dependabot[bot] opened a new pull request, #19204: URL: https://github.com/apache/pinot/pull/19204
Bumps [io.netty:netty-bom](https://github.com/netty/netty) from 4.1.136.Final to 4.1.137.Final. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-bom's releases</a>.</em></p> <blockquote> <h2>netty-4.1.137.Final</h2> <h2>What's Changed</h2> <ul> <li>Auto-port 4.1: AsciiString.cached(String) should sanitize the provided String (<a href="https://redirect.github.com/netty/netty/issues/13749";>#13749</a>) by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17069";>netty/netty#17069</a></li> <li>AsciiString.cached(String) should sanitize the provided String (<a href="https://redirect.github.com/netty/netty/issues/13749";>#13749</a>) (<a href="https://redirect.github.com/netty/netty/issues/17007";>#17007</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17075";>netty/netty#17075</a></li> <li>Fix AsciiString.cached(String) performance regression (<a href="https://redirect.github.com/netty/netty/issues/17074";>#17074</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17080";>netty/netty#17080</a></li> <li>Auto-port 4.1: SslHandler: Fix possible buffer leak when an OOME is thrown during allocation by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17078";>netty/netty#17078</a></li> <li>Fix AsciiString.cached(String) performance regression (<a href="https://redirect.github.com/netty/netty/issues/17074";>#17074</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17083";>netty/netty#17083</a></li> <li>Auto-port 4.1: Add HttpContentCompressor constructor with ability to specify desired maxPipelineDepth by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17085";>netty/netty#17085</a></li> <li>Auto-port 4.1: Fix AdaptiveByteBuf._setLongLE calling checked setLongLE by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17102";>netty/netty#17102</a></li> <li>Auto-port 4.1: Reject negative maxOrder in PooledByteBufAllocator by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17095";>netty/netty#17095</a></li> <li>Auto-port 4.1: Snappy: Guard decoder against invalid chunk lengths by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17110";>netty/netty#17110</a></li> <li>Backport <a href="https://redirect.github.com/netty/netty/issues/16079";>#16079</a> and <a href="https://redirect.github.com/netty/netty/issues/17114";>#17114</a> by <a href="https://github.com/hyperxpro";><code>@hyperxpro</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17134";>netty/netty#17134</a></li> <li>Auto-port 4.1: Use safe decompressor in Lz4FrameDecoder by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17121";>netty/netty#17121</a></li> <li>Auto-port 4.1: Configure TestLens for the PR builds by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17133";>netty/netty#17133</a></li> <li>Fix maxAllocation for brotli-encoded content in HttpContentDecompress… by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17124";>netty/netty#17124</a></li> <li>Propagate the CI envionment variables through to the docker builds (#… by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17143";>netty/netty#17143</a></li> <li>Auto-port 4.1: fix(mqtt): drop UNSUBACK reason codes for MQTT 3.x encoding by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17137";>netty/netty#17137</a></li> <li>Fix buddy cache evicting chunks with live buffers (<a href="https://redirect.github.com/netty/netty/issues/17154";>#17154</a>) by <a href="https://github.com/franz1981";><code>@franz1981</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17176";>netty/netty#17176</a></li> <li>Auto-port 4.1: Avoid classloader leak via GlobalEventExecutor terminationFuture failure by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17189";>netty/netty#17189</a></li> <li>Auto-port 4.1: <code>HttpObjectEncoder</code> / <code>DefaultHttp2FrameWriter</code>: fix buffer leak when a <code>Throwable</code> is thrown during header encoding by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17178";>netty/netty#17178</a></li> <li>BrotliEncoder: Prevent duplicate close scheduling (<a href="https://redirect.github.com/netty/netty/issues/17175";>#17175</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17193";>netty/netty#17193</a></li> <li>Auto-port 4.1: Update compress-lzf to 1.2.1 by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17197";>netty/netty#17197</a></li> <li>Do not write WebSocket handshake response to the tail of the pipeline (<a href="https://redirect.github.com/netty/netty/issues/17192";>#17192</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17200";>netty/netty#17200</a></li> <li><code>HttpServerCodec</code>: do not consume the method queue for 1xx interim responses (<a href="https://redirect.github.com/netty/netty/issues/17182";>#17182</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17203";>netty/netty#17203</a></li> <li>Adaptive allocator backports by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17206";>netty/netty#17206</a></li> <li>Weakly reference engines from the OpenSSL engine map (<a href="https://redirect.github.com/netty/netty/issues/17199";>#17199</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17205";>netty/netty#17205</a></li> <li>Auto-port 4.1: Add <code>.editorconfig</code> to enforce consistent coding style by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17209";>netty/netty#17209</a></li> <li>Update surefire plugin to latest version (<a href="https://redirect.github.com/netty/netty/issues/17210";>#17210</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17212";>netty/netty#17212</a></li> <li>Update to latest netty-tcnative release (<a href="https://redirect.github.com/netty/netty/issues/17056";>#17056</a>) by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17122";>netty/netty#17122</a></li> <li>Merge changes from forks (<a href="https://redirect.github.com/netty/netty/issues/17213";>#17213</a>) by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/17217";>netty/netty#17217</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.1.136.Final...netty-4.1.137.Final";>https://github.com/netty/netty/compare/netty-4.1.136.Final...netty-4.1.137.Final</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/5471f0a6ffa4ab39db22c468c6c851af4ecae709";><code>5471f0a</code></a> [maven-release-plugin] prepare release netty-4.1.137.Final</li> <li><a href="https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961";><code>9e05192</code></a> Merge changes from forks (<a href="https://redirect.github.com/netty/netty/issues/17213";>#17213</a>) (<a href="https://redirect.github.com/netty/netty/issues/17217";>#17217</a>)</li> <li><a href="https://github.com/netty/netty/commit/c60221988538437d28c7ec47b205f4612231dd6e";><code>c602219</code></a> Update to latest netty-tcnative release (<a href="https://redirect.github.com/netty/netty/issues/17056";>#17056</a>) (<a href="https://redirect.github.com/netty/netty/issues/17122";>#17122</a>)</li> <li><a href="https://github.com/netty/netty/commit/cba44200b8f3502b5eab239e2d8089fecabfee9b";><code>cba4420</code></a> Update surefire plugin to latest version (<a href="https://redirect.github.com/netty/netty/issues/17210";>#17210</a>) (<a href="https://redirect.github.com/netty/netty/issues/17212";>#17212</a>)</li> <li><a href="https://github.com/netty/netty/commit/576765b224e2bd6ce8034dff9051e2f1601fbfd5";><code>576765b</code></a> Auto-port 4.1: Add <code>.editorconfig</code> to enforce consistent coding style (<a href="https://redirect.github.com/netty/netty/issues/17209";>#17209</a>)</li> <li><a href="https://github.com/netty/netty/commit/b75a281cadef48981d14d6b95c56b869ff4f83dc";><code>b75a281</code></a> Weakly reference engines from the OpenSSL engine map (<a href="https://redirect.github.com/netty/netty/issues/17199";>#17199</a>) (<a href="https://redirect.github.com/netty/netty/issues/17205";>#17205</a>)</li> <li><a href="https://github.com/netty/netty/commit/b8a40d2125ce5e617811ed55406a9b63abf99775";><code>b8a40d2</code></a> Adaptive allocator backports (<a href="https://redirect.github.com/netty/netty/issues/17206";>#17206</a>)</li> <li><a href="https://github.com/netty/netty/commit/1b8faadf159a7cfdd5d3e20068c12edf4bfe46b2";><code>1b8faad</code></a> <code>HttpServerCodec</code>: do not consume the method queue for 1xx interim responses ...</li> <li><a href="https://github.com/netty/netty/commit/95bc09d63093b758cf1b63f241e0f0bceec3e5c5";><code>95bc09d</code></a> Do not write WebSocket handshake response to the tail of the pipeline (<a href="https://redirect.github.com/netty/netty/issues/17192";>#17192</a>...</li> <li><a href="https://github.com/netty/netty/commit/9cdfef43d58cbcfb9083fbad3700609bc0b71fd0";><code>9cdfef4</code></a> Auto-port 4.1: Update compress-lzf to 1.2.1 (<a href="https://redirect.github.com/netty/netty/issues/17197";>#17197</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.136.Final...netty-4.1.137.Final";>compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | io.netty:netty-bom | [>= 4.2.a0, < 4.3] | </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
