/d7f9069d9e966e0f426429b18973417af066e3d4\"\u003e\u003ccode\u003ed7f9069\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Add maxWindowLog parameter to ZstdDecoder to bound memory allo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b831454889b20776be6a73daad329404c4682e94\"\u003e\u003ccode\u003eb831454\u003c/code\u003e\u003c/a\u003e HTTP/2: Treat clients MAX_HEADER_LIST_SIZE as advisory (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16883\"\u003e#16883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/51260aa57e8e9538d31083624226afd793cc675f\"\u003e\u003ccode\u003e51260aa\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16886\"\u003e#16886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e\"\u003e\u003ccode\u003edb6138b\u003c/code\u003e\u003c/a\u003e HTTP2: DelegatingDecompressorFrameListener must release memory in all cases (...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.130.Final...netty-4.1.135.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.130.Final\u0026new-version=4.1.135.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/montge/ddf/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/montge/ddf/pull/232","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/montge%2Fddf/issues/232","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/232/packages"}},{"old_version":"4.2.4.Final","new_version":"4.2.15.Final","update_type":"patch","path":"/forms-flow-bpm","pr_created_at":"2026-06-08T23:16:48.000Z","version_change":"4.2.4.Final → 4.2.15.Final","issue":{"uuid":"4617321829","node_id":"PR_kwDODyN6Yc7kIiXz","number":3320,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.2.4.Final to 4.2.15.Final in /forms-flow-bpm","user":"dependabot[bot]","labels":["dependencies","java","Review effort 1/5"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T23:16:48.000Z","updated_at":"2026-06-08T23:18:07.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.2.4.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"}],"path":"/forms-flow-bpm","ecosystem":"maven"},"body":"### **User description**\nBumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.2.4.Final to 4.2.15.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.4.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.2.4.Final\u0026new-version=4.2.15.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AOT-Technologies/forms-flow-ai/network/alerts).\n\n\u003c/details\u003e\n\n\n___\n\n### **PR Type**\nEnhancement\n\n\n___\n\n### **Description**\n- Upgrade Netty HTTP/2 codec dependency\n\n- Apply update in BPM Maven modules\n\n\n___\n\n### Diagram Walkthrough\n\n\n```mermaid\nflowchart LR\n  A[\"Maven POMs\"] \n  B[\"netty-codec-http2 4.2.4.Final\"]\n  C[\"netty-codec-http2 4.2.15.Final\"]\n  A -- \"updates dependency\" --\u003e C\n  B -- \"replaced by\" --\u003e C\n```\n\n\n\n\u003cdetails\u003e \u003csummary\u003e\u003ch3\u003e File Walkthrough\u003c/h3\u003e\u003c/summary\u003e\n\n\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003e\u003c/th\u003e\u003cth align=\"left\"\u003eRelevant files\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eDependencies\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003ctable\u003e\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003epom.xml\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate Camunda Netty HTTP/2 dependency\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\nforms-flow-bpm/forms-flow-bpm-camunda/pom.xml\n\n\u003cul\u003e\u003cli\u003eUpdates \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e\u003cbr\u003e \u003cli\u003e Changes version to \u003ccode\u003e4.2.15.Final\u003c/code\u003e\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320/files#diff-3d37dc342176b12271ca8dd6e5baadc861fd99d91063994fd4ca0d8fc6f8f98b\"\u003e+1/-1\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003epom.xml\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate parent Netty HTTP/2 dependency\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\nforms-flow-bpm/pom.xml\n\n\u003cul\u003e\u003cli\u003eUpdates profile-managed \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e\u003cbr\u003e \u003cli\u003e Changes version to \u003ccode\u003e4.2.15.Final\u003c/code\u003e\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320/files#diff-f122323a7f27b262aa27d0d86418e0b0341780f2431f6d9dddeebf94bc60b48f\"\u003e+1/-1\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\u003c/table\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\n\n\u003c/details\u003e\n\n___\n\n","html_url":"https://github.com/AOT-Technologies/forms-flow-ai/pull/3320","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AOT-Technologies%2Fforms-flow-ai/issues/3320","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3320/packages"}},{"old_version":"4.2.4.Final","new_version":"4.2.15.Final","update_type":"patch","path":null,"pr_created_at":"2026-06-08T05:49:46.000Z","version_change":"4.2.4.Final → 4.2.15.Final","issue":{"uuid":"4610340303","node_id":"PR_kwDODyN6Yc7jxTxZ","number":3317,"state":"open","title":"Bump the bpm-minor-patch group across 1 directory with 29 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-08T05:49:46.000Z","updated_at":"2026-06-08T05:50:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"bpm-minor-patch","update_count":29,"packages":[{"name":"org.camunda.bpm:camunda-bom","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm:camunda-engine-rest-core","old_version":"7.21.0","new_version":"7.24.0"},{"name":"org.camunda.bpm.extension:camunda-platform-7-keycloak","old_version":"7.21.5","new_version":"7.24.0","repository_url":"https://github.com/camunda/camunda-platform-7-keycloak"},{"name":"org.slf4j:slf4j-api","old_version":"2.0.6","new_version":"2.0.18"},{"name":"org.postgresql:postgresql","old_version":"42.7.2","new_version":"42.7.11","repository_url":"https://github.com/pgjdbc/pgjdbc"},{"name":"javax.xml.bind:jaxb-api","old_version":"2.2.3","new_version":"2.3.1","repository_url":"https://github.com/javaee/jaxb-spec"},{"name":"org.assertj:assertj-core","old_version":"3.21.0","new_version":"3.27.7","repository_url":"https://github.com/assertj/assertj"},{"name":"org.codehaus.groovy:groovy-all","old_version":"3.0.21","new_version":"3.0.25","repository_url":"https://github.com/apache/groovy"},{"name":"org.jsoup:jsoup","old_version":"1.15.3","new_version":"1.22.2","repository_url":"https://github.com/jhy/jsoup"},{"name":"com.fasterxml.jackson.core:jackson-databind","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"com.fasterxml.jackson.dataformat:jackson-dataformat-xml","old_version":"2.15.0","new_version":"2.22.0","repository_url":"https://github.com/FasterXML/jackson-dataformat-xml"},{"name":"com.fasterxml.jackson.core:jackson-annotations","old_version":"2.15.0","new_version":"2.22.0"},{"name":"org.apache.commons:commons-collections4","old_version":"4.4","new_version":"4.5.0"},{"name":"org.projectlombok:lombok","old_version":"1.18.20","new_version":"1.18.46","repository_url":"https://github.com/projectlombok/lombok"},{"name":"commons-io:commons-io","old_version":"2.16.1","new_version":"2.22.0"},{"name":"org.testng:testng","old_version":"7.7.1","new_version":"7.12.0","repository_url":"https://github.com/testng-team/testng"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.4.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.1.125.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.18.0","new_version":"3.20.0"},{"name":"org.bouncycastle:bcprov-jdk18on","old_version":"1.78","new_version":"1.84","repository_url":"https://github.com/bcgit/bc-java"},{"name":"org.bouncycastle:bcpkix-jdk18on","old_version":"1.79","new_version":"1.84","repository_url":"https://github.com/bcgit/bc-java"},{"name":"org.yaml:snakeyaml","old_version":"2.2","new_version":"2.6"},{"name":"org.apache.maven.plugins:maven-surefire-plugin","old_version":"3.0.0-M7","new_version":"3.6.0-M1","repository_url":"https://github.com/apache/maven-surefire"},{"name":"org.jacoco:jacoco-maven-plugin","old_version":"0.8.8","new_version":"0.8.15","repository_url":"https://github.com/jacoco/jacoco"},{"name":"org.codehaus.mojo:exec-maven-plugin","old_version":"3.0.0","new_version":"3.6.3","repository_url":"https://github.com/mojohaus/exec-maven-plugin"}],"path":null,"ecosystem":"maven"},"body":"Bumps the bpm-minor-patch group with 28 updates in the /forms-flow-bpm directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.camunda.bpm:camunda-bom | `7.21.0` | `7.24.0` |\n| org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp | `7.21.0` | `7.24.0` |\n| org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest | `7.21.0` | `7.24.0` |\n| org.camunda.bpm:camunda-engine-rest-core | `7.21.0` | `7.24.0` |\n| [org.camunda.bpm.extension:camunda-platform-7-keycloak](https://github.com/camunda/camunda-platform-7-keycloak) | `7.21.5` | `7.24.0` |\n| org.slf4j:slf4j-api | `2.0.6` | `2.0.18` |\n| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.2` | `42.7.11` |\n| [javax.xml.bind:jaxb-api](https://github.com/javaee/jaxb-spec) | `2.2.3` | `2.3.1` |\n| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.21.0` | `3.27.7` |\n| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `3.0.21` | `3.0.25` |\n| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.15.3` | `1.22.2` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.15.0` | `2.22.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.15.0` | `2.22.0` |\n| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.15.0` | `2.22.0` |\n| com.fasterxml.jackson.core:jackson-annotations | `2.15.0` | `2.22.0` |\n| org.apache.commons:commons-collections4 | `4.4` | `4.5.0` |\n| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.20` | `1.18.46` |\n| commons-io:commons-io | `2.16.1` | `2.22.0` |\n| [org.testng:testng](https://github.com/testng-team/testng) | `7.7.1` | `7.12.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.4.Final` | `4.2.15.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.125.Final` | `4.2.15.Final` |\n| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |\n| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.78` | `1.84` |\n| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.79` | `1.84` |\n| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.2` | `2.6` |\n| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M7` | `3.6.0-M1` |\n| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.8` | `0.8.15` |\n| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.0.0` | `3.6.3` |\n\n\nUpdates `org.camunda.bpm:camunda-bom` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm:camunda-engine-rest-core` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.extension:camunda-platform-7-keycloak` from 7.21.5 to 7.24.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/camunda/camunda-platform-7-keycloak/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-webapp` from 7.21.0 to 7.24.0\n\nUpdates `org.camunda.bpm.springboot:camunda-bpm-spring-boot-starter-rest` from 7.21.0 to 7.24.0\n\nUpdates `org.slf4j:slf4j-api` from 2.0.6 to 2.0.18\n\nUpdates `org.postgresql:postgresql` from 42.7.2 to 42.7.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pgjdbc/pgjdbc/releases\"\u003eorg.postgresql:postgresql's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev42.7.11\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Limit SCRAM PBKDF2 iterations accepted from the server.\npgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins.\nSee the \u003ca href=\"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq\"\u003eSecurity Advisory\u003c/a\u003e for more detail.\nThe following \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-42198\"\u003eCVE-2026-42198\u003c/a\u003e has been issued.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Add sources and javadocs to shaded published lib generation \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4043\"\u003e#4043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate Changelog and website for release of 42.7.11 \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4042\"\u003e#4042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix scram fix location in changelog and update published artifact developer list \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4041\"\u003e#4041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRestrict test with scram_iterations to v16+ and release notes \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4040\"\u003e#4040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(deps): update ubuntu:24.04 docker digest to 84e77de \u003ca href=\"https://github.com/renovate-bot\"\u003e\u003ccode\u003e@​renovate-bot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4017\"\u003e#4017\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add tests for QueryExecutor#getTransactionState \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4006\"\u003e#4006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore(deps): update actions/create-github-app-token action to v2.2.2 \u003ca href=\"https://github.com/renovate-bot\"\u003e\u003ccode\u003e@​renovate-bot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3983\"\u003e#3983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: fix flaky CopyBothResponseTest by using WAL flush LSN \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3979\"\u003e#3979\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: fix flaky replication restart tests by waiting for confirmed_flush_lsn \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3975\"\u003e#3975\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3974\"\u003e#3974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: replace Appveyor with ikalnytskyi/action-setup-postgres \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3966\"\u003e#3966\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: move test table creation from \u003ca href=\"https://github.com/BeforeEach\"\u003e\u003ccode\u003e@​BeforeEach\u003c/code\u003e\u003c/a\u003e to \u003ca href=\"https://github.com/BeforeAll\"\u003e\u003ccode\u003e@​BeforeAll\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3967\"\u003e#3967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn jsonb as PGObject fixes Issue \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3926\"\u003e#3926\u003c/a\u003e \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3956\"\u003e#3956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate docker scripts  \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3958\"\u003e#3958\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimplement require_auth, this is pretty much how libpq does this.  \u003ca href=\"https://github.com/davecramer\"\u003e\u003ccode\u003e@​davecramer\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3895\"\u003e#3895\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: add SCRAM authentication test setup section to TESTING.md \u003ca href=\"https://github.com/emmaeng700\"\u003e\u003ccode\u003e@​emmaeng700\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3945\"\u003e#3945\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd RequireServerVersion annotation for tests \u003ca href=\"https://github.com/sehrope\"\u003e\u003ccode\u003e@​sehrope\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3939\"\u003e#3939\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: ensure extended protocol messages end with Sync message \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3728\"\u003e#3728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: enable cursor-based fetching in extended protocol when transaction started via SQL command \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3996\"\u003e#3996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: retry with SSL on IOException when sslMode=ALLOW \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3973\"\u003e#3973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: catch SecurityException from setContextClassLoader on ForkJoinPool workers \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3962\"\u003e#3962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: use compareTo for LogSequenceNumber comparison \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3961\"\u003e#3961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: release COPY lock on IOException to prevent connection hang (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3957\"\u003e#3957\u003c/a\u003e) \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3960\"\u003e#3960\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003estyle: replace \u003ca href=\"https://github.com/exception\"\u003e\u003ccode\u003e@​exception\u003c/code\u003e\u003c/a\u003e with \u003ca href=\"https://github.com/throws\"\u003e\u003ccode\u003e@​throws\u003c/code\u003e\u003c/a\u003e in getBoolean javadoc \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4035\"\u003e#4035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use \u003ccode\u003e@​vlsi/github-actions-random-matrix\u003c/code\u003e npm package \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4008\"\u003e#4008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4007\"\u003e#4007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: bump errorprone to 2.48.0 \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add \u003ca href=\"https://github.com/DisableLogger\"\u003e\u003ccode\u003e@​DisableLogger\u003c/code\u003e\u003c/a\u003e annotation to suppress expected log warnings in tests \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3971\"\u003e#3971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: suppress deprecations in test code to reduce build verbosity \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3972\"\u003e#3972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3970\"\u003e#3970\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use greedy pairwise coverage for CI matrix generation \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3965\"\u003e#3965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: use full version tags in GitHub Actions comments \u003ca href=\"https://github.com/vlsi\"\u003e\u003ccode\u003e@​vlsi\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3963\"\u003e#3963\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⬆️ Dependencies\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md\"\u003eorg.postgresql:postgresql's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[42.7.11] (2026-04-28)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: Limit SCRAM PBKDF2 iterations accepted from the server.\npgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins.\nSee the \u003ca href=\"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq\"\u003eSecurity Advisory\u003c/a\u003e for more detail.\nThe following \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-42198\"\u003eCVE-2026-42198\u003c/a\u003e has been issued.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: implement require_auth connection property, aligning with libpq behavior [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3895\"\u003e#3895\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3895\"\u003epgjdbc/pgjdbc#3895\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3966\"\u003e#3966\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3966\"\u003epgjdbc/pgjdbc#3966\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echore: upgrade Gradle to v9 [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3978\"\u003e#3978\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3978\"\u003epgjdbc/pgjdbc#3978\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: ensure extended protocol messages end with Sync message [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3728\"\u003e#3728\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3728\"\u003epgjdbc/pgjdbc#3728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3996\"\u003e#3996\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3996\"\u003epgjdbc/pgjdbc#3996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: retry with SSL on IOException when sslMode=ALLOW [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3973\"\u003e#3973\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3973\"\u003epgjdbc/pgjdbc#3973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: make sure the driver honours connectTimeout when retrying the connection [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3968\"\u003epgjdbc/pgjdbc#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3968\"\u003e#3968\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3968\"\u003epgjdbc/pgjdbc#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3962\"\u003e#3962\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3962\"\u003epgjdbc/pgjdbc#3962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3961\"\u003e#3961\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3961\"\u003epgjdbc/pgjdbc#3961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: release COPY lock on IOException to prevent connection hang [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3957\"\u003e#3957\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3957\"\u003epgjdbc/pgjdbc#3957\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: return jsonb as PGObject instead of String [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3956\"\u003e#3956\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3956\"\u003epgjdbc/pgjdbc#3956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: align SSL key file permission check with libpq [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3952\"\u003e#3952\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3952\"\u003epgjdbc/pgjdbc#3952\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3905\"\u003e#3905\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3905\"\u003epgjdbc/pgjdbc#3905\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[42.7.10] (2026-02-11)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: Migrate to Shadow 9 \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3931\"\u003ePR 3931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estyle: fix empty line before javadoc for checkstyle compliance [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3925\"\u003e#3925\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3925\"\u003epgjdbc/pgjdbc#3925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estyle: fix lambda argument indentation for checkstyle compliance [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3922\"\u003e#3922\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3922\"\u003epgjdbc/pgjdbc#3922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: add autosave=always|never|conservative and cleanupSavepoints=true|false to the randomized CI jobs [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3917\"\u003e#3917\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3917\"\u003epgjdbc/pgjdbc#3917\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: non-standard strings failing test for version 19 [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3934\"\u003e#3934\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3934\"\u003epgjdbc/pgjdbc#3934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: small issues in ConnectionFactoryImpl [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3929\"\u003e#3929\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3929\"\u003epgjdbc/pgjdbc#3929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: process pending responses before fastpath to avoid protocol errors \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3913\"\u003ePR # 3913\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc: use.md, fix typos [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3911\"\u003e#3911\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3911\"\u003epgjdbc/pgjdbc#3911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edoc: datasource.md, fix minor formatting issue [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3912\"\u003e#3912\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3912\"\u003epgjdbc/pgjdbc#3912\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edoc: add the new PGP signing key to the official documentation [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3912\"\u003e#3912\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3813\"\u003epgjdbc/pgjdbc#3813\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: make all Calendar instances proleptic Gregorian (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3837\"\u003e#3837\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3887\"\u003e#3887\u003c/a\u003e)\u0026quot; [PR \u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/3932\"\u003e#3932\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/pull/3932\"\u003epgjdbc/pgjdbc#3932\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[42.7.9] (2026-01-14)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/78e261ff2a7f16a37bdceb2204f67e484387da2f\"\u003e\u003ccode\u003e78e261f\u003c/code\u003e\u003c/a\u003e fix: Add sources and javadocs to shaded published lib generation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/1e09fa0496377296c9e2ef3bfd2b409945fba17a\"\u003e\u003ccode\u003e1e09fa0\u003c/code\u003e\u003c/a\u003e update Changelog and website for release of 42.7.11 (\u003ca href=\"https://redirect.github.com/pgjdbc/pgjdbc/issues/4042\"\u003e#4042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/d479fa5b8c8c915a441ce1f2448f69f23dd0b66c\"\u003e\u003ccode\u003ed479fa5\u003c/code\u003e\u003c/a\u003e Fix scram fix location in changelog and update published artifact developer l...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/b04fc46af6c207bc7ce9e788fea8c43d18b73d0f\"\u003e\u003ccode\u003eb04fc46\u003c/code\u003e\u003c/a\u003e docs: Add scram max iters fix to changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/cf548225b4078db954765339720ffdf3bc94e5a6\"\u003e\u003ccode\u003ecf54822\u003c/code\u003e\u003c/a\u003e test: Disable scram test on older version without scram_iterations GUC\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/7dbcc79b2b4adf7b71458c9434d2c43cec7713b9\"\u003e\u003ccode\u003e7dbcc79\u003c/code\u003e\u003c/a\u003e test: Add SCRAM max iteration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/c9d41d1332a7426fcef19ff89f2e6b1116429143\"\u003e\u003ccode\u003ec9d41d1\u003c/code\u003e\u003c/a\u003e fix: Limit SCRAM PBKDF2 iterations accepted from the server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/a340cb2b0ae24c0d98ad9dec569200ebb704d6aa\"\u003e\u003ccode\u003ea340cb2\u003c/code\u003e\u003c/a\u003e style: replace \u003ca href=\"https://github.com/exception\"\u003e\u003ccode\u003e@​exception\u003c/code\u003e\u003c/a\u003e with \u003ca href=\"https://github.com/throws\"\u003e\u003ccode\u003e@​throws\u003c/code\u003e\u003c/a\u003e in getBoolean javadoc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/77837f80c0c20a9f33f9e21b091f4d4552f8e753\"\u003e\u003ccode\u003e77837f8\u003c/code\u003e\u003c/a\u003e fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pgjdbc/pgjdbc/commit/23af03bc839af5217ea141946ae41e648264061c\"\u003e\u003ccode\u003e23af03b\u003c/code\u003e\u003c/a\u003e chore(deps): update actions/checkout action to v6\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pgjdbc/pgjdbc/compare/REL42.7.2...REL42.7.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `javax.xml.bind:jaxb-api` from 2.2.3 to 2.3.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/javaee/jaxb-spec/commits/2.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.codehaus.groovy:groovy-all` from 3.0.21 to 3.0.25\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/apache/groovy/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.jsoup:jsoup` from 1.15.3 to 1.22.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jhy/jsoup/releases\"\u003eorg.jsoup:jsoup's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ejsoup Java HTML Parser release 1.22.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup 1.22.2\u003c/strong\u003e is out now, with fixes and refinements across the library. It makes editing the DOM during traversal more predictable, refreshes the default HTML tag definitions with newer elements and better text boundaries, and improves reliability in parsing and HTTP transport. The release also fixes a number of edge cases in cleaning, stream parsing, XML doctype handling, and Android packaging.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup\u003c/strong\u003e is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jhy/jsoup/blob/HEAD/download\"\u003e\u003cstrong\u003eDownload\u003c/strong\u003e\u003c/a\u003e jsoup now.\u003c/p\u003e\n\u003ch2\u003eImprovements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eExpanded and clarified \u003ccode\u003eNodeTraversor\u003c/code\u003e support for in-place DOM rewrites during \u003ccode\u003eNodeVisitor.head()\u003c/code\u003e. Current-node edits such as \u003ccode\u003eremove\u003c/code\u003e, \u003ccode\u003ereplace\u003c/code\u003e, and \u003ccode\u003eunwrap\u003c/code\u003e now recover more predictably, while traversal stays within the original root subtree. This makes single-pass tree cleanup and normalization visitors easier to write, for example when unwrapping presentational elements or replacing text nodes as you walk the DOM. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation: clarified that a configured \u003ccode\u003eCleaner\u003c/code\u003e may be reused across concurrent threads, and that shared \u003ccode\u003eSafelist\u003c/code\u003e instances should not be mutated while in use. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2473\"\u003e#2473\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the default HTML \u003ccode\u003eTagSet\u003c/code\u003e for current HTML elements: added \u003ccode\u003edialog\u003c/code\u003e, \u003ccode\u003esearch\u003c/code\u003e, \u003ccode\u003epicture\u003c/code\u003e, and \u003ccode\u003eslot\u003c/code\u003e; made \u003ccode\u003eins\u003c/code\u003e, \u003ccode\u003edel\u003c/code\u003e, \u003ccode\u003ebutton\u003c/code\u003e, \u003ccode\u003eaudio\u003c/code\u003e, \u003ccode\u003evideo\u003c/code\u003e, and \u003ccode\u003ecanvas\u003c/code\u003e inline by default (\u003ccode\u003eTag#isInline()\u003c/code\u003e, aligned to phrasing content in the spec); and added readable \u003ccode\u003eElement.text()\u003c/code\u003e boundaries for controls and embedded objects via the new \u003ccode\u003eTag.TextBoundary\u003c/code\u003e option. This improves pretty-printing and keeps normalized text from running adjacent words together. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2493\"\u003e#2493\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAndroid (R8/ProGuard): added a rule to ignore the optional \u003ccode\u003ere2j\u003c/code\u003e dependency when not present. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2459\"\u003e#2459\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed a \u003ccode\u003eNodeTraversor\u003c/code\u003e regression in 1.21.2 where removing or replacing the current node during \u003ccode\u003ehead()\u003c/code\u003e could revisit the replacement node and loop indefinitely. The traversal docs now also clarify which inserted nodes are visited in the current pass. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eParsing during charset sniffing no longer fails if an advisory \u003ccode\u003eavailable()\u003c/code\u003e call throws \u003ccode\u003eIOException\u003c/code\u003e, as seen on JDK 8 \u003ccode\u003eHttpURLConnection\u003c/code\u003e. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2474\"\u003e#2474\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer makes relative URL attributes in the input document absolute when cleaning or validating a \u003ccode\u003eDocument\u003c/code\u003e. URL normalization now applies only to the cleaned output, and \u003ccode\u003eSafelist.isSafeAttribute()\u003c/code\u003e is side effect free. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2475\"\u003e#2475\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer duplicates enforced attributes when the input \u003ccode\u003eDocument\u003c/code\u003e preserves attribute case. A case-variant source attribute is now replaced by the enforced attribute in the cleaned output. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2476\"\u003e#2476\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eIf a per-request SOCKS proxy is configured, jsoup now avoids using the JDK \u003ccode\u003eHttpClient\u003c/code\u003e, because the JDK would silently ignore that proxy and attempt to connect directly. Those requests now fall back to the legacy \u003ccode\u003eHttpURLConnection\u003c/code\u003e transport instead, which does support SOCKS. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2468\"\u003e#2468\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eConnection.Response.streamParser()\u003c/code\u003e and \u003ccode\u003eDataUtil.streamParser(Path, ...)\u003c/code\u003e could fail on small inputs without a declared charset, if the initial 5 KB charset sniff fully consumed the input and closed it before the stream parse began. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2483\"\u003e#2483\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eIn XML mode, doctypes with an internal subset, such as \u003ccode\u003e\u0026lt;!DOCTYPE root [\u0026lt;!ENTITY name \u0026quot;value\u0026quot;\u0026gt;]\u0026gt;\u003c/code\u003e, now round-trip correctly. The subset is preserved as raw text only; entities are not expanded and external DTDs are not loaded. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2486\"\u003e#2486\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBuild Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated the integration test server from Jetty to Netty, which actively maintains support for our minimum JDK target (8). \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2491\"\u003e#2491\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eMy sincere thanks to everyone who contributed to this release!\nIf you have any suggestions for the next release, I would love to hear them; please get in touch via \u003ca href=\"https://github.com/jhy/jsoup/discussions\"\u003ejsoup discussions\u003c/a\u003e, or with me \u003ca href=\"https://jhedley.com/\"\u003edirectly\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eYou can also \u003c!-- raw HTML omitted --\u003efollow me\u003c!-- raw HTML omitted --\u003e (\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e@\u003ca href=\"mailto:jhy@tilde.zone\"\u003ejhy@tilde.zone\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e) on Mastodon / Fediverse to receive occasional notes about jsoup releases.\u003c/p\u003e\n\u003ch2\u003ejsoup Java HTML Parser release 1.22.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup 1.22.1\u003c/strong\u003e is out now, adding support for the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors, a configurable maximum parser depth, and numerous bug fixes and improvements.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ejsoup\u003c/strong\u003e is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://jsoup.org/download\"\u003e\u003cstrong\u003eDownload\u003c/strong\u003e\u003c/a\u003e jsoup now.\u003c/p\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for using the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors (e.g. \u003ccode\u003e[attr~=regex]\u003c/code\u003e, \u003ccode\u003e:matches(regex)\u003c/code\u003e), which ensures linear-time performance for regex evaluation. This allows safer handling of arbitrary user-supplied query regexes. To enable, add the \u003ccode\u003ecom.google.re2j\u003c/code\u003e dependency to your classpath, e.g.:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"xml\"\u003e\u003ccode\u003e  \u0026lt;dependency\u0026gt;\r\n    \u0026lt;groupId\u0026gt;com.google.re2j\u0026lt;/groupId\u0026gt;\r\n    \u0026lt;artifactId\u0026gt;re2j\u0026lt;/artifactId\u0026gt;\r\n    \u0026lt;version\u0026gt;1.8\u0026lt;/version\u0026gt;\r\n  \u0026lt;/dependency\u0026gt;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e(If you already have that dependency in your classpath, but you want to keep using the Java regex engine, you can disable re2j via \u003ccode\u003eSystem.setProperty(\u0026quot;jsoup.useRe2j\u0026quot;, \u0026quot;false\u0026quot;)\u003c/code\u003e.) You can confirm that the re2j engine has been enabled correctly by calling \u003ccode\u003eRegex.usingRe2j()\u003c/code\u003e. \u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2407\"\u003e#2407\u003c/a\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jhy/jsoup/blob/master/CHANGES.md\"\u003eorg.jsoup:jsoup's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.22.2 (2026-Apr-20)\u003c/h2\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eExpanded and clarified \u003ccode\u003eNodeTraversor\u003c/code\u003e support for in-place DOM rewrites during \u003ccode\u003eNodeVisitor.head()\u003c/code\u003e. Current-node edits such as \u003ccode\u003eremove\u003c/code\u003e, \u003ccode\u003ereplace\u003c/code\u003e, and \u003ccode\u003eunwrap\u003c/code\u003e now recover more predictably, while traversal stays within the original root subtree. This makes single-pass tree cleanup and normalization visitors easier to write, for example when unwrapping presentational elements or replacing text nodes as you walk the DOM. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation: clarified that a configured \u003ccode\u003eCleaner\u003c/code\u003e may be reused across concurrent threads, and that shared \u003ccode\u003eSafelist\u003c/code\u003e instances should not be mutated while in use. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2473\"\u003e#2473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated the default HTML \u003ccode\u003eTagSet\u003c/code\u003e for current HTML elements: added \u003ccode\u003edialog\u003c/code\u003e, \u003ccode\u003esearch\u003c/code\u003e, \u003ccode\u003epicture\u003c/code\u003e, and \u003ccode\u003eslot\u003c/code\u003e; made \u003ccode\u003eins\u003c/code\u003e, \u003ccode\u003edel\u003c/code\u003e, \u003ccode\u003ebutton\u003c/code\u003e, \u003ccode\u003eaudio\u003c/code\u003e, \u003ccode\u003evideo\u003c/code\u003e, and \u003ccode\u003ecanvas\u003c/code\u003e inline by default (\u003ccode\u003eTag#isInline()\u003c/code\u003e, aligned to phrasing content in the spec); and added readable \u003ccode\u003eElement.text()\u003c/code\u003e boundaries for controls and embedded objects via the new \u003ccode\u003eTag.TextBoundary\u003c/code\u003e option. This improves pretty-printing and keeps normalized text from running adjacent words together. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2493\"\u003e#2493\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAndroid (R8/ProGuard): added a rule to ignore the optional \u003ccode\u003ere2j\u003c/code\u003e dependency when not present. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2459\"\u003e#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a \u003ccode\u003eNodeTraversor\u003c/code\u003e regression in 1.21.2 where removing or replacing the current node during \u003ccode\u003ehead()\u003c/code\u003e could revisit the replacement node and loop indefinitely. The traversal docs now also clarify which inserted nodes are visited in the current pass. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2472\"\u003e#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eParsing during charset sniffing no longer fails if an advisory \u003ccode\u003eavailable()\u003c/code\u003e call throws \u003ccode\u003eIOException\u003c/code\u003e, as seen on JDK 8 \u003ccode\u003eHttpURLConnection\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2474\"\u003e#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer makes relative URL attributes in the input document absolute when cleaning or validating a \u003ccode\u003eDocument\u003c/code\u003e. URL normalization now applies only to the cleaned output, and \u003ccode\u003eSafelist.isSafeAttribute()\u003c/code\u003e is side effect free. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eCleaner\u003c/code\u003e no longer duplicates enforced attributes when the input \u003ccode\u003eDocument\u003c/code\u003e preserves attribute case. A case-variant source attribute is now replaced by the enforced attribute in the cleaned output. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIf a per-request SOCKS proxy is configured, jsoup now avoids using the JDK \u003ccode\u003eHttpClient\u003c/code\u003e, because the JDK would silently ignore that proxy and attempt to connect directly. Those requests now fall back to the legacy \u003ccode\u003eHttpURLConnection\u003c/code\u003e transport instead, which does support SOCKS. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eConnection.Response.streamParser()\u003c/code\u003e and \u003ccode\u003eDataUtil.streamParser(Path, ...)\u003c/code\u003e could fail on small inputs without a declared charset, if the initial 5 KB charset sniff fully consumed the input and closed it before the stream parse began. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2483\"\u003e#2483\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIn XML mode, doctypes with an internal subset, such as \u003ccode\u003e\u0026lt;!DOCTYPE root [\u0026lt;!ENTITY name \u0026quot;value\u0026quot;\u0026gt;]\u0026gt;\u003c/code\u003e, now round-trip correctly. The subset is preserved as raw text only; entities are not expanded and external DTDs are not loaded. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2486\"\u003e#2486\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuild Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated the integration test server from Jetty to Netty, which actively maintains support for our minimum JDK target (8). \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2491\"\u003e#2491\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.22.1 (2026-Jan-01)\u003c/h2\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for using the \u003ccode\u003ere2j\u003c/code\u003e regular expression engine for regex-based CSS selectors (e.g. \u003ccode\u003e[attr~=regex]\u003c/code\u003e, \u003ccode\u003e:matches(regex)\u003c/code\u003e), which ensures linear-time performance for regex evaluation. This allows safer handling of arbitrary user-supplied query regexes. To enable, add the \u003ccode\u003ecom.google.re2j\u003c/code\u003e dependency to your classpath, e.g.:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"xml\"\u003e\u003ccode\u003e  \u0026lt;dependency\u0026gt;\n    \u0026lt;groupId\u0026gt;com.google.re2j\u0026lt;/groupId\u0026gt;\n    \u0026lt;artifactId\u0026gt;re2j\u0026lt;/artifactId\u0026gt;\n    \u0026lt;version\u0026gt;1.8\u0026lt;/version\u0026gt;\n  \u0026lt;/dependency\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e(If you already have that dependency in your classpath, but you want to keep using the Java regex engine, you can disable re2j via \u003ccode\u003eSystem.setProperty(\u0026quot;jsoup.useRe2j\u0026quot;, \u0026quot;false\u0026quot;)\u003c/code\u003e.) You can confirm that the re2j engine has been enabled correctly by calling \u003ccode\u003eorg.jsoup.helper.Regex.usingRe2j()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded an instance method \u003ccode\u003eParser#unescape(String, boolean)\u003c/code\u003e that unescapes HTML entities using the parser's configuration (e.g. to support error tracking), complementing the existing static utility \u003ccode\u003eParser.unescapeEntities(String, boolean)\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2396\"\u003e#2396\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a configurable maximum parser depth (to limit the number of open elements on stack) to both HTML and XML parsers. The HTML parser now defaults to a depth of 512 to match browser behavior, and protect against unbounded stack growth, while the XML parser keeps unlimited depth by default, but can opt into a limit via \u003ccode\u003eorg.jsoup.parser.Parser#setMaxDepth\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2421\"\u003e#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild: added CI coverage for JDK 25 \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2403\"\u003e#2403\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild: added a CI fuzzer for contextual fragment parsing (in addition to existing full body HTML and XML fuzzers). [oss-fuzz \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/14041\"\u003e#14041\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/google/oss-fuzz/pull/14041\"\u003egoogle/oss-fuzz#14041\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSet a removal schedule of jsoup 1.24.1 for previously deprecated APIs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreviously cached child \u003ccode\u003eElements\u003c/code\u003e of an \u003ccode\u003eElement\u003c/code\u003e were not correctly invalidated in \u003ccode\u003eNode#replaceWith(Node)\u003c/code\u003e, which could lead to incorrect results when subsequently calling \u003ccode\u003eElement#children()\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2391\"\u003e#2391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAttribute selector values are now compared literally without trimming. Previously, jsoup trimmed whitespace from selector values and from element attribute values, which could cause mismatches with browser behavior (e.g. \u003ccode\u003e[attr=\u0026quot; foo \u0026quot;]\u003c/code\u003e). Now matches align with the CSS specification and browser engines. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2380\"\u003e#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWhen using the JDK HttpClient, any system default proxy (\u003ccode\u003eProxySelector.getDefault()\u003c/code\u003e) was ignored. Now, the system proxy is used if a per-request proxy is not set. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2388\"\u003e#2388\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2390\"\u003e#2390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eA \u003ccode\u003eValidationException\u003c/code\u003e could be thrown in the adoption agency algorithm with particularly broken input. Now logged as a parse error. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNull characters in the HTML body were not consistently removed; and in foreign content were not correctly replaced. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2395\"\u003e#2395\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAn \u003ccode\u003eIndexOutOfBoundsException\u003c/code\u003e could be thrown when parsing a body fragment with crafted input. Now logged as a parse error. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2397\"\u003e#2397\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2406\"\u003e#2406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWhen using StructuralEvaluators (e.g., a \u003ccode\u003eparent child\u003c/code\u003e selector) across many retained threads, their memoized results could also be retained, increasing memory use. These results are now cleared immediately after use, reducing overall memory consumption. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2411\"\u003e#2411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCloning a \u003ccode\u003eParser\u003c/code\u003e now preserves any custom \u003ccode\u003eTagSet\u003c/code\u003e applied to the parser. \u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2422\"\u003e#2422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/jhy/jsoup/pull/2423\"\u003e#2423\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/ac28afe6e5bf96d39fd17c3e0a797a7585e1958c\"\u003e\u003ccode\u003eac28afe\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jsoup-1.22.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/52f2cd3ea2004b9be0e0a09021bac7ce2daf8ae4\"\u003e\u003ccode\u003e52f2cd3\u003c/code\u003e\u003c/a\u003e Improve entity example in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/cf6ffe08616f8633ee6113b91f9d6a07acef38c6\"\u003e\u003ccode\u003ecf6ffe0\u003c/code\u003e\u003c/a\u003e Add Tag#TextBoundary option; bring TagSet to spec (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2493\"\u003e#2493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/2be739c1c659a1592c402a5441f8be6f7881280c\"\u003e\u003ccode\u003e2be739c\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4 to 4.35.1 (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2492\"\u003e#2492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/45de7cbc215eb3f1189d23eaf57acf6f7b1a5edf\"\u003e\u003ccode\u003e45de7cb\u003c/code\u003e\u003c/a\u003e Migrate integration test server from Jetty to Netty (\u003ca href=\"https://redirect.github.com/jhy/jsoup/issues/2491\"\u003e#2491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/1df14edbfc327a1ef309142ef5e8ed68324de320\"\u003e\u003ccode\u003e1df14ed\u003c/code\u003e\u003c/a\u003e Preserve XML doctype internal subset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/06fa52d15a22003b67dfdb3f8220cc025d493a43\"\u003e\u003ccode\u003e06fa52d\u003c/code\u003e\u003c/a\u003e Adding Contribution Guide\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/d4a8941820c037327538c30a8723ec715b67b6f6\"\u003e\u003ccode\u003ed4a8941\u003c/code\u003e\u003c/a\u003e Simplify the test; doesn't need the buffer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/823709f519995492d9a092fe315af389616e58f8\"\u003e\u003ccode\u003e823709f\u003c/code\u003e\u003c/a\u003e Don't reuse a fully read sniffed doc for StreamParser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jhy/jsoup/commit/e1b0df5fec53710214cd700de38d82e1ca92bd79\"\u003e\u003ccode\u003ee1b0df5\u003c/code\u003e\u003c/a\u003e NodeFilter javadoc tweak\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jhy/jsoup/compare/jsoup-1.15.3...jsoup-1.22.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/d763562443cc9d6e224a6265ca3710195c813cf5\"\u003e\u003ccode\u003ed763562\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/e5c69fe5f7be957490d52dae70787e7a8138ddda\"\u003e\u003ccode\u003ee5c69fe\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0ba6a369eaa19a71b2b63fe40b1e9d317c0eb522\"\u003e\u003ccode\u003e0ba6a36\u003c/code\u003e\u003c/a\u003e Bump version after release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b106011025f6447695e21ddbb9fd3952d284d10c\"\u003e\u003ccode\u003eb106011\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/18a7fe416a0bf666f6c2ddc6da883bc96382dd2d\"\u003e\u003ccode\u003e18a7fe4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/503a14ffa4a74ad56a02fd25f0cd997df163c647\"\u003e\u003ccode\u003e503a14f\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/ab95bc0056119f08ef721849be5e5f2c256b82cd\"\u003e\u003ccode\u003eab95bc0\u003c/code\u003e\u003c/a\u003e ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0a4b8dedee08e159fddca5eb8e812c1ad881017a\"\u003e\u003ccode\u003e0a4b8de\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/719a42f3676ab3c10e3cd057966807b2206151e7\"\u003e\u003ccode\u003e719a42f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/92488484b64bc348c43e5a7ff910d93c2f9e9b9c\"\u003e\u003ccode\u003e9248848\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.15.0...jackson-core-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c702ae0cd9870cb7415fb09d9b22412db78b972\"\u003e\u003ccode\u003e4c702ae\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e6a9a509481c03c4cdd2e4bc7745a076bbf06942\"\u003e\u003ccode\u003ee6a9a50\u003c/code\u003e\u003c/a\u003e Prep for 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/80735f20d588dc859ff2bf9427f0d6dfb5c71a7e\"\u003e\u003ccode\u003e80735f2\u003c/code\u003e\u003c/a\u003e Merge branch '2.21' into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5e5f3faa1232ad49c0a0ff0a3e7bd96cc659f850\"\u003e\u003ccode\u003e5e5f3fa\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c482a6404e6c076130ea2fa3d06e0809f20971d\"\u003e\u003ccode\u003e4c482a6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e29dfd957b47ec3982d20c4a97aa608516ce5ee9\"\u003e\u003ccode\u003ee29dfd9\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5d81f46097903e1e88b90ef06515d559caf1ef68\"\u003e\u003ccode\u003e5d81f46\u003c/code\u003e\u003c/a\u003e Prep for 2.21.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5db34fe1003e7f6bed78d5e7dc43c75842895f4c\"\u003e\u003ccode\u003e5db34fe\u003c/code\u003e\u003c/a\u003e Merge branch '2.20' into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/a12b8dfd547b08f808b4189746e00bb203ab08c1\"\u003e\u003ccode\u003ea12b8df\u003c/code\u003e\u003c/a\u003e Merge branch '2.19' into 2.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/7ae7fdbb007ac18c44bddb7515becc1789830db5\"\u003e\u003ccode\u003e7ae7fdb\u003c/code\u003e\u003c/a\u003e Merge branch '2.18' into 2.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.15.0...jackson-dataformat-xml-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-annotations` from 2.15.0 to 2.22.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/d763562443cc9d6e224a6265ca3710195c813cf5\"\u003e\u003ccode\u003ed763562\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/e5c69fe5f7be957490d52dae70787e7a8138ddda\"\u003e\u003ccode\u003ee5c69fe\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0ba6a369eaa19a71b2b63fe40b1e9d317c0eb522\"\u003e\u003ccode\u003e0ba6a36\u003c/code\u003e\u003c/a\u003e Bump version after release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b106011025f6447695e21ddbb9fd3952d284d10c\"\u003e\u003ccode\u003eb106011\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/18a7fe416a0bf666f6c2ddc6da883bc96382dd2d\"\u003e\u003ccode\u003e18a7fe4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/503a14ffa4a74ad56a02fd25f0cd997df163c647\"\u003e\u003ccode\u003e503a14f\u003c/code\u003e\u003c/a\u003e Re-do 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/ab95bc0056119f08ef721849be5e5f2c256b82cd\"\u003e\u003ccode\u003eab95bc0\u003c/code\u003e\u003c/a\u003e ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/0a4b8dedee08e159fddca5eb8e812c1ad881017a\"\u003e\u003ccode\u003e0a4b8de\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/719a42f3676ab3c10e3cd057966807b2206151e7\"\u003e\u003ccode\u003e719a42f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/92488484b64bc348c43e5a7ff910d93c2f9e9b9c\"\u003e\u003ccode\u003e9248848\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.22.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.15.0...jackson-core-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.15.0 to 2.22.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c702ae0cd9870cb7415fb09d9b22412db78b972\"\u003e\u003ccode\u003e4c702ae\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e6a9a509481c03c4cdd2e4bc7745a076bbf06942\"\u003e\u003ccode\u003ee6a9a50\u003c/code\u003e\u003c/a\u003e Prep for 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/80735f20d588dc859ff2bf9427f0d6dfb5c71a7e\"\u003e\u003ccode\u003e80735f2\u003c/code\u003e\u003c/a\u003e Merge branch '2.21' into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5e5f3faa1232ad49c0a0ff0a3e7bd96cc659f850\"\u003e\u003ccode\u003e5e5f3fa\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/4c482a6404e6c076130ea2fa3d06e0809f20971d\"\u003e\u003ccode\u003e4c482a6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/e29dfd957b47ec3982d20c4a97aa608516ce5ee9\"\u003e\u003ccode\u003ee29dfd9\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5d81f46097903e1e88b90ef06515d559caf1ef68\"\u003e\u003ccode\u003e5d81f46\u003c/code\u003e\u003c/a\u003e Prep for 2.21.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/5db34fe1003e7f6bed78d5e7dc43c75842895f4c\"\u003e\u003ccode\u003e5db34fe\u003c/code\u003e\u003c/a\u003e Merge branch '2.20' into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/a12b8dfd547b08f808b4189746e00bb203ab08c1\"\u003e\u003ccode\u003ea12b8df\u003c/code\u003e\u003c/a\u003e Merge branch '2.19' into 2.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/commit/7ae7fdbb007ac18c44bddb7515becc1789830db5\"\u003e\u003ccode\u003e7ae7fdb\u003c/code\u003e\u003c/a\u003e Merge branch '2.18' into 2.19\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.15.0...jackson-dataformat-xml-2.22.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-annotations` from 2.15.0 to 2.22.0\n\nUpdates `org.apache.commons:commons-collections4` from 4.4 to 4.5.0\n\nUpdates `org.projectlombok:lombok` from 1.18.20 to 1.18.46\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown\"\u003eorg.projectlombok:lombok's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003ev1.18.46 (April 22nd, 2026)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK26 support added \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4019\"\u003e#4019\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003ePLATFORM: Spring Tools Suite 5 supported \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3985\"\u003e#3985\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: \u003ccode\u003e@Jacksonized\u003c/code\u003e no longer stops generating \u003ccode\u003e@JsonProperty\u003c/code\u003e once an explicit \u003ccode\u003e@JsonIgnore\u003c/code\u003e annotations is encountered \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4022\"\u003e#4022\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: In eclipse, mixing \u003ccode\u003e@Jacksonized\u003c/code\u003e and \u003ccode\u003efluent = true\u003c/code\u003e no longer causes the error \u003ccode\u003ecom.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3934\"\u003e#3934\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Some finishing touches for v1.18.44's support of Jackson3 \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/4004\"\u003e#4004\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.44 (March 11th, 2026)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Jacksonized\u003c/code\u003e now supports both Jackson2 and Jackson3; you'll get a warning until you configure which one (or even both!) you want lombok to generate. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3950\"\u003e#3950\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: On JDK25, \u003ccode\u003eval\u003c/code\u003e and \u003ccode\u003e@ExtensionMethod\u003c/code\u003e could sometimes cause erroneous errors (in that you see errors but compilation succeeds anyway) using javac. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3947\"\u003e#3947\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: \u003ccode\u003e@Jacksonized\u003c/code\u003e + fields marked \u003ccode\u003etransient\u003c/code\u003e would result in those transient fields being serialised which is surprising (and thus undesired) behaviour. \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3936\"\u003e#3936\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.42 (September 18th, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFEATURE: All the various \u003ccode\u003e@Log\u003c/code\u003e annotations now allow you to change their access level (they still default to \u003ccode\u003eprivate\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2280\"\u003e#2280\u003c/a\u003e. Thanks to new contributor Liam Pace!\u003c/li\u003e\n\u003cli\u003eBUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3940\"\u003e#3940\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.40 (September 4th, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK25 support added \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3859\"\u003e#3859\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused \u003ccode\u003ejava.lang.IllegalArgumentException: Document does not match the AST\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3886\"\u003e#3886\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3886\"\u003eprojectlombok/lombok#3886\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePERFORMANCE: \u003ccode\u003e@ExtensionMethod\u003c/code\u003e is now significantly faster [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3866\"\u003e#3866\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3866\"\u003eprojectlombok/lombok#3866\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: the command line \u003ccode\u003econfig\u003c/code\u003e tool would emit incorrect output for nullity annotations. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3931\"\u003e#3931\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3931\"\u003eprojectlombok/lombok#3931\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Jacksonized @Accessors(fluent=true)\u003c/code\u003e automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3265\"\u003e#3265\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3265\"\u003eprojectlombok/lombok#3265\u003c/a\u003e), [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3270\"\u003e#3270\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3270\"\u003eprojectlombok/lombok#3270\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., \u003ccode\u003e@JsonProperty\u003c/code\u003e) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the \u003ca href=\"https://projectlombok.org/features/configuration\"\u003econfig key\u003c/a\u003e \u003ccode\u003elombok.copyJacksonAnnotationsToAccessors = true\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.38 (March 31st, 2025)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK24 support added.\u003c/li\u003e\n\u003cli\u003eFEATURE: Lombok's nullity annotation now supports \u003ca href=\"https://jspecify.dev\"\u003eJSpecify\u003c/a\u003e out of the box, using \u003ca href=\"https://projectlombok.org/features/configuration\"\u003econfig key\u003c/a\u003e \u003ccode\u003ejspecify\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3823\"\u003e#3823\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3823\"\u003eprojectlombok/lombok#3823\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3783\"\u003e#3783\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3783\"\u003eprojectlombok/lombok#3783\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.36 (November 15th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: JDK23 support added.\u003c/li\u003e\n\u003cli\u003eBUGFIX: Eclipse projects using the \u003ccode\u003ecom.pro-crafting.tools:jasperreports-maven-plugin\u003c/code\u003e will now compile.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.34 (June 28th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: Added support for Eclipse 2024-06; you'd get some \u003ccode\u003eNoSuchMethodError\u003c/code\u003e traces in your logs if using \u003ccode\u003e@Builder\u003c/code\u003e or \u003ccode\u003e@Singular\u003c/code\u003e prior to this fix. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3638\"\u003e#3638\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3638\"\u003eprojectlombok/lombok#3638\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: Lombok now adds \u003ccode\u003e@lombok.Generated\u003c/code\u003e by default to methods and types it generates. This may result in accidentally increasing your test coverage percentage. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3667\"\u003e#3667\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3667\"\u003eprojectlombok/lombok#3667\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eIMPROBABLE BREAKING CHANGE: When \u003ccode\u003elombok.config\u003c/code\u003e contains \u003ccode\u003elombok.onX.flagUsage = WARNING\u003c/code\u003e, from now on warnings will actually be generated if onX is used.[Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2848\"\u003e#2848\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2848\"\u003eprojectlombok/lombok#2848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBUGFIX: When \u003ccode\u003e@SuperBuilder\u003c/code\u003e was used on a type with an generic array type, it would error \u003ccode\u003ewrong number of type arguments\u003c/code\u003e.  [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3694\"\u003e#3694\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3694\"\u003eprojectlombok/lombok#3694\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: Lombok generates javadoc for you for most of the methods it adds; with this release, javadoc is also added to generated constructors. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/933\"\u003e#933\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/933\"\u003eprojectlombok/lombok#933\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ev1.18.32 (March 20th, 2024)\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePLATFORM: Initial JDK22 support added.\u003c/li\u003e\n\u003cli\u003ePLAFTORM  Added support for Eclipse 2024-03. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3620\"\u003e#3620\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3620\"\u003eprojectlombok/lombok#3620\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as \u003ccode\u003ejava.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3564\"\u003e#3564\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3564\"\u003eprojectlombok/lombok#3564\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFEATURE: \u003ccode\u003e@Locked\u003c/code\u003e has been introduced. Like \u003ccode\u003e@Synchronized\u003c/code\u003e but with \u003ccode\u003ejava.util.concurrent.locks\u003c/code\u003e locks instead of the \u003ccode\u003esynchronized\u003c/code\u003e primitive. Thanks, Pim van der Loos for the PR! [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3506\"\u003e#3506\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3506\"\u003eprojectlombok/lombok#3506\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eNECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with \u003ccode\u003e@Getter\u003c/code\u003e instead of the actual field's name. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/562\"\u003e#562\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/562\"\u003eprojectlombok/lombok#562\u003c/a\u003e). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.\u003c/li\u003e\n\u003cli\u003eBUGFIX: When \u003ccode\u003e@SuperBuilder\u003c/code\u003e was used on a type with an annotated generic type, it would error \u003ccode\u003ewrong number of type arguments\u003c/code\u003e.  [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3592\"\u003e#3592\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3592\"\u003eprojectlombok/lombok#3592\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: It was possible to create an infinite build loop using \u003ccode\u003e@ExtensionMethod\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3225\"\u003e#3225\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/3225\"\u003eprojectlombok/lombok#3225\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBUGFIX: Using \u003ccode\u003e@Getter(lazy=true)\u003c/code\u003e would fail if the expression contained a variable called \u003ccode\u003evalue\u003c/code\u003e. [Issue \u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2917\"\u003e#2917\u003c/a\u003e](\u003ca href=\"https://redirect.github.com/projectlombok/lombok/issues/2917\"\u003eprojectlombok/lombok#2917\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/projectlombok/lombok/commit/936ca59baf844fd6c0ad641974295498785d8091\"\u003e\u003ccode\u003e936ca59\u003c/code\u003e\u003c/a\u003e [build] lombok's launcher is still intended to be 1.4 compatible, or at least...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/projectlombok/lombok/commit/fcdab3f29e1b48...\n\n_Description has been truncated_","html_url":"https://github.com/AOT-Technologies/forms-flow-ai/pull/3317","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AOT-Technologies%2Fforms-flow-ai/issues/3317","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3317/packages"}},{"old_version":"4.2.14.Final","new_version":"4.2.15.Final","update_type":"patch","path":null,"pr_created_at":"2026-06-02T21:50:29.000Z","version_change":"4.2.14.Final → 4.2.15.Final","issue":{"uuid":"4575210161","node_id":"PR_kwDOI6x-Os7h-zrQ","number":450,"state":"closed","title":"Bump the all-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-04T02:09:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-02T21:50:29.000Z","updated_at":"2026-06-04T02:09:36.000Z","time_to_close":101945,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"all-dependencies","update_count":8,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.2.14.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-http3","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-dns","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-codec-compression","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-transport-native-epoll","old_version":"4.2.14.Final","new_version":"4.2.15.Final"},{"name":"io.netty:netty-resolver-dns","old_version":"4.2.14.Final","new_version":"4.2.15.Final"}],"path":null,"ecosystem":"maven"},"body":"Bumps the all-dependencies group with 2 updates in the / directory: [io.netty:netty-codec-http](https://github.com/netty/netty) and [no.nav.klage:klage-kodeverk](https://github.com/navikt/klage-kodeverk).\n\nUpdates `io.netty:netty-codec-http` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http3` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-dns` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-dns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-compression` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-compression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-transport-native-epoll's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-resolver-dns` from 4.2.14.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-resolver-dns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-XXXXX\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-XXXXX\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-XXXXX\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-XXXXX\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-XXXXX\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `no.nav.klage:klage-kodeverk...\n\n_Description has been truncated_","html_url":"https://github.com/navikt/kabin-api/pull/450","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/navikt%2Fkabin-api/issues/450","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/450/packages"}},{"old_version":"4.1.132.Final","new_version":"4.2.14.Final","update_type":"minor","path":null,"pr_created_at":"2026-06-02T03:47:21.000Z","version_change":"4.1.132.Final → 4.2.14.Final","issue":{"uuid":"4568238191","node_id":"PR_kwDORtpFYc7hn6yC","number":17,"state":"open","title":"build(deps): Bump the maven-dependencies group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-02T03:47:21.000Z","updated_at":"2026-06-02T03:47:22.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"maven-dependencies","update_count":6,"packages":[{"name":"com.nimbusds:nimbus-jose-jwt","old_version":"10.8","new_version":"10.9.1"},{"name":"commons-io:commons-io","old_version":"2.16.1","new_version":"2.22.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.maven.plugins:maven-surefire-plugin","old_version":"3.5.5","new_version":"3.5.6","repository_url":"https://github.com/apache/maven-surefire"},{"name":"org.apache.maven.plugins:maven-failsafe-plugin","old_version":"3.5.5","new_version":"3.5.6","repository_url":"https://github.com/apache/maven-surefire"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven-dependencies group with 6 updates in the /booking-api directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.8` | `10.9.1` |\n| commons-io:commons-io | `2.16.1` | `2.22.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.14.Final` |\n| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |\n| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |\n\n\nUpdates `com.nimbusds:nimbus-jose-jwt` from 10.8 to 10.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:nimbus-jose-jwt's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-03-01)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst version based on the OpenInfoCard JWT, JWS and JWE code base.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.1 (2012-03-06)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces type-safe enumeration of the JSON Web Algorithms (JWA).\u003c/li\u003e\n\u003cli\u003eRefactors the JWT class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.2 (2012-03-08)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMoves JWS and JWE code into separate classes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.3 (2012-03-09)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSwitches to Apache Commons Codec for Base64URL encoding and decoding\u003c/li\u003e\n\u003cli\u003eConsolidates the crypto utilities within the package.\u003c/li\u003e\n\u003cli\u003eIntroduces a JWT content serialiser class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.4 (2012-03-09)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRefactoring of JWT class and JUnit tests.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.5 (2012-03-18)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSwitches to JSON Smart for JSON serialisation and parsing.\u003c/li\u003e\n\u003cli\u003eIntroduces claims set class with JSON objects, string, Base64URL and\nbyte array views.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.6 (2012-03-20)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCreates class for representing, serialising and parsing JSON Web Keys\n(JWK).\u003c/li\u003e\n\u003cli\u003eIntroduces separate class for representing JWT headers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.7 (2012-04-01)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces separate classes for plain, JWS and JWE headers.\u003c/li\u003e\n\u003cli\u003eIntroduces separate classes for plain, signed and encrypted JWTs.\u003c/li\u003e\n\u003cli\u003eRemoves the JWTContent class.\u003c/li\u003e\n\u003cli\u003eRemoves password-based (PE820) encryption support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.8 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdds support for the ZIP JWE header parameter.\u003c/li\u003e\n\u003cli\u003eRemoves unsupported algorithms from the JWA enumeration.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.9 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenames JWEHeader.{get|set}EncryptionAlgorithm() to\nJWEHeader.{get|set}EncryptionMethod().\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.9.1 (2012-04-03)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrades JSON Smart JAR to 1.1.1.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.10 (2012-04-14)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces serialize() method to base abstract JWT class.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eversion 1.11 (2012-05-13)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJWT.serialize() throws checked JWTException instead of\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/e48aa077d55aee0e5160494911abf9df0c03f9b6\"\u003e\u003ccode\u003ee48aa07\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/4b02531a241cd5fcfeaa90fe7c6c263dd49061b9\"\u003e\u003ccode\u003e4b02531\u003c/code\u003e\u003c/a\u003e Adds X509CertUtils.computeSHA1Thumbprint(X509Certificate) method\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6b52455a9d156da7f9083212dfd6df70e5e129fe\"\u003e\u003ccode\u003e6b52455\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release 10.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/94f438725ca20584102d04d3bb908c38da19cbfa\"\u003e\u003ccode\u003e94f4387\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/53704466a79d5446119498d2c39d0f235487257f\"\u003e\u003ccode\u003e5370446\u003c/code\u003e\u003c/a\u003e Back-ports fix for iss \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/619\"\u003e#619\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/62d00fcf1edad741989eb22da4b586b250b655ea\"\u003e\u003ccode\u003e62d00fc\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release 10.9.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9.1..10.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commons-io:commons-io` from 2.16.1 to 2.22.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.14.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin HTTP/RTSP version + method normalization to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16765\"\u003enetty/netty#16765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFill MsgHdrMemoryArray#hdrs with null entry on release by \u003ca href=\"https://github.com/tsegismont\"\u003e\u003ccode\u003e@​tsegismont\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16764\"\u003enetty/netty#16764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevapi: Use default \u0026quot;oldVersion\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16774\"\u003enetty/netty#16774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptive: Fix concurrency issue in adaptive allocator by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16767\"\u003enetty/netty#16767\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Make bulk byte moving in ByteBuf faster by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16781\"\u003enetty/netty#16781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16768\"\u003enetty/netty#16768\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dead native declarations by \u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIsolate tests that modify available Security providers by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16793\"\u003enetty/netty#16793\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove test annotations from a method that isn't a test by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16792\"\u003enetty/netty#16792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by \u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: extend user data from short to long by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16682\"\u003enetty/netty#16682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert CompositeByteBuf component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16811\"\u003enetty/netty#16811\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Use 100 as default max concurrent streams setting by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16804\"\u003enetty/netty#16804\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ResumptionController wrapping by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16815\"\u003enetty/netty#16815\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve all localhost addresses without querying DNS servers by \u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16803\"\u003enetty/netty#16803\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16788\"\u003enetty/netty#16788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRoute synchronous onLookupComplete exceptions via fireExceptionCaught by \u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Stop generic FileRegion drain loop when transferred() reaches count() by \u003ca href=\"https://github.com/LuciferYang\"\u003e\u003ccode\u003e@​LuciferYang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16826\"\u003enetty/netty#16826\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MQTT decoder size check after variable header replay by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16787\"\u003enetty/netty#16787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2\"\u003e\u003ccode\u003e0a60b75\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.14.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269\"\u003e\u003ccode\u003e72df658\u003c/code\u003e\u003c/a\u003e Fix MQTT decoder size check after variable header replay (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16787\"\u003e#16787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9\"\u003e\u003ccode\u003e7125dba\u003c/code\u003e\u003c/a\u003e MQTT: Allow MQTT 5 CONNECT with password only (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16833\"\u003e#16833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d\"\u003e\u003ccode\u003e9e19320\u003c/code\u003e\u003c/a\u003e IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162\"\u003e\u003ccode\u003e4ce9f17\u003c/code\u003e\u003c/a\u003e Route synchronous onLookupComplete exceptions via fireExceptionCaught (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16794\"\u003e#16794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759\"\u003e\u003ccode\u003ef7b1b7d\u003c/code\u003e\u003c/a\u003e Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc\"\u003e\u003ccode\u003e0ccb265\u003c/code\u003e\u003c/a\u003e IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794\"\u003e\u003ccode\u003ea6aeb6d\u003c/code\u003e\u003c/a\u003e Resolve all localhost addresses without querying DNS servers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16749\"\u003e#16749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b\"\u003e\u003ccode\u003ec328ba2\u003c/code\u003e\u003c/a\u003e Fix ResumptionController wrapping (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16815\"\u003e#16815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880\"\u003e\u003ccode\u003ebc5862b\u003c/code\u003e\u003c/a\u003e HTTP2: Use 100 as default max concurrent streams setting (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16804\"\u003e#16804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.14.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.14.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin HTTP/RTSP version + method normalization to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16765\"\u003enetty/netty#16765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFill MsgHdrMemoryArray#hdrs with null entry on release by \u003ca href=\"https://github.com/tsegismont\"\u003e\u003ccode\u003e@​tsegismont\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16764\"\u003enetty/netty#16764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevapi: Use default \u0026quot;oldVersion\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16774\"\u003enetty/netty#16774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptive: Fix concurrency issue in adaptive allocator by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16767\"\u003enetty/netty#16767\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Make bulk byte moving in ByteBuf faster by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16781\"\u003enetty/netty#16781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16768\"\u003enetty/netty#16768\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dead native declarations by \u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIsolate tests that modify available Security providers by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16793\"\u003enetty/netty#16793\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove test annotations from a method that isn't a test by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16792\"\u003enetty/netty#16792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by \u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: extend user data from short to long by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16682\"\u003enetty/netty#16682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert CompositeByteBuf component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16811\"\u003enetty/netty#16811\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Use 100 as default max concurrent streams setting by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16804\"\u003enetty/netty#16804\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ResumptionController wrapping by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16815\"\u003enetty/netty#16815\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve all localhost addresses without querying DNS servers by \u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16803\"\u003enetty/netty#16803\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16788\"\u003enetty/netty#16788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRoute synchronous onLookupComplete exceptions via fireExceptionCaught by \u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Stop generic FileRegion drain loop when transferred() reaches count() by \u003ca href=\"https://github.com/LuciferYang\"\u003e\u003ccode\u003e@​LuciferYang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16826\"\u003enetty/netty#16826\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Allow MQTT 5 CONNECT with password only by \u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MQTT decoder size check after variable header replay by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16787\"\u003enetty/netty#16787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2\"\u003e\u003ccode\u003e0a60b75\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.14.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269\"\u003e\u003ccode\u003e72df658\u003c/code\u003e\u003c/a\u003e Fix MQTT decoder size check after variable header replay (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16787\"\u003e#16787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9\"\u003e\u003ccode\u003e7125dba\u003c/code\u003e\u003c/a\u003e MQTT: Allow MQTT 5 CONNECT with password only (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16833\"\u003e#16833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d\"\u003e\u003ccode\u003e9e19320\u003c/code\u003e\u003c/a\u003e IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162\"\u003e\u003ccode\u003e4ce9f17\u003c/code\u003e\u003c/a\u003e Route synchronous onLookupComplete exceptions via fireExceptionCaught (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16794\"\u003e#16794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759\"\u003e\u003ccode\u003ef7b1b7d\u003c/code\u003e\u003c/a\u003e Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc\"\u003e\u003ccode\u003e0ccb265\u003c/code\u003e\u003c/a\u003e IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794\"\u003e\u003ccode\u003ea6aeb6d\u003c/code\u003e\u003c/a\u003e Resolve all localhost addresses without querying DNS servers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16749\"\u003e#16749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b\"\u003e\u003ccode\u003ec328ba2\u003c/code\u003e\u003c/a\u003e Fix ResumptionController wrapping (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16815\"\u003e#16815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880\"\u003e\u003ccode\u003ebc5862b\u003c/code\u003e\u003c/a\u003e HTTP2: Use 100 as default max concurrent streams setting (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16804\"\u003e#16804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.14.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-surefire-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-failsafe-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apache/maven-surefire/releases\"\u003eorg.apache.maven.plugins:maven-failsafe-plugin's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.5.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce reportTestTimestamp option and include timestamp for test sets and test cases (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3261\"\u003e#3261\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3302\"\u003e#3302\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIssue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3353\"\u003e#3353\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3354\"\u003e#3354\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3327\"\u003e#3327\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3308\"\u003e#3308\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BACKPORT 3.5.x] \u003ca href=\"https://issues.apache.org/jira/browse/SUREFIRE-2049\"\u003e[SUREFIRE-2049]\u003c/a\u003e - Fix SHUTDOWN type lost during command serialization. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3270\"\u003e#3270\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3289\"\u003e#3289\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: null guard for context map (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3269\"\u003e#3269\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3272\"\u003e#3272\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3328\"\u003e#3328\u003c/a\u003e) \u003ca href=\"https://github.com/olamy\"\u003e\u003ccode\u003e@​olamy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse surefire 3.5.5 by project itself for testing (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3324\"\u003e#3324\u003c/a\u003e) \u003ca href=\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow Oracle javadoc guidelines (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3177\"\u003e#3177\u003c/a\u003e) \u003ca href=\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3334\"\u003e#3334\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump commons-io:commons-io from 2.21.0 to 2.22.0 (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/pull/3350\"\u003e#3350\u003c/a\u003e) @\u003ca href=\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/25ea054860a5c1e5932b360d8aa0a31944c2b841\"\u003e\u003ccode\u003e25ea054\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release surefire-3.5.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e5f374ccdefd5b40d75e0072a754708183d9ec5e\"\u003e\u003ccode\u003ee5f374c\u003c/code\u003e\u003c/a\u003e Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/dadd55b7a6a3a0336c253413f68c4f08092328c2\"\u003e\u003ccode\u003edadd55b\u003c/code\u003e\u003c/a\u003e Issue \u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/2613\"\u003e#2613\u003c/a\u003e Debugging failsafe tests: Message 'Listening for transport dt_soc...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/39dd250a44f1f2f1f18ea1881d78ac341222ea97\"\u003e\u003ccode\u003e39dd250\u003c/code\u003e\u003c/a\u003e Bump commons-io:commons-io from 2.21.0 to 2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/27742739c8cc6e4676611ac4bfe42870f74fd0f3\"\u003e\u003ccode\u003e2774273\u003c/code\u003e\u003c/a\u003e Ensure that the statistics filename is calculated only once. (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3326\"\u003e#3326\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3327\"\u003e#3327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/0d5df8a3b4606622a67922405488d4b182409893\"\u003e\u003ccode\u003e0d5df8a\u003c/code\u003e\u003c/a\u003e 3.5.x/bug/cherry pick embedded mode its (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3328\"\u003e#3328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/04ad9a293f5cee5e95c5cd5a2e751723be66deff\"\u003e\u003ccode\u003e04ad9a2\u003c/code\u003e\u003c/a\u003e Use surefire 3.5.5 by project itself for testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/37e8f694c18ca664a8e45e934a43d4870e799c45\"\u003e\u003ccode\u003e37e8f69\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eflakes\u003c/code\u003e attribute to use in \u003ccode\u003etestsuite\u003c/code\u003e report (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3306\"\u003e#3306\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/apache/maven-surefire/issues/3308\"\u003e#3308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/a970fefe4dbc173acacf79389d812f91f6ef027a\"\u003e\u003ccode\u003ea970fef\u003c/code\u003e\u003c/a\u003e Introduce reportTestTimestamp option and include timestamp for test sets and ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apache/maven-surefire/commit/e838393bbb127a7798d13283b9af7cfa0afec3a8\"\u003e\u003ccode\u003ee838393\u003c/code\u003e\u003c/a\u003e deploy 3.5.x branch to nexus\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/onyxsellmoore/resale_tracker/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/onyxsellmoore%2Fresale_tracker/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"}},{"old_version":"4.2.13.Final","new_version":"4.2.14.Final","update_type":"patch","path":null,"pr_created_at":"2026-06-01T20:53:58.000Z","version_change":"4.2.13.Final → 4.2.14.Final","issue":{"uuid":"4566348362","node_id":"PR_kwDOShEBj87hhxOz","number":6,"state":"closed","title":"build(deps): bump the gradle-dependencies group across 1 directory with 33 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-03T22:48:36.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-01T20:53:58.000Z","updated_at":"2026-06-03T22:48:38.000Z","time_to_close":179678,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"gradle-dependencies","update_count":33,"packages":[{"name":"org.junit.platform:junit-platform-launcher","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.jupiter:junit-jupiter-api","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.jupiter:junit-jupiter-engine","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"org.junit.vintage:junit-vintage-engine","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"androidx.compose.ui:ui-text-google-fonts","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-graphics","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-tooling","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-tooling-preview","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-test-manifest","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.ui:ui-test-junit4","old_version":"1.11.1","new_version":"1.11.2"},{"name":"com.google.genai:google-genai","old_version":"1.53.0","new_version":"1.56.0","repository_url":"https://github.com/googleapis/java-genai"},{"name":"androidx.compose.animation:animation","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.compose.foundation:foundation","old_version":"1.11.1","new_version":"1.11.2"},{"name":"androidx.glance:glance","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"androidx.glance:glance-appwidget","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"androidx.glance:glance-material3","old_version":"1.2.0-rc01","new_version":"1.3.0-alpha01"},{"name":"com.google.code.gson:gson","old_version":"2.10.1","new_version":"2.14.0","repository_url":"https://github.com/google/gson"},{"name":"org.junit.jupiter:junit-jupiter-params","old_version":"6.0.3","new_version":"6.1.0","repository_url":"https://github.com/junit-team/junit-framework"},{"name":"androidx.compose:compose-bom","old_version":"2026.05.00","new_version":"2026.05.01"},{"name":"androidx.compose.material3:material3","old_version":"1.5.0-alpha19","new_version":"1.5.0-alpha20"},{"name":"com.google.protobuf:protobuf-javalite","old_version":"4.34.1","new_version":"4.35.0"},{"name":"org.checkerframework:checker-qual","old_version":"4.1.0","new_version":"4.2.0","repository_url":"https://github.com/typetools/checker-framework"},{"name":"io.mockk:mockk","old_version":"1.14.9","new_version":"1.14.11","repository_url":"https://github.com/mockk/mockk"},{"name":"androidx.wear.compose:compose-material","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-material3","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-foundation","old_version":"1.6.1","new_version":"1.6.2"},{"name":"androidx.wear.compose:compose-navigation","old_version":"1.6.1","new_version":"1.6.2"},{"name":"io.netty:netty-common","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-handler","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.13.Final","new_version":"4.2.14.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.google.devtools.ksp","old_version":"2.3.8","new_version":"2.3.9","repository_url":"https://github.com/google/ksp"}],"path":null,"ecosystem":"maven"},"body":"Bumps the gradle-dependencies group with 33 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| [org.junit.vintage:junit-vintage-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| androidx.compose.ui:ui-text-google-fonts | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-graphics | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-tooling | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-tooling-preview | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-test-manifest | `1.11.1` | `1.11.2` |\n| androidx.compose.ui:ui-test-junit4 | `1.11.1` | `1.11.2` |\n| [com.google.genai:google-genai](https://github.com/googleapis/java-genai) | `1.53.0` | `1.56.0` |\n| androidx.compose.animation:animation | `1.11.1` | `1.11.2` |\n| androidx.compose.foundation:foundation | `1.11.1` | `1.11.2` |\n| androidx.glance:glance | `1.2.0-rc01` | `1.3.0-alpha01` |\n| androidx.glance:glance-appwidget | `1.2.0-rc01` | `1.3.0-alpha01` |\n| androidx.glance:glance-material3 | `1.2.0-rc01` | `1.3.0-alpha01` |\n| [com.google.code.gson:gson](https://github.com/google/gson) | `2.10.1` | `2.14.0` |\n| [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |\n| androidx.compose:compose-bom | `2026.05.00` | `2026.05.01` |\n| androidx.compose.material3:material3 | `1.5.0-alpha19` | `1.5.0-alpha20` |\n| com.google.protobuf:protobuf-javalite | `4.34.1` | `4.35.0` |\n| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `4.1.0` | `4.2.0` |\n| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.9` | `1.14.11` |\n| androidx.wear.compose:compose-material | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-material3 | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-foundation | `1.6.1` | `1.6.2` |\n| androidx.wear.compose:compose-navigation | `1.6.1` | `1.6.2` |\n| [io.netty:netty-common](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-handler](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` |\n| [com.google.devtools.ksp](https://github.com/google/ksp) | `2.3.8` | `2.3.9` |\n\n\nUpdates `org.junit.platform:junit-platform-launcher` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.platform:junit-platform-launcher's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-engine's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.vintage:junit-vintage-engine` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.vintage:junit-vintage-engine's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose.ui:ui-text-google-fonts` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-graphics` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling-preview` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-manifest` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-junit4` from 1.11.1 to 1.11.2\n\nUpdates `com.google.genai:google-genai` from 1.53.0 to 1.56.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/java-genai/releases\"\u003ecom.google.genai:google-genai's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.56.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.55.0...v1.56.0\"\u003e1.56.0\u003c/a\u003e (2026-05-28)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadditional computer_use field support for vertex. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e94671df\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Reinforcement Tuning in GenAI SDK (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003ec0248fb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.55.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.54.0...v1.55.0\"\u003e1.55.0\u003c/a\u003e (2026-05-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for the Gemini API. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e1a496a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd new fields (\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003ed4b0867\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.54.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.54.0\"\u003e1.54.0\u003c/a\u003e (2026-05-20)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove the experimental Interactions module. This feature will be supported in the future.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more details to the ApiResponse error message (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c429c2b11538eee98cf3ace98c0d3c92145c001b\"\u003ec429c2b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport Blocking FunctionCall in Live API in AgentPlatform (Vertex) (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0d1cc9c39b3f9f7f7d722cbafdcd478c3492f7c7\"\u003e0d1cc9c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMissing jackson-module-kotlin in classpath (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0849b863ff42f91e5086c4b95fb2ad2b985a6cb2\"\u003e0849b86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest level timeout is ignored in favor of client level timeout (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c9464b5fea4ad8f5cf50b682ecc6d79f8eb071c0\"\u003ec9464b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest URL is incorrectly rewritten when baseUrl is configured as a proxy address (\u003ca href=\"https://github.com/googleapis/java-genai/commit/400776d150a7e0e445ea361a8b50096a936071e1\"\u003e400776d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the README (\u003ca href=\"https://github.com/googleapis/java-genai/commit/beb39f79194682e1ddd355219760adeedd4c0f1a\"\u003ebeb39f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/java-genai/blob/main/CHANGELOG.md\"\u003ecom.google.genai:google-genai's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.55.0...v1.56.0\"\u003e1.56.0\u003c/a\u003e (2026-05-28)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadditional computer_use field support for vertex. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e94671df\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Reinforcement Tuning in GenAI SDK (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003ec0248fb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.54.0...v1.55.0\"\u003e1.55.0\u003c/a\u003e (2026-05-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for the Gemini API. (\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e1a496a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd new fields (\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003ed4b0867\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.54.0\"\u003e1.54.0\u003c/a\u003e (2026-05-20)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove the experimental Interactions module. This feature will be supported in the future.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more details to the ApiResponse error message (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c429c2b11538eee98cf3ace98c0d3c92145c001b\"\u003ec429c2b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport Blocking FunctionCall in Live API in AgentPlatform (Vertex) (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0d1cc9c39b3f9f7f7d722cbafdcd478c3492f7c7\"\u003e0d1cc9c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMissing jackson-module-kotlin in classpath (\u003ca href=\"https://github.com/googleapis/java-genai/commit/0849b863ff42f91e5086c4b95fb2ad2b985a6cb2\"\u003e0849b86\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest level timeout is ignored in favor of client level timeout (\u003ca href=\"https://github.com/googleapis/java-genai/commit/c9464b5fea4ad8f5cf50b682ecc6d79f8eb071c0\"\u003ec9464b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erequest URL is incorrectly rewritten when baseUrl is configured as a proxy address (\u003ca href=\"https://github.com/googleapis/java-genai/commit/400776d150a7e0e445ea361a8b50096a936071e1\"\u003e400776d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the README (\u003ca href=\"https://github.com/googleapis/java-genai/commit/beb39f79194682e1ddd355219760adeedd4c0f1a\"\u003ebeb39f7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/19fb4ce563e33ccbdd84d56efb47e1548e4387a9\"\u003e\u003ccode\u003e19fb4ce\u003c/code\u003e\u003c/a\u003e chore(main): release 1.56.0 (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1047\"\u003e#1047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/eced1f86e1511eab075f15a2a63623aea44b821d\"\u003e\u003ccode\u003eeced1f8\u003c/code\u003e\u003c/a\u003e chore: Update native-image configuration.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/94671dfeafceba01e8892eb1a0dc550fd0ac8e61\"\u003e\u003ccode\u003e94671df\u003c/code\u003e\u003c/a\u003e feat: additional computer_use field support for vertex.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/bf99a9215fe6035a702091263ab89bdea204f77e\"\u003e\u003ccode\u003ebf99a92\u003c/code\u003e\u003c/a\u003e chore: Internal cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/c0248fb0c957457f9bdedc2695dd8177eaa8a514\"\u003e\u003ccode\u003ec0248fb\u003c/code\u003e\u003c/a\u003e feat: Support Reinforcement Tuning in GenAI SDK\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/8d2a8926253b07fa6ee6ad8a7b26f37b9f3ae53c\"\u003e\u003ccode\u003e8d2a892\u003c/code\u003e\u003c/a\u003e chore(main): release 1.56.0-SNAPSHOT (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1045\"\u003e#1045\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/4dff18a45bf809d8796dcbe97459eb86d8c158b1\"\u003e\u003ccode\u003e4dff18a\u003c/code\u003e\u003c/a\u003e chore(main): release 1.55.0 (\u003ca href=\"https://redirect.github.com/googleapis/java-genai/issues/1041\"\u003e#1041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/1a496a722d19cd2d981007f969a9e5361d667962\"\u003e\u003ccode\u003e1a496a7\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eenable_prompt_injection_detection\u003c/code\u003e for Computer Use feature for th...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/d4b0867de323902cad5e8c7e4085a937f6c4aa25\"\u003e\u003ccode\u003ed4b0867\u003c/code\u003e\u003c/a\u003e feat: add new fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/googleapis/java-genai/commit/e59c8cc665aa40e009f3cc7dd730569a9d02c649\"\u003e\u003ccode\u003ee59c8cc\u003c/code\u003e\u003c/a\u003e chore: update versions to main pom.xml and ApiClient\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/googleapis/java-genai/compare/v1.53.0...v1.56.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose.animation:animation` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.foundation:foundation` from 1.11.1 to 1.11.2\n\nUpdates `androidx.glance:glance` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-appwidget` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-material3` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-appwidget` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `androidx.glance:glance-material3` from 1.2.0-rc01 to 1.3.0-alpha01\n\nUpdates `com.google.code.gson:gson` from 2.10.1 to 2.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/google/gson/releases\"\u003ecom.google.code.gson:gson's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eGson 2.14.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd type adapters for \u003ccode\u003ejava.time\u003c/code\u003e classes by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2948\"\u003egoogle/gson#2948\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWhen the \u003ccode\u003ejava.time\u003c/code\u003e API is available, Gson automatically can read and write instances of classes like \u003ccode\u003eInstant\u003c/code\u003e and \u003ccode\u003eDuration\u003c/code\u003e. The format it uses essentially freezes the JSON representation that \u003ccode\u003eReflectiveTypeAdapterFactory\u003c/code\u003e established by default, based on the private fields of \u003ccode\u003ejava.time\u003c/code\u003e classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.\u003c/p\u003e\n\u003cp\u003eWith this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with \u003ccode\u003e--add-opens\u003c/code\u003e for these classes on recent JDKs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003ecom.google.gson.graph\u003c/code\u003e by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2990\"\u003egoogle/gson#2990\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis package was not part of any released artifact and depended on Gson internals in potentially problematic ways.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eValidate that strings being parsed as integers consist of ASCII characters by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2995\"\u003egoogle/gson#2995\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ePreviously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix duplicate key detection when first value is null by \u003ca href=\"https://github.com/andrewstellman\"\u003e\u003ccode\u003e@​andrewstellman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3006\"\u003egoogle/gson#3006\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: \u003ccode\u003e{\u0026quot;foo\u0026quot;: null, \u0026quot;foo\u0026quot;: bar}\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003eSerializable\u003c/code\u003e from internal \u003ccode\u003eType\u003c/code\u003e implementation classes. by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3011\"\u003egoogle/gson#3011\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThe nested classes \u003ccode\u003eParameterizedTypeImpl\u003c/code\u003e, \u003ccode\u003eGenericArrayTypeImpl\u003c/code\u003e, and \u003ccode\u003eWildcardTypeImpl\u003c/code\u003e in \u003ccode\u003eGsonTypes\u003c/code\u003e are implementations of the corresponding types (without \u003ccode\u003eImpl\u003c/code\u003e) in \u003ccode\u003ejava.lang.reflect\u003c/code\u003e. For some reason, they were serializable, even though the \u003ccode\u003ejava.lang.reflect\u003c/code\u003e implementations are not. Having unnecessarily serializable classes could \u003cem\u003econceivably\u003c/em\u003e have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd \u003ccode\u003eLegacyProtoTypeAdapterFactory\u003c/code\u003e. by \u003ca href=\"https://github.com/eamonnmcmanus\"\u003e\u003ccode\u003e@​eamonnmcmanus\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/3014\"\u003egoogle/gson#3014\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eMake AppendableWriter do flush and close if delegation object supports by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2925\"\u003egoogle/gson#2925\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther less visible changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd default capacity to EnumTypeAdapter maps by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2959\"\u003egoogle/gson#2959\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: move derived adapters from Gson to TypeAdapters by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2951\"\u003egoogle/gson#2951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOptimize \u003ccode\u003enew Gson()\u003c/code\u003e by \u003ca href=\"https://github.com/MukjepScarlet\"\u003e\u003ccode\u003e@​MukjepScarlet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/google/gson/pull/2864\"\u003egoogle/gson#2864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ThirdGoddess\"\u003e\u003ccode\u003e@​ThirdGoddess\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/2944\"\u003egoogle/gson#2944\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lmj798\"\u003e\u003ccode\u003e@​lmj798\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/2988\"\u003egoogle/gson#2988\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Eng-YasminKotb\"\u003e\u003ccode\u003e@​Eng-YasminKotb\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/3005\"\u003egoogle/gson#3005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrewstellman\"\u003e\u003ccode\u003e@​andrewstellman\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/google/gson/pull/3006\"\u003egoogle/gson#3006\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0\"\u003ehttps://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eGson 2.13.2\u003c/h2\u003e\n\u003cp\u003eThe main changes in this release are just newer dependencies.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/3ff35d6269894901ab8006258395aafc4b9765cd\"\u003e\u003ccode\u003e3ff35d6\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release gson-parent-2.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/a3024fde2a5c12b9a9a0b6b914ae4899aa574d81\"\u003e\u003ccode\u003ea3024fd\u003c/code\u003e\u003c/a\u003e Bump the maven group with 13 updates (\u003ca href=\"https://redirect.github.com/google/gson/issues/3002\"\u003e#3002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/5689ffe44952ca6ed44c595886b9043286311b23\"\u003e\u003ccode\u003e5689ffe\u003c/code\u003e\u003c/a\u003e Bump the github-actions group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/google/gson/issues/3018\"\u003e#3018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/48db33cbf93af6b2f5b117dfdfd826de47f7229c\"\u003e\u003ccode\u003e48db33c\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003eLegacyProtoTypeAdapterFactory\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/google/gson/issues/3014\"\u003e#3014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/53d703ee76ca3e951fa4a727307c1f28dbcaf3aa\"\u003e\u003ccode\u003e53d703e\u003c/code\u003e\u003c/a\u003e Update outdated comment regarding serializable types (\u003ca href=\"https://redirect.github.com/google/gson/issues/3012\"\u003e#3012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/0189b727761f31596d1a27b7c60b42478dc9f331\"\u003e\u003ccode\u003e0189b72\u003c/code\u003e\u003c/a\u003e Remove \u003ccode\u003eSerializable\u003c/code\u003e from internal \u003ccode\u003eType\u003c/code\u003e implementation classes. (\u003ca href=\"https://redirect.github.com/google/gson/issues/3011\"\u003e#3011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/f4d371d29c04066dbe7fdb31f642831f9c7f40cd\"\u003e\u003ccode\u003ef4d371d\u003c/code\u003e\u003c/a\u003e Fix duplicate key detection when first value is null (\u003ca href=\"https://redirect.github.com/google/gson/issues/3006\"\u003e#3006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/27d9ba1eeeeb156540cf5397504a4f9f256e911f\"\u003e\u003ccode\u003e27d9ba1\u003c/code\u003e\u003c/a\u003e Fix typo in README (JPMS dependencies section) (\u003ca href=\"https://redirect.github.com/google/gson/issues/3005\"\u003e#3005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/1fa9b7a0a994b006b3be00e2df9de778e71e6807\"\u003e\u003ccode\u003e1fa9b7a\u003c/code\u003e\u003c/a\u003e Validate that strings being parsed as integers consist of ASCII characters (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/google/gson/commit/b7d59549188867deb42e46073fb38735a5beda1c\"\u003e\u003ccode\u003eb7d5954\u003c/code\u003e\u003c/a\u003e Add iterator fail-fast tests for LinkedTreeMap.clear() (\u003ca href=\"https://redirect.github.com/google/gson/issues/2992\"\u003e#2992\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/google/gson/compare/gson-parent-2.10.1...gson-parent-2.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-params` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-params's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e Release 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e Prepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e Update plugin spotless to v8.5.0 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e Update Gradle to v9.5.1 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e Update zizmorcore/zizmor-action action to v0.5.4 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e Update github/codeql-action action to v4.35.5 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e Restructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e Increase timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e Update dependency org.apache.groovy:groovy to v5.0.6 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca href=\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.compose:compose-bom` from 2026.05.00 to 2026.05.01\n\nUpdates `androidx.compose.ui:ui` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-graphics` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-tooling-preview` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-manifest` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.ui:ui-test-junit4` from 1.11.1 to 1.11.2\n\nUpdates `androidx.compose.material3:material3` from 1.5.0-alpha19 to 1.5.0-alpha20\n\nUpdates `com.google.protobuf:protobuf-javalite` from 4.34.1 to 4.35.0\n\nUpdates `org.checkerframework:checker-qual` from 4.1.0 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key \u0026quot;createsmustcallfor.target.unparseable\u0026quot; to \u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror, TypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key \u0026quot;createsmustcallfor.target.unparseable\u0026quot; to \u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror, TypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/231e85507cb0166a94145d2e35b8d3d355c3ced6\"\u003e\u003ccode\u003e231e855\u003c/code\u003e\u003c/a\u003e new release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/e59f66f668bfffbadbd3185c103a898ee69fa745\"\u003e\u003ccode\u003ee59f66f\u003c/code\u003e\u003c/a\u003e Prep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/bcc021ff1928ddb3e2ca9afa876bb16a6e924396\"\u003e\u003ccode\u003ebcc021f\u003c/code\u003e\u003c/a\u003e Fix problem with type var in a method reference (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7729\"\u003e#7729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/91392e5f6a521ee48baa974f39038a3ff309c5e3\"\u003e\u003ccode\u003e91392e5\u003c/code\u003e\u003c/a\u003e Use gradle-git-properties version 4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/cdae25801e483901ce5ebd814ad5286f5e332531\"\u003e\u003ccode\u003ecdae258\u003c/code\u003e\u003c/a\u003e Increase constraint limit (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7752\"\u003e#7752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/dbb553d23011306ced4a7d49fac82aa2df850e9d\"\u003e\u003ccode\u003edbb553d\u003c/code\u003e\u003c/a\u003e Fix check of receiver override (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7746\"\u003e#7746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/264c73dbc2cde531fe88f6546c76727de348d3af\"\u003e\u003ccode\u003e264c73d\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;unneeded.suppression\u0026quot; warning (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7747\"\u003e#7747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/d118b89190356b846201f2488b96710dfee11aef\"\u003e\u003ccode\u003ed118b89\u003c/code\u003e\u003c/a\u003e New methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7745\"\u003e#7745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/a916913c161d0cf6078c32e823d724a4c31890ae\"\u003e\u003ccode\u003ea916913\u003c/code\u003e\u003c/a\u003e Simplify logic (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7744\"\u003e#7744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/typetools/checker-framework/commit/227974fbf0e546621a53da5f2db0de83fee61c46\"\u003e\u003ccode\u003e227974f\u003c/code\u003e\u003c/a\u003e Update plugin com-gradleup-shadow to v9.4.2 (\u003ca href=\"https://redirect.github.com/typetools/checker-framework/issues/7749\"\u003e#7749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/typetools/checker-framework/compare/checker-framework-4.1.0...checker-framework-4.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease Notes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease Not...\n\n_Description has been truncated_","html_url":"https://github.com/sahilsaraearth-svg/aro-music/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sahilsaraearth-svg%2Faro-music/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"}},{"old_version":"4.1.32.Final","new_version":"4.1.133.Final","update_type":"patch","path":null,"pr_created_at":"2026-05-18T17:01:18.000Z","version_change":"4.1.32.Final → 4.1.133.Final","issue":{"uuid":"4470993564","node_id":"PR_kwDODFDo0s7cvogB","number":9,"state":"closed","title":"Bump the maven group across 8 directories with 10 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T01:44:31.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-18T17:01:18.000Z","updated_at":"2026-05-21T01:44:33.000Z","time_to_close":204193,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":10,"packages":[{"name":"org.asynchttpclient:async-http-client","old_version":"2.7.0","new_version":"2.15.0","repository_url":"https://github.com/AsyncHttpClient/async-http-client"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.32.Final","new_version":"4.1.133.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.4","new_version":"3.18.0"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.10.0","new_version":"2.25.4"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.6.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"org.bouncycastle:bcpkix-jdk15on","old_version":"1.60","new_version":"1.70","repository_url":"https://github.com/bcgit/bc-java"},{"name":"com.jamesmurty.utils:java-xmlbuilder","old_version":"1.1","new_version":"1.2","repository_url":"https://github.com/jmurty/java-xmlbuilder"},{"name":"org.apache.solr:solr-solrj","old_version":"7.5.0","new_version":"8.11.3"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `2.7.0` | `2.15.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.133.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.6.5` | `2.18.6` |\n| [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) | `1.60` | `1.70` |\n| [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder) | `1.1` | `1.2` |\n| org.apache.solr:solr-solrj | `7.5.0` | `8.11.3` |\n\nBumps the maven group with 1 update in the /buildtools directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 1 update in the /examples/flink directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 2 updates in the /pulsar-io/solr directory: org.apache.commons:commons-lang3 and org.apache.solr:solr-solrj.\nBumps the maven group with 1 update in the /pulsar-io/twitter directory: org.apache.commons:commons-lang3.\nBumps the maven group with 7 updates in the /pulsar-sql directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `2.7.0` | `2.15.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.133.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.8.11` | `2.18.6` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.8.11.4` | `2.12.7.1` |\n| [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) | `1.60` | `1.70` |\n\nBumps the maven group with 2 updates in the /pulsar-sql/presto-distribution directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).\nBumps the maven group with 1 update in the /tiered-storage/jcloud directory: [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder).\n\nUpdates `org.asynchttpclient:async-http-client` from 2.7.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/releases\"\u003eorg.asynchttpclient:async-http-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAHC v2.15.0 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.14.5 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.12.4 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003eThis is a breaking release. \u003ccode\u003eRequestBuilderBase.java\u003c/code\u003e has a new method added. This is in response to \u003ccode\u003eGHSA-mfj5-cf8g-g2fv\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/9e52c0ca7cc10d8d19fc77a460e6e016f14a90d9\"\u003e\u003ccode\u003e9e52c0c\u003c/code\u003e\u003c/a\u003e chore: Dependency upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/5eed33962a412a0100f8117dca849930652bfe30\"\u003e\u003ccode\u003e5eed339\u003c/code\u003e\u003c/a\u003e Patch Security Advisory: GHSA-fmxf-pm6p-7xgm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/ae557ad35246721c09dafb2976609cd0004e78ae\"\u003e\u003ccode\u003eae557ad\u003c/code\u003e\u003c/a\u003e Release 2.14.5: Security fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/6afba08b39a10c2a85bb1b38e14ada224cd40705\"\u003e\u003ccode\u003e6afba08\u003c/code\u003e\u003c/a\u003e Release 2.12.4 with CVE Fix: 2024-53990\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7a370af58dc8895a27a14d0a81af2a3b91930651\"\u003e\u003ccode\u003e7a370af\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release async-http-client-project-2.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7201bf111839358226df678fd512961a3db4fc1d\"\u003e\u003ccode\u003e7201bf1\u003c/code\u003e\u003c/a\u003e Bump netty to 4.1.60.Final \u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1775\"\u003e#1775\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1782\"\u003e#1782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/576decf10ca8729c1b3216fcd54c2191872059f4\"\u003e\u003ccode\u003e576decf\u003c/code\u003e\u003c/a\u003e Proxy CONNECT custom headers (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1774\"\u003e#1774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d2fc37154b48c416e9d2dda0095a4a7a32b83f5a\"\u003e\u003ccode\u003ed2fc371\u003c/code\u003e\u003c/a\u003e Fix for NPE when connection is reset by peer (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1771\"\u003e#1771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/bd7b5bd0e3e5f7eb045d3e996d94b9f190fe3232\"\u003e\u003ccode\u003ebd7b5bd\u003c/code\u003e\u003c/a\u003e Use original method in redirects for HEAD / OPTIONS requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1736\"\u003e#1736\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d24ee6ac16e972fd910d1adfdd542e0cd2db59bd\"\u003e\u003ccode\u003ed24ee6a\u003c/code\u003e\u003c/a\u003e Propagate original request user-agent in proxy CONNECT requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.7.0...async-http-client-project-2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.133.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.6.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.6.5 to 2.8.11.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.bouncycastle:bcpkix-jdk15on` from 1.60 to 1.70\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html\"\u003eorg.bouncycastle:bcpkix-jdk15on's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bcgit/bc-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.asynchttpclient:async-http-client` from 2.7.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/releases\"\u003eorg.asynchttpclient:async-http-client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eAHC v2.15.0 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.14.5 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAHC v2.12.4 Release\u003c/h2\u003e\n\u003ch2\u003eSecurity Advisory\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\"\u003ehttps://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-mfj5-cf8g-g2fv\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003eThis is a breaking release. \u003ccode\u003eRequestBuilderBase.java\u003c/code\u003e has a new method added. This is in response to \u003ccode\u003eGHSA-mfj5-cf8g-g2fv\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/9e52c0ca7cc10d8d19fc77a460e6e016f14a90d9\"\u003e\u003ccode\u003e9e52c0c\u003c/code\u003e\u003c/a\u003e chore: Dependency upgrade\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/5eed33962a412a0100f8117dca849930652bfe30\"\u003e\u003ccode\u003e5eed339\u003c/code\u003e\u003c/a\u003e Patch Security Advisory: GHSA-fmxf-pm6p-7xgm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/ae557ad35246721c09dafb2976609cd0004e78ae\"\u003e\u003ccode\u003eae557ad\u003c/code\u003e\u003c/a\u003e Release 2.14.5: Security fixes and dependency upgrades\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/6afba08b39a10c2a85bb1b38e14ada224cd40705\"\u003e\u003ccode\u003e6afba08\u003c/code\u003e\u003c/a\u003e Release 2.12.4 with CVE Fix: 2024-53990\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7a370af58dc8895a27a14d0a81af2a3b91930651\"\u003e\u003ccode\u003e7a370af\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release async-http-client-project-2.12.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/7201bf111839358226df678fd512961a3db4fc1d\"\u003e\u003ccode\u003e7201bf1\u003c/code\u003e\u003c/a\u003e Bump netty to 4.1.60.Final \u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1775\"\u003e#1775\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1782\"\u003e#1782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/576decf10ca8729c1b3216fcd54c2191872059f4\"\u003e\u003ccode\u003e576decf\u003c/code\u003e\u003c/a\u003e Proxy CONNECT custom headers (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1774\"\u003e#1774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d2fc37154b48c416e9d2dda0095a4a7a32b83f5a\"\u003e\u003ccode\u003ed2fc371\u003c/code\u003e\u003c/a\u003e Fix for NPE when connection is reset by peer (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1771\"\u003e#1771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/bd7b5bd0e3e5f7eb045d3e996d94b9f190fe3232\"\u003e\u003ccode\u003ebd7b5bd\u003c/code\u003e\u003c/a\u003e Use original method in redirects for HEAD / OPTIONS requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1736\"\u003e#1736\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/commit/d24ee6ac16e972fd910d1adfdd542e0cd2db59bd\"\u003e\u003ccode\u003ed24ee6a\u003c/code\u003e\u003c/a\u003e Propagate original request user-agent in proxy CONNECT requests (\u003ca href=\"https://redirect.github.com/AsyncHttpClient/async-http-client/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.7.0...async-http-client-project-2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.133.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.bouncycastle:bcpkix-jdk15on` from 1.60 to 1.70\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html\"\u003eorg.bouncycastle:bcpkix-jdk15on's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bcgit/bc-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vicaya/pulsar/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/vicaya/pulsar/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vicaya%2Fpulsar/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"4.1.135.Final","new_version":"4.2.15.Final","update_type":"minor","path":null,"pr_created_at":"2026-05-17T15:55:25.000Z","version_change":"4.1.135.Final → 4.2.15.Final","issue":{"uuid":"4464033697","node_id":"PR_kwDOSASMTs7cZgKo","number":12,"state":"closed","title":"build(deps): bump the minor-and-patch group across 1 directory with 23 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T03:18:27.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T15:55:25.000Z","updated_at":"2026-06-12T03:18:36.000Z","time_to_close":2200982,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"minor-and-patch","update_count":23,"packages":[{"name":"com.google.zxing:core","old_version":"3.5.3","new_version":"3.5.4","repository_url":"https://github.com/zxing/zxing"},{"name":"androidx.core:core","old_version":"1.15.0","new_version":"1.19.0"},{"name":"androidx.core:core-ktx","old_version":"1.15.0","new_version":"1.19.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.135.Final","new_version":"4.2.15.Final","repository_url":"https://github.com/netty/netty"},{"name":"commons-io:commons-io","old_version":"2.14.0","new_version":"2.22.0"},{"name":"org.jetbrains.kotlinx:kotlinx-coroutines-core","old_version":"1.10.2","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.coroutines"},{"name":"org.jetbrains.kotlinx:kotlinx-coroutines-test","old_version":"1.10.2","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.coroutines"},{"name":"org.jetbrains.kotlinx:kotlinx-serialization-json","old_version":"1.7.3","new_version":"1.11.0","repository_url":"https://github.com/Kotlin/kotlinx.serialization"},{"name":"com.juul.kable:kable-core","old_version":"0.42.0","new_version":"0.43.1","repository_url":"https://github.com/JuulLabs/kable"},{"name":"androidx.activity:activity-compose","old_version":"1.9.3","new_version":"1.13.0"},{"name":"com.github.hypfvieh:dbus-java-core","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"com.github.hypfvieh:dbus-java-transport-native-unixsocket","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"com.github.hypfvieh:dbus-java-transport-jnr-unixsocket","old_version":"5.1.0","new_version":"5.2.0","repository_url":"https://github.com/hypfvieh/dbus-java"},{"name":"org.slf4j:slf4j-simple","old_version":"2.0.12","new_version":"2.0.18"},{"name":"org.jetbrains.kotlin.multiplatform","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.kotlin.plugin.compose","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.kotlin.plugin.serialization","old_version":"2.1.10","new_version":"2.4.0","repository_url":"https://github.com/JetBrains/kotlin"},{"name":"org.jetbrains.compose","old_version":"1.7.3","new_version":"1.11.1","repository_url":"https://github.com/JetBrains/compose-multiplatform"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch group with 18 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [com.google.zxing:core](https://github.com/zxing/zxing) | `3.5.3` | `3.5.4` |\n| androidx.core:core | `1.15.0` | `1.19.0` |\n| androidx.core:core-ktx | `1.15.0` | `1.19.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.135.Final` | `4.2.15.Final` |\n| commons-io:commons-io | `2.14.0` | `2.22.0` |\n| [org.jetbrains.kotlinx:kotlinx-coroutines-core](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |\n| [org.jetbrains.kotlinx:kotlinx-coroutines-test](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |\n| [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.7.3` | `1.11.0` |\n| [com.juul.kable:kable-core](https://github.com/JuulLabs/kable) | `0.42.0` | `0.43.1` |\n| androidx.activity:activity-compose | `1.9.3` | `1.13.0` |\n| [com.github.hypfvieh:dbus-java-core](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| [com.github.hypfvieh:dbus-java-transport-native-unixsocket](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| [com.github.hypfvieh:dbus-java-transport-jnr-unixsocket](https://github.com/hypfvieh/dbus-java) | `5.1.0` | `5.2.0` |\n| org.slf4j:slf4j-simple | `2.0.12` | `2.0.18` |\n| [org.jetbrains.kotlin.multiplatform](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.kotlin.plugin.compose](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.kotlin.plugin.serialization](https://github.com/JetBrains/kotlin) | `2.1.10` | `2.4.0` |\n| [org.jetbrains.compose](https://github.com/JetBrains/compose-multiplatform) | `1.7.3` | `1.11.1` |\n\n\nUpdates `com.google.zxing:core` from 3.5.3 to 3.5.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/zxing/zxing/releases\"\u003ecom.google.zxing:core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eZXing 3.5.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix container inefficiency in RSSExpandedReader.java by \u003ca href=\"https://github.com/cinsttool\"\u003e\u003ccode\u003e@​cinsttool\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1782\"\u003ezxing/zxing#1782\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SYMBOLOGY_IDENTIFIER Loss in QRCodeMultiReader to Ensure Data Integrity and Functional Consistency with QRCodeReader by \u003ca href=\"https://github.com/xiebaiyuan\"\u003e\u003ccode\u003e@​xiebaiyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1839\"\u003ezxing/zxing#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBe more stringent on email validation rules by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1870\"\u003ezxing/zxing#1870\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePDF417: Check that input is made of 0...127 chars when using Compaction.TEXT, throw an explicit exception if not the case by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1878\"\u003ezxing/zxing#1878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixing issue \u003ca href=\"https://redirect.github.com/zxing/zxing/issues/1831\"\u003e#1831\u003c/a\u003e by \u003ca href=\"https://github.com/ftiercelin\"\u003e\u003ccode\u003e@​ftiercelin\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1879\"\u003ezxing/zxing#1879\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd hint to correct wrong dimension by \u003ca href=\"https://github.com/magethle\"\u003e\u003ccode\u003e@​magethle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1901\"\u003ezxing/zxing#1901\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix distortion calculation for isosceles right triangles by \u003ca href=\"https://github.com/magethle\"\u003e\u003ccode\u003e@​magethle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1908\"\u003ezxing/zxing#1908\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd input validation for pixel array length in RGBLuminanceSource to avoid ArrayIndexOutOfBoundsException by \u003ca href=\"https://github.com/leofernandesmo\"\u003e\u003ccode\u003e@​leofernandesmo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/1961\"\u003ezxing/zxing#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd 90-degree rotation support to RGBLuminanceSource by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2012\"\u003ezxing/zxing#2012\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd GrayscaleLuminanceSource by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2013\"\u003ezxing/zxing#2013\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLoosen ITF max variance for 3x module widths by \u003ca href=\"https://github.com/gredler\"\u003e\u003ccode\u003e@​gredler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/zxing/zxing/pull/2014\"\u003ezxing/zxing#2014\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\"\u003ehttps://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/f651b0a0375676e47144f73397dddff8868b0e4c\"\u003e\u003ccode\u003ef651b0a\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/6d66bd96437e15650b91b7c9c6c7dfaa302b3b3d\"\u003e\u003ccode\u003e6d66bd9\u003c/code\u003e\u003c/a\u003e Restore 3.5.4-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/c65c5506a7f75c6623e8720391487a9db47ed1e0\"\u003e\u003ccode\u003ec65c550\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/00ff3cb5008adbb22f6c396473a3b233076d6cae\"\u003e\u003ccode\u003e00ff3cb\u003c/code\u003e\u003c/a\u003e Add new Sonatype repo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/4a160986ef8b9c1e27efa32d724681f28a1eccfd\"\u003e\u003ccode\u003e4a16098\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] rollback the release of zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/7c58665161d5bfd75593f0d4777f036ffdaf9d1c\"\u003e\u003ccode\u003e7c58665\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/b36e149816fa9e1bc13b6249fd91d0c107967fa7\"\u003e\u003ccode\u003eb36e149\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/8536950144e8cc3f39ca416fb0b2e327bc14f26f\"\u003e\u003ccode\u003e8536950\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] rollback the release of zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/1fe940f09142af819df352b05bc6722e10d99d72\"\u003e\u003ccode\u003e1fe940f\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release zxing-3.5.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zxing/zxing/commit/6cf10626462f7f56ff4e056b29871f87a8105a53\"\u003e\u003ccode\u003e6cf1062\u003c/code\u003e\u003c/a\u003e Manually update secondary packages to 3.5.4. parent\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/zxing/zxing/compare/zxing-3.5.3...zxing-3.5.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `androidx.core:core` from 1.15.0 to 1.19.0\n\nUpdates `androidx.core:core-ktx` from 1.15.0 to 1.19.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-common` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after draining queue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e) by \u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation by \u003ca href=\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of QuicheQui… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e Fix SCTP and Redis tests (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e Fix revapi warnings (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e Pass maxAllocation to Brotli and Zstd decoders (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.15.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler-proxy` from 4.1.135.Final to 4.2.15.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler-proxy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e: DDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e: information disclosure and denial of service in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e: IPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e: request smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e: memory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e: traffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e: TLS hostname verification accidentally disabled in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e: excessive memory usage from SNIHandler in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e: file descriptor leak in \u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and \u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e: DNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e: denial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e: memory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"h...\n\n_Description has been truncated_","html_url":"https://github.com/Avicennasis/BluePaper/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Avicennasis%2FBluePaper/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"}},{"old_version":"4.1.129.Final","new_version":"4.1.133.Final","update_type":"patch","path":null,"pr_created_at":"2026-05-08T18:25:56.000Z","version_change":"4.1.129.Final → 4.1.133.Final","issue":{"uuid":"4408508151","node_id":"PR_kwDOPBlamc7ZpB3-","number":14,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.129.Final to 4.1.133.Final","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-08T23:18:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T18:25:56.000Z","updated_at":"2026-06-08T23:18:26.000Z","time_to_close":2695948,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.129.Final","new_version":"4.1.133.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.129.Final to 4.1.133.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.133.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16539\"\u003enetty/netty#16539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16561\"\u003enetty/netty#16561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Replace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16555\"\u003enetty/netty#16555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16554\"\u003enetty/netty#16554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16576\"\u003enetty/netty#16576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16584\"\u003enetty/netty#16584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16582\"\u003enetty/netty#16582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16588\"\u003enetty/netty#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16610\"\u003enetty/netty#16610\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16601\"\u003enetty/netty#16601\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16613\"\u003enetty/netty#16613\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16616\"\u003enetty/netty#16616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16598\"\u003enetty/netty#16598\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16558\"\u003enetty/netty#16558\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16630\"\u003e#16630\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16638\"\u003enetty/netty#16638\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16646\"\u003enetty/netty#16646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16642\"\u003enetty/netty#16642\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Propagate exceptions from inner threads in buffer tests by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16652\"\u003enetty/netty#16652\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add maxFrameLength support to ProtobufVarint32FrameDecoder by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16658\"\u003enetty/netty#16658\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Bump up netty-tcnative to 2.0.76.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16672\"\u003enetty/netty#16672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message (also on … by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16675\"\u003enetty/netty#16675\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove flaky NioSocketChannelTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16679\"\u003e#16679\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16681\"\u003enetty/netty#16681\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ObjectCleaner and remove usage (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16685\"\u003e#16685\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16694\"\u003enetty/netty#16694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Update to netty-tcnative 2.0.77.Final by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16695\"\u003enetty/netty#16695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslServerContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16691\"\u003enetty/netty#16691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid NPE in JdkSslClientContext when TrustManagerFactory returns null by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16690\"\u003enetty/netty#16690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Avoid TCPFastOpen in KQueueCompositeBufferGatheringWriteTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16699\"\u003enetty/netty#16699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: SCTP: Correctly handle SO_BACKLOG by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16715\"\u003enetty/netty#16715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix DiscardClient hang under -Dssl by using a client SSL context by \u003ca href=\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16717\"\u003enetty/netty#16717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Consolidate fake exceptions in HTTP/2 tests into Http2TestUtil by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16725\"\u003enetty/netty#16725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Activate noPrintGC by default by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16735\"\u003enetty/netty#16735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge commit from fork by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16742\"\u003enetty/netty#16742\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/fb13125f135ab53203513ff603872a3abe84d38d\"\u003e\u003ccode\u003efb13125\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.133.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/815f71a5c66a4361a8fe18851ab947bb5da33746\"\u003e\u003ccode\u003e815f71a\u003c/code\u003e\u003c/a\u003e Fix compilation after multiple backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1986c38c9ec4f4130786503dfed2563f59132764\"\u003e\u003ccode\u003e1986c38\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6f69dc91a22ad4b56b8a9361a1906b17d427d99a\"\u003e\u003ccode\u003e6f69dc9\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/bf78040ec388483aa83fcb0b51f45eeb66ec6f74\"\u003e\u003ccode\u003ebf78040\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/387bbd00ed0d3db8201e17b53396119c73d59448\"\u003e\u003ccode\u003e387bbd0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/417ebaa8202ac287729b99ad76ad3aa2f6d99410\"\u003e\u003ccode\u003e417ebaa\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3c091ab05a297285e7cf19d2976dd50e0a37641b\"\u003e\u003ccode\u003e3c091ab\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5d60b87cf3b8219208c14c2e860066af8617e656\"\u003e\u003ccode\u003e5d60b87\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/485f11d322c61d64a188aae412b4627d44a02664\"\u003e\u003ccode\u003e485f11d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.133.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.129.Final\u0026new-version=4.1.133.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/aimansharief/knowledge-platform-jobs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/aimansharief/knowledge-platform-jobs/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aimansharief%2Fknowledge-platform-jobs/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}},{"old_version":"4.2.12.Final","new_version":"4.2.13.Final","update_type":"patch","path":null,"pr_created_at":"2026-05-08T01:11:05.000Z","version_change":"4.2.12.Final → 4.2.13.Final","issue":{"uuid":"4403012111","node_id":"PR_kwDOQ9mKCc7ZW723","number":53,"state":"closed","title":"chore(deps): bump the gradle-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-11T01:16:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T01:11:05.000Z","updated_at":"2026-05-11T01:16:51.000Z","time_to_close":259545,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gradle-dependencies","update_count":8,"packages":[{"name":"com.android.tools.build:gradle","old_version":"9.2.0","new_version":"9.2.1"},{"name":"io.netty:netty-codec-http","old_version":"4.2.12.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-handler","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-codec","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"io.netty:netty-common","old_version":"4.2.12.Final","new_version":"4.2.13.Final"},{"name":"com.google.firebase:firebase-bom","old_version":"34.12.0","new_version":"34.13.0"},{"name":"androidx.compose:compose-bom","old_version":"2026.04.01","new_version":"2026.05.00"}],"path":null,"ecosystem":"maven"},"body":"Bumps the gradle-dependencies group with 4 updates in the / directory: com.android.tools.build:gradle, [io.netty:netty-codec-http](https://github.com/netty/netty), com.google.firebase:firebase-bom and androidx.compose:compose-bom.\n\nUpdates `com.android.tools.build:gradle` from 9.2.0 to 9.2.1\n\nUpdates `io.netty:netty-codec-http` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-handler` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-handler's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-common` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.google.firebase:firebase-bom` from 34.12.0 to 34.13.0\n\nUpdates `androidx.compose:compose-bom` from 2026.04.01 to 2026.05.00\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AndroidIRCx/NULVEX/pull/53","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AndroidIRCx%2FNULVEX/issues/53","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/53/packages"}},{"old_version":"4.2.12.Final","new_version":"4.2.13.Final","update_type":"patch","path":"/backend","pr_created_at":"2026-05-08T00:09:00.000Z","version_change":"4.2.12.Final → 4.2.13.Final","issue":{"uuid":"4402766546","node_id":"PR_kwDOKyk85s7ZWI67","number":2312,"state":"closed","title":"chore(deps): bump the all-backend-non-major-dependencies group in /backend with 3 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-11T00:09:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-08T00:09:00.000Z","updated_at":"2026-05-11T00:09:49.000Z","time_to_close":259247,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"all-backend-non-major-dependencies","update_count":3,"packages":[{"name":"software.amazon.awssdk:bom","old_version":"2.44.0","new_version":"2.44.1"},{"name":"io.netty:netty-codec-http2","old_version":"4.2.12.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec","old_version":"4.1.133.Final","new_version":"4.2.13.Final","repository_url":"https://github.com/netty/netty"}],"path":"/backend","ecosystem":"maven"},"body":"Bumps the all-backend-non-major-dependencies group in /backend with 3 updates: software.amazon.awssdk:bom, [io.netty:netty-codec-http2](https://github.com/netty/netty) and [io.netty:netty-codec](https://github.com/netty/netty).\n\nUpdates `software.amazon.awssdk:bom` from 2.44.0 to 2.44.1\n\nUpdates `io.netty:netty-codec-http2` from 4.2.12.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec` from 4.1.133.Final to 4.2.13.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e (netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e (netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e (netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e (netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e (netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e (netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e (netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e (netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e (netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn't advance offset — data duplication by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating the SSLContext by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca href=\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in MqttProperties#isEmpty by \u003ca href=\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in /codec-native-quic by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca href=\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca href=\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling errors by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e Fix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e Fix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e Fix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.133.Final...netty-4.2.13.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/digitalservicebund/ris-norms/pull/2312","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/digitalservicebund%2Fris-norms/issues/2312","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2312/packages"}},{"old_version":"4.1.89.Final","new_version":"4.1.132.Final","update_type":"patch","path":null,"pr_created_at":"2026-05-02T04:16:06.000Z","version_change":"4.1.89.Final → 4.1.132.Final","issue":{"uuid":"4367871133","node_id":"PR_kwDOAICTps7Xl329","number":1986,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.89.Final to 4.1.132.Final","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-02T22:22:52.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-02T04:16:06.000Z","updated_at":"2026-05-02T22:23:01.000Z","time_to_close":65206,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.89.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"}],"path":null,"ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.89.Final to 4.1.132.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.89.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.89.Final\u0026new-version=4.1.132.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mock-server/mockserver/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/mock-server/mockserver/pull/1986","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mock-server%2Fmockserver/issues/1986","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1986/packages"}},{"old_version":"4.1.118.Final","new_version":"4.1.132.Final","update_type":"patch","path":"/docker_images/java/wrapper","pr_created_at":"2026-05-01T22:12:16.000Z","version_change":"4.1.118.Final → 4.1.132.Final","issue":{"uuid":"4366889374","node_id":"PR_kwDOCeOXyM7Xiwlw","number":395,"state":"closed","title":"chore(deps): Bump io.netty:netty-codec-http2 from 4.1.118.Final to 4.1.132.Final in /docker_images/java/wrapper","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-08T16:28:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-01T22:12:16.000Z","updated_at":"2026-05-08T16:28:59.000Z","time_to_close":584201,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.118.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"}],"path":"/docker_images/java/wrapper","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.118.Final to 4.1.132.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.1.118.Final\u0026new-version=4.1.132.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Azure/iot-sdks-e2e-fx/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Azure/iot-sdks-e2e-fx/pull/395","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Azure%2Fiot-sdks-e2e-fx/issues/395","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/395/packages"}},{"old_version":"4.1.127.Final","new_version":"4.2.12.Final","update_type":"minor","path":"/apps/nbs-gateway","pr_created_at":"2026-04-28T10:50:12.000Z","version_change":"4.1.127.Final → 4.2.12.Final","issue":{"uuid":"4342529288","node_id":"PR_kwDOH66yGc7WTMYO","number":3192,"state":"closed","title":"build(deps): bump io.netty:netty-codec-http2 from 4.1.127.Final to 4.2.12.Final in /apps/nbs-gateway","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-29T18:28:45.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-28T10:50:12.000Z","updated_at":"2026-04-29T18:28:55.000Z","time_to_close":113913,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.127.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"}],"path":"/apps/nbs-gateway","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.1.127.Final to 4.2.12.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.127.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=gradle\u0026previous-version=4.1.127.Final\u0026new-version=4.2.12.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/CDCgov/NEDSS-Modernization/pull/3192","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/CDCgov%2FNEDSS-Modernization/issues/3192","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3192/packages"}},{"old_version":"4.2.9.Final","new_version":"4.2.10.Final","update_type":"patch","path":"/dusseldorf-ktor-streams","pr_created_at":"2026-04-15T00:01:30.000Z","version_change":"4.2.9.Final → 4.2.10.Final","issue":{"uuid":"4265420540","node_id":"PR_kwDOCpk-587SeV9E","number":1027,"state":"open","title":"Bump io.netty:netty-codec-http2 from 4.2.9.Final to 4.2.10.Final in /dusseldorf-ktor-streams","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-15T00:01:30.000Z","updated_at":"2026-04-15T00:02:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.2.9.Final","new_version":"4.2.10.Final","repository_url":"https://github.com/netty/netty"}],"path":"/dusseldorf-ktor-streams","ecosystem":"maven"},"body":"Bumps [io.netty:netty-codec-http2](https://github.com/netty/netty) from 4.2.9.Final to 4.2.10.Final.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/4cc98736c3947bc93122e0b64e0bd8fc970c6437\"\u003e\u003ccode\u003e4cc9873\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.10.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/54b8663619577749511269a4149adf018438c8b0\"\u003e\u003ccode\u003e54b8663\u003c/code\u003e\u003c/a\u003e Remove unnecessary allocations and abstractions in HttpContentCompressor (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/961f427289730cd1ff92b734ddeea8dd0b7d276a\"\u003e\u003ccode\u003e961f427\u003c/code\u003e\u003c/a\u003e Update to netty-tcnative 2.0.75.Final (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16227\"\u003e#16227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3007ba9d2853a03d3d0281be1ec9b358e48170b1\"\u003e\u003ccode\u003e3007ba9\u003c/code\u003e\u003c/a\u003e Use recommanded finalize chain pattern when override finalize() method (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16212\"\u003e#16212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/b91804287e0e06e8ca9da5e508f0490f9b7e4ad9\"\u003e\u003ccode\u003eb918042\u003c/code\u003e\u003c/a\u003e Update some dependencies (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16198\"\u003e#16198\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16215\"\u003e#16215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/874c99529e1db187cc3f5346f5f8ffea94e34f0c\"\u003e\u003ccode\u003e874c995\u003c/code\u003e\u003c/a\u003e Reduce allocations on DefaultHeaders::containsValue (\u003ca href=\"https://redirect.github.com/netty/netty/issues/15843\"\u003e#15843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/e0fe7940ce6070be48b8cb5af22ce9e7e4813ec2\"\u003e\u003ccode\u003ee0fe794\u003c/code\u003e\u003c/a\u003e Remove unnecessary null check in WebSocketServerExtensionHandler (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16201\"\u003e#16201\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/1b0636b7ac773052c1fefe7f86593e655aacb1b4\"\u003e\u003ccode\u003e1b0636b\u003c/code\u003e\u003c/a\u003e Move default compression options into static variable in HttpContentCompresso...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/85a3a0ee8d67bac9f6a85aa6444e0805564fffc6\"\u003e\u003ccode\u003e85a3a0e\u003c/code\u003e\u003c/a\u003e codec-http2: move the accessors from Http2Headers to DefaultHttp2Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/f44a88d340580510cb3a94e454c10cb949dc07fd\"\u003e\u003ccode\u003ef44a88d\u003c/code\u003e\u003c/a\u003e Improve chunk picking for the large-size buddy allocator (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16179\"\u003e#16179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.9.Final...netty-4.2.10.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-codec-http2\u0026package-manager=maven\u0026previous-version=4.2.9.Final\u0026new-version=4.2.10.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/navikt/dusseldorf-ktor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/navikt/dusseldorf-ktor/pull/1027","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/navikt%2Fdusseldorf-ktor/issues/1027","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1027/packages"}},{"old_version":"4.1.132.Final","new_version":"4.2.12.Final","update_type":"minor","path":null,"pr_created_at":"2026-04-13T02:04:35.000Z","version_change":"4.1.132.Final → 4.2.12.Final","issue":{"uuid":"4250771191","node_id":"PR_kwDOCQrD6s7R2Jx5","number":3491,"state":"open","title":"Bump the minor-and-patch-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-13T02:04:35.000Z","updated_at":"2026-04-13T02:20:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch-dependencies","update_count":5,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.azure:azure-cosmos","old_version":"4.79.0","new_version":"4.79.1","repository_url":"https://github.com/Azure/azure-sdk-for-java"},{"name":"com.azure:azure-storage-blob","old_version":"12.33.0","new_version":"12.33.3","repository_url":"https://github.com/Azure/azure-sdk-for-java"},{"name":"com.google.cloud:google-cloud-storage","old_version":"2.64.1","new_version":"2.66.0","repository_url":"https://github.com/googleapis/google-cloud-java"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch-dependencies group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` |\n| [com.azure:azure-cosmos](https://github.com/Azure/azure-sdk-for-java) | `4.79.0` | `4.79.1` |\n| [com.azure:azure-storage-blob](https://github.com/Azure/azure-sdk-for-java) | `12.33.0` | `12.33.3` |\n| [com.google.cloud:google-cloud-storage](https://github.com/googleapis/google-cloud-java) | `2.64.1` | `2.66.0` |\n\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-cosmos` from 4.79.0 to 4.79.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-cosmos's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-cosmos_4.79.1\u003c/h2\u003e\n\u003ch3\u003e4.79.1 (2026-04-06)\u003c/h3\u003e\n\u003ch4\u003eBugs Fixed\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFixing an NPE caused due to boxed Boolean conversion. - See \u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/pull/48656/\"\u003ePR 48656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/a8a49e90a67c5c6794c9f5f2baa12a1778473b7f\"\u003e\u003ccode\u003ea8a49e9\u003c/code\u003e\u003c/a\u003e Release azure-cosmos 4.79.1 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48700\"\u003e#48700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0be98b6357d0edf37b3246e07fc4ad18f45c4560\"\u003e\u003ccode\u003e0be98b6\u003c/code\u003e\u003c/a\u003e Temporarily Disabling Immutable Storage with Versioning Tests During Diagnost...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/beeb599f0f61ed78f6f8416a67e0f13fdf968ac8\"\u003e\u003ccode\u003ebeeb599\u003c/code\u003e\u003c/a\u003e fix: reset metrics registry per benchmark cycle (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48695\"\u003e#48695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/966398c33e04ffc4b4312d094b06b5527dafc884\"\u003e\u003ccode\u003e966398c\u003c/code\u003e\u003c/a\u003e Set default service version to 2025-07-01 for keyvault secrets (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48690\"\u003e#48690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0ce561cb8496d86d7c6161e67b6d12e7a40fe1d3\"\u003e\u003ccode\u003e0ce561c\u003c/code\u003e\u003c/a\u003e [Key Vault Certificates] Remove preview service version from GA library (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48678\"\u003e#48678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/56dab1344a69eb23c7878801deae928d70d4683a\"\u003e\u003ccode\u003e56dab13\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14922 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48696\"\u003e#48696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/26c01acfa9861f2c36f1b8d9c29cb62a87abfc0a\"\u003e\u003ccode\u003e26c01ac\u003c/code\u003e\u003c/a\u003e March 2026 Patches Merge-back (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48665\"\u003e#48665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/dec14b84ace4ecd2e40b8c6a1d4a6170d9427fda\"\u003e\u003ccode\u003edec14b8\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14890 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48686\"\u003e#48686\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/432a58725e722421c6b0618432c6922b5c8a38d6\"\u003e\u003ccode\u003e432a587\u003c/code\u003e\u003c/a\u003e Clean up azure-identity README (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48685\"\u003e#48685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/9336a4bd0c47b2fe017b4d77bc924cc04a3718cf\"\u003e\u003ccode\u003e9336a4b\u003c/code\u003e\u003c/a\u003e [EventHubs] Migrate to TypeSpec (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48673\"\u003e#48673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-cosmos_4.79.0...com.azure+azure-cosmos_4.79.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-storage-blob` from 12.33.0 to 12.33.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-storage-blob's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-storage-blob_12.33.3\u003c/h2\u003e\n\u003ch2\u003e12.33.3 (2026-03-30)\u003c/h2\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003ch4\u003eDependency Updates\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded \u003ccode\u003eazure-storage-internal-avro\u003c/code\u003e from \u003ccode\u003e12.18.1\u003c/code\u003e to version \u003ccode\u003e12.18.2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/2090030db4739f8824d8e76cb659bc0066258c1f\"\u003e\u003ccode\u003e2090030\u003c/code\u003e\u003c/a\u003e Prepare patch release 20260330 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48640\"\u003e#48640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/d55cdf5cc240dfdf979a1be2dc2fc59544a993fd\"\u003e\u003ccode\u003ed55cdf5\u003c/code\u003e\u003c/a\u003e [AutoPR azure-resourcemanager-search]-generated-from-SDK Generation - Java-60...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/51f7888a9033a6dbce3e2a6579372bed8bfae10b\"\u003e\u003ccode\u003e51f7888\u003c/code\u003e\u003c/a\u003e Temporarily hiding tsplocation for azure-ai-agents/projects. (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48633\"\u003e#48633\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/076a5ed74bc5737e3e4732a4e5f56ff4ee4e9864\"\u003e\u003ccode\u003e076a5ed\u003c/code\u003e\u003c/a\u003e Increment package versions for cosmos releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48616\"\u003e#48616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/b051200eb3632858bd05fc60c5751fedb7b2d0e4\"\u003e\u003ccode\u003eb051200\u003c/code\u003e\u003c/a\u003e Increment package versions for appservice releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48628\"\u003e#48628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/c37240c5e543423c50502d51b98e2e5d3f437ecb\"\u003e\u003ccode\u003ec37240c\u003c/code\u003e\u003c/a\u003e Upgrade external dependencies to align with Spring Boot 4.0.5 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48604\"\u003e#48604\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/01c3b17740113da4b02d565305494b30dd924432\"\u003e\u003ccode\u003e01c3b17\u003c/code\u003e\u003c/a\u003e [AppService] Regenerate SDK with naming compatibility fixes (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48626\"\u003e#48626\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/07308a96bee5bd569fb5c9ffe5c28ba59c567b91\"\u003e\u003ccode\u003e07308a9\u003c/code\u003e\u003c/a\u003e Configurations:  'specification/storagemover/StorageMover.Management/tspconfi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/10cd2553c38b3f5a22af7a8b8ff2d887803e0d21\"\u003e\u003ccode\u003e10cd255\u003c/code\u003e\u003c/a\u003e Final Java Fixes (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48620\"\u003e#48620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/59b98c1fd282415b4ed3a264f7e73a51bd3076ec\"\u003e\u003ccode\u003e59b98c1\u003c/code\u003e\u003c/a\u003e bump deps for spelling and tsp-client - npm update --before 2026-03-24 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48600\"\u003e#48600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-storage-blob_12.33.0...com.azure+azure-storage-blob_12.33.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.google.cloud:google-cloud-storage` from 2.64.1 to 2.66.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-java/blob/main/java-document-ai/CHANGELOG.md\"\u003ecom.google.cloud:google-cloud-storage's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.66.0 (2025-05-06)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.46.3 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11531\"\u003e#11531\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/5f9a9e73df5e44ae38a8d18780873b7896d31c04\"\u003e5f9a9e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.47.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11561\"\u003e#11561\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/9e842300aa2e3e654785cc929aef0d6bb9a1a0a9\"\u003e9e84230\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.63.0 (2025-02-26)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.44.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11456\"\u003e#11456\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/6b0ad6f8243cc60de7ee608237fa61445f0b0526\"\u003e6b0ad6f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.62.0 (2025-02-11)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11426\"\u003e#11426\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/afdc2944304a077ce4cbdd8c7675f1ca707b2be0\"\u003eafdc294\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.61.0 (2025-01-29)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.42.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11410\"\u003e#11410\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/34dfd0dc9c5ca042aca0778e8d34b2ca072bfeb1\"\u003e34dfd0d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.60.0 (2025-01-09)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.41.1 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11382\"\u003e#11382\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/a4fd23ce1dfa364959de1e97e3b769996f3c7d0d\"\u003ea4fd23c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.59.0 (2024-12-13)\u003c/h2\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate dependency com.google.cloud:sdk-platform-java-config to v3.41.0 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-java/issues/11349\"\u003e#11349\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-java/commit/9bb6334458fdec53ba9fdec501de534d6516f102\"\u003e9bb6334\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.58.0 (2024-11-18)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNo change\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.57.0 (2024-10-28)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/google-cloud-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| io.netty:netty-codec-http | [\u003e= 4.2.a, \u003c 4.3] |\n\u003c/details\u003e\n","html_url":"https://github.com/scalar-labs/scalardb/pull/3491","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/scalar-labs%2Fscalardb/issues/3491","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3491/packages"}},{"old_version":"4.1.132.Final","new_version":"4.2.12.Final","update_type":"minor","path":null,"pr_created_at":"2026-04-12T16:03:50.000Z","version_change":"4.1.132.Final → 4.2.12.Final","issue":{"uuid":"4248767706","node_id":"PR_kwDOCQrD6s7RycEU","number":3489,"state":"closed","title":"Bump the minor-and-patch-dependencies group with 3 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":"2026-04-13T02:03:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-12T16:03:50.000Z","updated_at":"2026-04-13T02:03:52.000Z","time_to_close":36000,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-and-patch-dependencies","update_count":3,"packages":[{"name":"io.netty:netty-codec-http","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.132.Final","new_version":"4.2.12.Final","repository_url":"https://github.com/netty/netty"},{"name":"com.azure:azure-cosmos","old_version":"4.79.0","new_version":"4.79.1","repository_url":"https://github.com/Azure/azure-sdk-for-java"}],"path":null,"ecosystem":"maven"},"body":"Bumps the minor-and-patch-dependencies group with 3 updates: [io.netty:netty-codec-http](https://github.com/netty/netty), [io.netty:netty-codec-http2](https://github.com/netty/netty) and [com.azure:azure-cosmos](https://github.com/Azure/azure-sdk-for-java).\n\nUpdates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by \u003ca href=\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca href=\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but no… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca href=\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca href=\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side QuicheChannel by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating the remote connection id by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca href=\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is unknown by \u003ca href=\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by \u003ca href=\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by \u003ca href=\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests  by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf accessors\u0026quot; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e Eliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e JdkZlibDecoder: accumulate decompressed output before firing channelRead (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e Enforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e Allocate less in QueryStringDecoder.addParam for typical use case (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.132.Final...netty-4.2.12.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.azure:azure-cosmos` from 4.79.0 to 4.79.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/releases\"\u003ecom.azure:azure-cosmos's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ecom.azure+azure-cosmos_4.79.1\u003c/h2\u003e\n\u003ch3\u003e4.79.1 (2026-04-06)\u003c/h3\u003e\n\u003ch4\u003eBugs Fixed\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFixing an NPE caused due to boxed Boolean conversion. - See \u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/pull/48656/\"\u003ePR 48656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/a8a49e90a67c5c6794c9f5f2baa12a1778473b7f\"\u003e\u003ccode\u003ea8a49e9\u003c/code\u003e\u003c/a\u003e Release azure-cosmos 4.79.1 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48700\"\u003e#48700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0be98b6357d0edf37b3246e07fc4ad18f45c4560\"\u003e\u003ccode\u003e0be98b6\u003c/code\u003e\u003c/a\u003e Temporarily Disabling Immutable Storage with Versioning Tests During Diagnost...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/beeb599f0f61ed78f6f8416a67e0f13fdf968ac8\"\u003e\u003ccode\u003ebeeb599\u003c/code\u003e\u003c/a\u003e fix: reset metrics registry per benchmark cycle (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48695\"\u003e#48695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/966398c33e04ffc4b4312d094b06b5527dafc884\"\u003e\u003ccode\u003e966398c\u003c/code\u003e\u003c/a\u003e Set default service version to 2025-07-01 for keyvault secrets (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48690\"\u003e#48690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/0ce561cb8496d86d7c6161e67b6d12e7a40fe1d3\"\u003e\u003ccode\u003e0ce561c\u003c/code\u003e\u003c/a\u003e [Key Vault Certificates] Remove preview service version from GA library (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48678\"\u003e#48678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/56dab1344a69eb23c7878801deae928d70d4683a\"\u003e\u003ccode\u003e56dab13\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14922 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48696\"\u003e#48696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/26c01acfa9861f2c36f1b8d9c29cb62a87abfc0a\"\u003e\u003ccode\u003e26c01ac\u003c/code\u003e\u003c/a\u003e March 2026 Patches Merge-back (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48665\"\u003e#48665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/dec14b84ace4ecd2e40b8c6a1d4a6170d9427fda\"\u003e\u003ccode\u003edec14b8\u003c/code\u003e\u003c/a\u003e Sync eng/common directory with azure-sdk-tools for PR 14890 (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48686\"\u003e#48686\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/432a58725e722421c6b0618432c6922b5c8a38d6\"\u003e\u003ccode\u003e432a587\u003c/code\u003e\u003c/a\u003e Clean up azure-identity README (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48685\"\u003e#48685\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-java/commit/9336a4bd0c47b2fe017b4d77bc924cc04a3718cf\"\u003e\u003ccode\u003e9336a4b\u003c/code\u003e\u003c/a\u003e [EventHubs] Migrate to TypeSpec (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-java/issues/48673\"\u003e#48673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-java/compare/com.azure+azure-cosmos_4.79.0...com.azure+azure-cosmos_4.79.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/scalar-labs/scalardb/pull/3489","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/scalar-labs%2Fscalardb/issues/3489","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3489/packages"}},{"old_version":"4.1.129.Final","new_version":"4.1.132.Final","update_type":"patch","path":null,"pr_created_at":"2026-04-10T23:22:33.000Z","version_change":"4.1.129.Final → 4.1.132.Final","issue":{"uuid":"4242176397","node_id":"PR_kwDOIdXQSs7RlzU0","number":12,"state":"closed","title":"Bump the maven group across 8 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","java","type:build","module:mixed-spark","module:mixed-trino","module:mixed-flink"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-14T00:24:36.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T23:22:33.000Z","updated_at":"2026-04-14T00:24:37.000Z","time_to_close":262923,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":9,"packages":[{"name":"org.apache.commons:commons-compress","old_version":"1.23.0","new_version":"1.26.0"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.13.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.20.0","new_version":"2.25.4"},{"name":"org.apache.derby:derby","old_version":"10.14.2.0","new_version":"10.17.1.0"},{"name":"io.netty:netty-codec-http2","old_version":"4.1.129.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.hive:hive-exec","old_version":"2.1.1","new_version":"4.0.1"},{"name":"org.assertj:assertj-core","old_version":"3.21.0","new_version":"3.27.7","repository_url":"https://github.com/assertj/assertj"},{"name":"org.apache.avro:avro","old_version":"1.10.1","new_version":"1.11.4"},{"name":"commons-io:commons-io","old_version":"2.4","new_version":"2.14.0"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.apache.commons:commons-compress | `1.23.0` | `1.26.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.13.5` | `2.18.6` |\n| org.apache.logging.log4j:log4j-core | `2.20.0` | `2.25.4` |\n| org.apache.derby:derby | `10.14.2.0` | `10.17.1.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.129.Final` | `4.1.132.Final` |\n| org.apache.hive:hive-exec | `2.1.1` | `4.0.1` |\n| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.21.0` | `3.27.7` |\n| org.apache.avro:avro | `1.10.1` | `1.11.4` |\n| commons-io:commons-io | `2.4` | `2.14.0` |\n\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-flink/amoro-mixed-flink-common directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-flink/amoro-mixed-flink-common-iceberg-bridge directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.3/amoro-mixed-spark-3.3 directory: org.apache.hive:hive-exec.\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.4/amoro-mixed-spark-3.4 directory: org.apache.hive:hive-exec.\nBumps the maven group with 1 update in the /amoro-format-mixed/amoro-mixed-spark/v3.5/amoro-mixed-spark-3.5 directory: org.apache.hive:hive-exec.\nBumps the maven group with 3 updates in the /amoro-format-mixed/amoro-mixed-trino directory: org.apache.hive:hive-exec, org.apache.avro:avro and commons-io:commons-io.\nBumps the maven group with 6 updates in the /amoro-openapi-sdk directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| org.apache.commons:commons-compress | `1.23.0` | `1.26.0` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.13.5` | `2.18.6` |\n| org.apache.logging.log4j:log4j-core | `2.20.0` | `2.25.4` |\n| org.apache.derby:derby | `10.14.2.0` | `10.17.1.0` |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.129.Final` | `4.1.132.Final` |\n| org.apache.hive:hive-exec | `3.1.3` | `4.0.1` |\n\n\nUpdates `org.apache.commons:commons-compress` from 1.23.0 to 1.26.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.13.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.13.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4\n\nUpdates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.129.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 2.1.1 to 4.0.1\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.avro:avro` from 1.10.1 to 1.11.4\n\nUpdates `commons-io:commons-io` from 2.4 to 2.14.0\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.assertj:assertj-core` from 3.21.0 to 3.27.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/assertj/assertj/releases\"\u003eorg.assertj:assertj-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.27.7\u003c/h2\u003e\n\u003ch2\u003e:lock: Security\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix XXE vulnerability in \u003ccode\u003eisXmlEqualTo\u003c/code\u003e assertion (CVE-2026-24400)\n\u003cul\u003e\n\u003cli\u003eSee GHSA-rqfh-9r24-8c9r for details; many thanks to \u003ca href=\"https://github.com/wxt201\"\u003e\u003ccode\u003e@​wxt201\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Song-Li\"\u003e\u003ccode\u003e@​Song-Li\u003c/code\u003e\u003c/a\u003e for responsibly reporting it!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:no_entry_sign: Deprecated\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e with no replacement\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNavigation to \u003ccode\u003eassertj-core\u003c/code\u003e or \u003ccode\u003eguava\u003c/code\u003e types from \u003ccode\u003eassertj-guava\u003c/code\u003e Javadoc site has unnecessary header \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3478\"\u003e#3478\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:hammer: Dependency Upgrades\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Byte Buddy 1.18.3\u003c/li\u003e\n\u003cli\u003eUpgrade to JUnit BOM 5.14.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eGuava\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Guava 33.5.0-jre\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.27.6\u003c/h2\u003e\n\u003ch2\u003e:bug: Bug Fixes\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd missing export for \u003ccode\u003eorg.assertj.core.annotation\u003c/code\u003e \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3951\"\u003e#3951\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e:heart: Contributors\u003c/h2\u003e\n\u003cp\u003eThanks to all the contributors who worked on this release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/duponter\"\u003e\u003ccode\u003e@​duponter\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.27.5\u003c/h2\u003e\n\u003ch2\u003e:zap: Improvements\u003c/h2\u003e\n\u003ch3\u003eCore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eByteBuddy in AssertJ 3.27.4 not compatible with Java 25 \u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3946\"\u003e#3946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db\"\u003e\u003ccode\u003ee840716\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release assertj-build-3.27.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a\"\u003e\u003ccode\u003e85ca7eb\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003eXmlStringPrettyFormatter\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341\"\u003e\u003ccode\u003e77081dc\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823\"\u003e\u003ccode\u003eb68fc24\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3\"\u003e\u003ccode\u003e0cf5bb6\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003ekotlin.version\u003c/code\u003e from 2.1.0 to 2.2.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126\"\u003e\u003ccode\u003ed393ef1\u003c/code\u003e\u003c/a\u003e Abort tests when symbolic links cannot be created (\u003ca href=\"https://redirect.github.com/assertj/assertj/issues/3788\"\u003e#3788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1\"\u003e\u003ccode\u003e2212433\u003c/code\u003e\u003c/a\u003e Add IntelliJ custom inspection for test class names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1\"\u003e\u003ccode\u003e5717d02\u003c/code\u003e\u003c/a\u003e Update JetBrains icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c\"\u003e\u003ccode\u003ea8ec20b\u003c/code\u003e\u003c/a\u003e Add icon for JetBrains products\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe\"\u003e\u003ccode\u003ec05fb3d\u003c/code\u003e\u003c/a\u003e Bump Maven to 3.9.12 and Wrapper to 3.3.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/assertj/assertj/compare/assertj-core-3.21.0...assertj-build-3.27.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.3.9 to 4.0.1\n\nUpdates `org.apache.hive:hive-exec` from 2.1.1 to 4.0.1\n\nUpdates `org.apache.avro:avro` from 1.10.1 to 1.11.4\n\nUpdates `commons-io:commons-io` from 2.4 to 2.14.0\n\nUpdates `org.apache.commons:commons-compress` from 1.23.0 to 1.26.0\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.13.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.13.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4\n\nUpdates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.129.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.129.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.hive:hive-exec` from 3.1.3 to 4.0.1\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/xxubai/amoro/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/xxubai/amoro/pull/12","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xxubai%2Famoro/issues/12","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/12/packages"}},{"old_version":"4.1.32.Final","new_version":"4.1.132.Final","update_type":"patch","path":null,"pr_created_at":"2026-04-10T21:37:12.000Z","version_change":"4.1.32.Final → 4.1.132.Final","issue":{"uuid":"4241853856","node_id":"PR_kwDODFDo0s7Rk1HS","number":4,"state":"closed","title":"Bump the maven group across 8 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","java"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-14T01:11:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T21:37:12.000Z","updated_at":"2026-04-14T01:11:49.000Z","time_to_close":272075,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"maven","update_count":8,"packages":[{"name":"io.netty:netty-codec-http2","old_version":"4.1.32.Final","new_version":"4.1.132.Final","repository_url":"https://github.com/netty/netty"},{"name":"org.apache.commons:commons-lang3","old_version":"3.4","new_version":"3.18.0"},{"name":"org.apache.logging.log4j:log4j-core","old_version":"2.10.0","new_version":"2.25.4"},{"name":"com.fasterxml.jackson.core:jackson-core","old_version":"2.6.5","new_version":"2.18.6","repository_url":"https://github.com/FasterXML/jackson-core"},{"name":"com.jamesmurty.utils:java-xmlbuilder","old_version":"1.1","new_version":"1.2","repository_url":"https://github.com/jmurty/java-xmlbuilder"},{"name":"org.apache.solr:solr-solrj","old_version":"7.5.0","new_version":"8.11.3"}],"path":null,"ecosystem":"maven"},"body":"Bumps the maven group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.132.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.6.5` | `2.18.6` |\n| [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder) | `1.1` | `1.2` |\n| org.apache.solr:solr-solrj | `7.5.0` | `8.11.3` |\n\nBumps the maven group with 1 update in the /buildtools directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 1 update in the /examples/flink directory: org.apache.logging.log4j:log4j-core.\nBumps the maven group with 2 updates in the /pulsar-io/solr directory: org.apache.commons:commons-lang3 and org.apache.solr:solr-solrj.\nBumps the maven group with 1 update in the /pulsar-io/twitter directory: org.apache.commons:commons-lang3.\nBumps the maven group with 5 updates in the /pulsar-sql directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.32.Final` | `4.1.132.Final` |\n| org.apache.commons:commons-lang3 | `3.4` | `3.18.0` |\n| org.apache.logging.log4j:log4j-core | `2.10.0` | `2.25.4` |\n| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.8.11` | `2.18.6` |\n| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.8.11.4` | `2.12.7.1` |\n\nBumps the maven group with 2 updates in the /pulsar-sql/presto-distribution directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).\nBumps the maven group with 1 update in the /tiered-storage/jcloud directory: [com.jamesmurty.utils:java-xmlbuilder](https://github.com/jmurty/java-xmlbuilder).\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.6.5 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.6.5 to 2.8.11.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.solr:solr-solrj` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.solr:solr-core` from 7.5.0 to 8.11.3\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `io.netty:netty-codec-http2` from 4.1.32.Final to 4.1.132.Final\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-codec-http2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.1.132.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2 CONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca href=\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP Request Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry lo… by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16248\"\u003enetty/netty#16248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16253\"\u003e#16253\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16257\"\u003enetty/netty#16257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16255\"\u003e#16255\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16263\"\u003enetty/netty#16263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16265\"\u003enetty/netty#16265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16254\"\u003e#16254\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16267\"\u003enetty/netty#16267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Automatic backporting workflow from 4.1 to 4.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16274\"\u003enetty/netty#16274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Backport PRs must be created with personal access tokens by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16277\"\u003enetty/netty#16277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Add more porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16284\"\u003enetty/netty#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Some polishing of the porting workflows by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16292\"\u003enetty/netty#16292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport 4.1: Fix high-order bit aliasing in HttpUtil.validateToken by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16303\"\u003enetty/netty#16303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Support more branch freedom for auto-porting by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16310\"\u003enetty/netty#16310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16312\"\u003e#16312\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16316\"\u003enetty/netty#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater th… by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16320\"\u003enetty/netty#16320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky PooledByteBufAllocatorTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16324\"\u003enetty/netty#16324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix pooled arena accounting tests  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16326\"\u003enetty/netty#16326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix RunInFastThreadLocalThreadExtension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16328\"\u003enetty/netty#16328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: AdaptivePoolingAllocator: call \u003ccode\u003eunreserveMatchingBuddy(...)\u003c/code\u003e if \u003ccode\u003ebyteBuf\u003c/code\u003e initialization failed by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16331\"\u003enetty/netty#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Mark LoggingHandlerTest with \u003ca href=\"https://github.com/Isolated\"\u003e\u003ccode\u003e@​Isolated\u003c/code\u003e\u003c/a\u003e to fix flaky build by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16340\"\u003enetty/netty#16340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky HTTP/2 test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16348\"\u003enetty/netty#16348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix flaky RenegotiateTest by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16355\"\u003enetty/netty#16355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix HTTP/2 push frame test by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16353\"\u003enetty/netty#16353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSSL test: Don't depend on property value in test (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16346\"\u003e#16346\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16362\"\u003enetty/netty#16362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Don't assume CertificateFactory is thread-safe by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16364\"\u003enetty/netty#16364\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptivePoolingAllocator: assign a more explicit value to BuddyChunk.freeListCapacity (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16334\"\u003e#16334\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16368\"\u003enetty/netty#16368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Add more diagnostic points to PooledByteBufAllocatorTest.createNewThr… by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16372\"\u003enetty/netty#16372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix leak in SniHandlerTest (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16367\"\u003e#16367\u003c/a\u003e) by \u003ca href=\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16377\"\u003enetty/netty#16377\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testBytesInArrayMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16373\"\u003enetty/netty#16373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove reference counting from size classed chunks (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16306\"\u003e#16306\u003c/a\u003e) by \u003ca href=\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16379\"\u003enetty/netty#16379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Stabilize AbstractByteBufTest.testToStringMultipleThreads by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16384\"\u003enetty/netty#16384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HttpObjectAggregator leaving connection stuck after 413 with AUTO… by \u003ca href=\"https://github.com/samlandfried\"\u003e\u003ccode\u003e@​samlandfried\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16280\"\u003enetty/netty#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix autoport fetching into the existing branch - again by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16417\"\u003enetty/netty#16417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Capture why threads get stuck in testCopyMultipleThreads0 by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16419\"\u003enetty/netty#16419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Remove unnecessary array access in DefaultAttributeMap.orderedCopyOnInsert by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16421\"\u003enetty/netty#16421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Whitelist JMH annotation processing in microbench module by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16430\"\u003enetty/netty#16430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: HTTP2: Ensure preface is flushed in all cases  by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16432\"\u003enetty/netty#16432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16437\"\u003enetty/netty#16437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Fix client_max_window_bits parameter handling in permessage-deflate extension by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16435\"\u003enetty/netty#16435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix possible fd leak when fcntl fails. by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16446\"\u003enetty/netty#16446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Fix undefined behaviour when GetStringUTFChars fails and SO_ACCEPTFILTER is supported by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16448\"\u003enetty/netty#16448\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Kqueue: Possible overflow when using netty_kqueue_bsdsocket_setAcceptFilter(...) by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16459\"\u003enetty/netty#16459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Native transports: Fix undefined behaviour when GetStringUTFChars fails while open FD by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16456\"\u003enetty/netty#16456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: Epoll: Add null checks for safety reasons by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16463\"\u003enetty/netty#16463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to the same port by \u003ca href=\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/netty/netty/pull/16464\"\u003enetty/netty#16464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/ec119d487b3a27e4ac118e7e1d97f0c96a85f4a3\"\u003e\u003ccode\u003eec119d4\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release netty-4.1.132.Final\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819\"\u003e\u003ccode\u003e60e53c9\u003c/code\u003e\u003c/a\u003e Stricter HTTP/1.1 chunk extension parsing (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16537\"\u003e#16537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/9f47a7b6846e6c7cb0481789be51788944042b85\"\u003e\u003ccode\u003e9f47a7b\u003c/code\u003e\u003c/a\u003e Limit the number of Continuation frames per HTTP2 Headers (\u003ca href=\"https://redirect.github.com/netty/netty/issues/13969\"\u003e#13969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/10c1603cbab5e72a029521058eb35e15a8b7c7c5\"\u003e\u003ccode\u003e10c1603\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: JdkZlibDecoder: accumulate decompressed output before firing c...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/df6599790dc2c6810e253e9a14903f450e7aeffe\"\u003e\u003ccode\u003edf65997\u003c/code\u003e\u003c/a\u003e Epoll: setTcpMg5Sig(...) might overflow (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16511\"\u003e#16511\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16520\"\u003e#16520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/692ec8772dffdfbc9f3dc57bb4379d9338822ebd\"\u003e\u003ccode\u003e692ec87\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: Fix assertion for size class multipl...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/3ac3f37e6dcfec658f4cb02935452ea25bb891f5\"\u003e\u003ccode\u003e3ac3f37\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: AdaptivePoolingAllocator: remove \u003ccode\u003eensureAccessible()\u003c/code\u003e call in ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/5a0072ba96adde85936cb511cb8e24aef0bda811\"\u003e\u003ccode\u003e5a0072b\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Fix support for IP_RECVORIGDSTADDR (\u003ca href=\"https://redirect.github.com/netty/netty/issues/16468\"\u003e#16468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/779fce7ff70da741633c22ec80870008fa655d35\"\u003e\u003ccode\u003e779fce7\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: Epoll: Use correct value to initialize mmsghdr.msg_namelen (\u003ca href=\"https://redirect.github.com/netty/netty/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/netty/netty/commit/56d84e13175d1f33f6d8732e2bdd0e36d32db9a7\"\u003e\u003ccode\u003e56d84e1\u003c/code\u003e\u003c/a\u003e Auto-port 4.1: DnsNameResolver: Skip test if we can not bind TCP and UDP to t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/netty/netty/compare/netty-4.1.32.Final...netty-4.1.132.Final\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.commons:commons-lang3` from 3.4 to 3.18.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.10.0 to 2.25.4\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.8.11 to 2.18.6\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/9a46ef8ccac2f15cba1c82059fbcc3883798478a\"\u003e\u003ccode\u003e9a46ef8\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release jackson-core-2.18.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/5f192db9c84c1e7a9e6ab7f631a77d4ac0719cb4\"\u003e\u003ccode\u003e5f192db\u003c/code\u003e\u003c/a\u003e Prep for 2.18.6 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf\"\u003e\u003ccode\u003eb0c428e\u003c/code\u003e\u003c/a\u003e Enforce \u003ccode\u003eStreamReadConstraints.maxNumberLength\u003c/code\u003e for non-blocking (async) pars...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/7c8b6d52632ff87dd40483df44a2b74d3048882c\"\u003e\u003ccode\u003e7c8b6d5\u003c/code\u003e\u003c/a\u003e Add test for nesting for \u003ccode\u003eDataInput\u003c/code\u003e-backed \u003ccode\u003eJsonParser\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1550\"\u003e#1550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/97a647b9d4bd03d31716d5565a73965c9ae2f396\"\u003e\u003ccode\u003e97a647b\u003c/code\u003e\u003c/a\u003e Update CI: JDK 23 -\u0026gt; 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/1601331cd5c7d79037904e4803a4c35cc9fdd4e0\"\u003e\u003ccode\u003e1601331\u003c/code\u003e\u003c/a\u003e (backport from 2.21) Fix \u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1548\"\u003e#1548\u003c/a\u003e: validate max doc length for fixed buffer inpu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/fae2542708621b49cdc61ec5b29574ad054ed76f\"\u003e\u003ccode\u003efae2542\u003c/code\u003e\u003c/a\u003e release notes update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/70c99ba8eccf6f8ad2754bccb113daac823f03ba\"\u003e\u003ccode\u003e70c99ba\u003c/code\u003e\u003c/a\u003e Update UTF8DataInputJsonParser.java (\u003ca href=\"https://redirect.github.com/FasterXML/jackson-core/issues/1512\"\u003e#1512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/caea665e6364bb46a4e7101fd763e9ef8568f132\"\u003e\u003ccode\u003ecaea665\u003c/code\u003e\u003c/a\u003e Post-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FasterXML/jackson-core/commit/635d3bd80a44a8a84b04cfdd007ceb9a31dc95f1\"\u003e\u003ccode\u003e635d3bd\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/FasterXML/jackson-core/compare/jackson-core-2.6.5...jackson-core-2.18.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.8.11.4 to 2.12.7.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FasterXML/jackson/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `com.jamesmurty.utils:java-xmlbuilder` from 1.1 to 1.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/blob/master/CHANGES.md\"\u003ecom.jamesmurty.utils:java-xmlbuilder's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.2 - 1 September 2017\u003c/h2\u003e\n\u003cp\u003eFixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent XML External Entity (XXE) injection attacks by disabling parsing of\ngeneral and parameter external entities by default (\u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e). External entities\nare now only parsed if this feature is explicitly enabled by passing a boolean\nflag value to the #create and #parse methods.\nWARNING: This will break code that expects external entities to be parsed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEnhancements:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePermit users to disable namespace-awareness in the underlying\nDocumentBuilderFactory when constructing the builder with extended \u003ccode\u003ecreate()\u003c/code\u003e\nand \u003ccode\u003eparse()\u003c/code\u003e methods. Namespace awareness is enabled by default unless you\nuse the more explicit versions of these methods that take additional\n\u003ccode\u003eenableExternalEntities\u003c/code\u003e and \u003ccode\u003eisNamespaceAware\u003c/code\u003e parameters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ce85f5a8d2db6f31d474aa3c13d0dd86bae3a82\"\u003e\u003ccode\u003e4ce85f5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release v1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/4ee5f60778e25cc1f762eb5c6f6747ea15354931\"\u003e\u003ccode\u003e4ee5f60\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/permit-disable-namespace-awareness'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/6483a913a5ee3561e8ebe0b23e5716f96eb447fb\"\u003e\u003ccode\u003e6483a91\u003c/code\u003e\u003c/a\u003e Mention advanced features of create \u0026amp; parse constructors in readme\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5630c494f922a3007d8b8ec5b9bd923fe571a731\"\u003e\u003ccode\u003e5630c49\u003c/code\u003e\u003c/a\u003e Permit disabling of namespace awareness\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/de0c78aa839dda06bdfc92fa0eb7aa8af3d8104c\"\u003e\u003ccode\u003ede0c78a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/12\"\u003e#12\u003c/a\u003e from rhuss/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/f1aeb78020d09b490e4e15dae697a7a8e148c330\"\u003e\u003ccode\u003ef1aeb78\u003c/code\u003e\u003c/a\u003e Fixed wrong delegation for ns()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73\"\u003e\u003ccode\u003ee6fddca\u003c/code\u003e\u003c/a\u003e Disable external entities by default to prevent XXE injection attacks, re \u003ca href=\"https://redirect.github.com/jmurty/java-xmlbuilder/issues/6\"\u003e#6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/5d5caa583b14ade1d6713b8e73b58679de50361f\"\u003e\u003ccode\u003e5d5caa5\u003c/code\u003e\u003c/a\u003e Update latest version in README following release of 1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jmurty/java-xmlbuilder/commit/92645b50492d41ca6ee11a1be9a846a23b0e204e\"\u003e\u003ccode\u003e92645b5\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jmurty/java-xmlbuilder/compare/v1.1...v1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vicaya/pulsar/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/vicaya/pulsar/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vicaya%2Fpulsar/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}}]}