dependabot[bot] opened a new pull request, #18945: URL: https://github.com/apache/pinot/pull/18945
Bumps [io.netty:netty-bom](https://github.com/netty/netty) from 4.1.135.Final to 4.1.136.Final. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-bom's releases</a>.</em></p> <blockquote> <h2>netty-4.1.136.Final</h2> <h2>What's Changed</h2> <ul> <li>SingleThreadEventExecutor: document Throwable safety contract on run() by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16814";>netty/netty#16814</a></li> <li>Make HTTP/2 frame hashCode consistent with equals by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16692";>netty/netty#16692</a></li> <li>Add BlockHound exception for DnsQueryIdSpace (<a href="https://redirect.github.com/netty/netty/issues/16896";>#16896</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16915";>netty/netty#16915</a></li> <li>FlowControlHandler: Fix autoRead behavior by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16912";>netty/netty#16912</a></li> <li>Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16911";>netty/netty#16911</a></li> <li>MQTT: Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16916";>netty/netty#16916</a></li> <li>MQTT: Make the decodeProperties early-REPLAY check actually fire by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16813";>netty/netty#16813</a></li> <li>Reject control characters at the boundary of HTTP method names (<a href="https://redirect.github.com/netty/netty/issues/16723";>#16723</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16933";>netty/netty#16933</a></li> <li>Auto-port 4.1: Update to latest tcnative release by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16941";>netty/netty#16941</a></li> <li>Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16955";>netty/netty#16955</a></li> <li>Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16957";>netty/netty#16957</a></li> <li>Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16964";>netty/netty#16964</a></li> <li>Strictly validate MQTT UTF-8 Encoded String (<a href="https://redirect.github.com/netty/netty/issues/16939";>#16939</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16965";>netty/netty#16965</a></li> <li>Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16968";>netty/netty#16968</a></li> <li>Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16973";>netty/netty#16973</a></li> <li>Add RFC 10008 QUERY Method support (<a href="https://redirect.github.com/netty/netty/issues/16966";>#16966</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16978";>netty/netty#16978</a></li> <li>Correctly release and fail queued traffic-shaping writes on close (<a href="https://redirect.github.com/netty/netty/issues/16959";>#16959</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16976";>netty/netty#16976</a></li> <li>Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16983";>netty/netty#16983</a></li> <li>IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (<a href="https://redirect.github.com/netty/netty/issues/16982";>#16982</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16989";>netty/netty#16989</a></li> <li>Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16995";>netty/netty#16995</a></li> <li>Auto-port 4.1: Reconcile <code>AbstractCoalescingBufferQueue</code> readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16997";>netty/netty#16997</a></li> <li>Reject control characters at the boundary of the HTTP version token (<a href="https://redirect.github.com/netty/netty/issues/16971";>#16971</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16986";>netty/netty#16986</a></li> <li>Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17003";>netty/netty#17003</a></li> <li>Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17017";>netty/netty#17017</a></li> <li>FastLz: Guard decompression against truncated input (<a href="https://redirect.github.com/netty/netty/issues/17000";>#17000</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17015";>netty/netty#17015</a></li> <li>Backport 4.1 Fix propagation of startTls for client SslContext handler by <a href="https://github.com/skyguard1";><code>@skyguard1</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17020";>netty/netty#17020</a></li> <li>Auto-port 4.1: Reject non-token characters in HTTP/2 header names by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17022";>netty/netty#17022</a></li> <li>Update lz4-java to 1.11.1 by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17060";>netty/netty#17060</a></li> <li>Pin github actions to reduce risk (<a href="https://redirect.github.com/netty/netty/issues/17043";>#17043</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17044";>netty/netty#17044</a></li> <li>Merge branches from forks (<a href="https://redirect.github.com/netty/netty/issues/17063";>#17063</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17065";>netty/netty#17065</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.1.136.Final";>https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.1.136.Final</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/fca0764703b3bb59c6e6dc5d29c6d9710d35c0e6";><code>fca0764</code></a> [maven-release-plugin] prepare release netty-4.1.136.Final</li> <li><a href="https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6";><code>bb2ff68</code></a> Merge branches from forks (<a href="https://redirect.github.com/netty/netty/issues/17063";>#17063</a>) (<a href="https://redirect.github.com/netty/netty/issues/17065";>#17065</a>)</li> <li><a href="https://github.com/netty/netty/commit/7b44dc9a1b6554c9d288b45bdd995063881992dd";><code>7b44dc9</code></a> Pin github actions to reduce risk (<a href="https://redirect.github.com/netty/netty/issues/17043";>#17043</a>) (<a href="https://redirect.github.com/netty/netty/issues/17044";>#17044</a>)</li> <li><a href="https://github.com/netty/netty/commit/50e6e1dc57b1ececabccddd44d30a96c1e108145";><code>50e6e1d</code></a> Update lz4-java to 1.11.1 (<a href="https://redirect.github.com/netty/netty/issues/17060";>#17060</a>)</li> <li><a href="https://github.com/netty/netty/commit/d7dcf6c11a9767ba90edc1006a9226674c9fbf76";><code>d7dcf6c</code></a> Auto-port 4.1: Reject non-token characters in HTTP/2 header names (<a href="https://redirect.github.com/netty/netty/issues/17022";>#17022</a>)</li> <li><a href="https://github.com/netty/netty/commit/b12bd1161479013628711fc0cf07ebb8697dd9f3";><code>b12bd11</code></a> Backport 4.1 Fix propagation of startTls for client SslContext handler (<a href="https://redirect.github.com/netty/netty/issues/17020";>#17020</a>)</li> <li><a href="https://github.com/netty/netty/commit/7fd5cc7db54e5ec8b21a386334b606df79e8851d";><code>7fd5cc7</code></a> FastLz: Guard decompression against truncated input (<a href="https://redirect.github.com/netty/netty/issues/17000";>#17000</a>) (<a href="https://redirect.github.com/netty/netty/issues/17015";>#17015</a>)</li> <li><a href="https://github.com/netty/netty/commit/42e71039a50b2442df38f34e05c6389c210675c9";><code>42e7103</code></a> Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...</li> <li><a href="https://github.com/netty/netty/commit/666c3b2cf19fa2f80d1ba8c7d5becb500371c948";><code>666c3b2</code></a> Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (<a href="https://redirect.github.com/netty/netty/issues/17003";>#17003</a>)</li> <li><a href="https://github.com/netty/netty/commit/df54c37308f2d12f04e0f596f024143dd4625d40";><code>df54c37</code></a> Reject control characters at the boundary of the HTTP version token (<a href="https://redirect.github.com/netty/netty/issues/16971";>#16971</a>) ...</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.1.136.Final";>compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | io.netty:netty-bom | [>= 4.2.a0, < 4.3] | </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
