dependabot[bot] opened a new pull request, #116: URL: https://github.com/apache/aries-rsa/pull/116
Bumps `netty.version` from 4.1.121.Final to 4.2.14.Final. Updates `io.netty:netty-handler` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-handler's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final";>https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final</a></p> <h2>netty-4.2.13.Final</h2> <h2>CVEs Fixed</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7";>CVE-2026-42586</a> (netty-codec-redis)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr";>CVE-2026-42578</a> (netty-handler-proxy)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p";>CVE-2026-42577</a> (netty-transport-native-epoll)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv";>CVE-2026-42587</a> (netty-codec-http, netty-codec-http2)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv";>CVE-2026-41417</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9";>CVE-2026-42581</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723";>CVE-2026-42580</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv";>CVE-2026-42585</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm";>CVE-2026-42579</a> (netty-codec-dns)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2";><code>0a60b75</code></a> [maven-release-plugin] prepare release netty-4.2.14.Final</li> <li><a href="https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269";><code>72df658</code></a> Fix MQTT decoder size check after variable header replay (<a href="https://redirect.github.com/netty/netty/issues/16787";>#16787</a>)</li> <li><a href="https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9";><code>7125dba</code></a> MQTT: Allow MQTT 5 CONNECT with password only (<a href="https://redirect.github.com/netty/netty/issues/16833";>#16833</a>)</li> <li><a href="https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d";><code>9e19320</code></a> IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...</li> <li><a href="https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162";><code>4ce9f17</code></a> Route synchronous onLookupComplete exceptions via fireExceptionCaught (<a href="https://redirect.github.com/netty/netty/issues/16794";>#16794</a>)</li> <li><a href="https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759";><code>f7b1b7d</code></a> Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...</li> <li><a href="https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc";><code>0ccb265</code></a> IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...</li> <li><a href="https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794";><code>a6aeb6d</code></a> Resolve all localhost addresses without querying DNS servers (<a href="https://redirect.github.com/netty/netty/issues/16749";>#16749</a>)</li> <li><a href="https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b";><code>c328ba2</code></a> Fix ResumptionController wrapping (<a href="https://redirect.github.com/netty/netty/issues/16815";>#16815</a>)</li> <li><a href="https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880";><code>bc5862b</code></a> HTTP2: Use 100 as default max concurrent streams setting (<a href="https://redirect.github.com/netty/netty/issues/16804";>#16804</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.121.Final...netty-4.2.14.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-buffer` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-buffer's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final";>https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final</a></p> <h2>netty-4.2.13.Final</h2> <h2>CVEs Fixed</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7";>CVE-2026-42586</a> (netty-codec-redis)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr";>CVE-2026-42578</a> (netty-handler-proxy)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p";>CVE-2026-42577</a> (netty-transport-native-epoll)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv";>CVE-2026-42587</a> (netty-codec-http, netty-codec-http2)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv";>CVE-2026-41417</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9";>CVE-2026-42581</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723";>CVE-2026-42580</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv";>CVE-2026-42585</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm";>CVE-2026-42579</a> (netty-codec-dns)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2";><code>0a60b75</code></a> [maven-release-plugin] prepare release netty-4.2.14.Final</li> <li><a href="https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269";><code>72df658</code></a> Fix MQTT decoder size check after variable header replay (<a href="https://redirect.github.com/netty/netty/issues/16787";>#16787</a>)</li> <li><a href="https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9";><code>7125dba</code></a> MQTT: Allow MQTT 5 CONNECT with password only (<a href="https://redirect.github.com/netty/netty/issues/16833";>#16833</a>)</li> <li><a href="https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d";><code>9e19320</code></a> IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...</li> <li><a href="https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162";><code>4ce9f17</code></a> Route synchronous onLookupComplete exceptions via fireExceptionCaught (<a href="https://redirect.github.com/netty/netty/issues/16794";>#16794</a>)</li> <li><a href="https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759";><code>f7b1b7d</code></a> Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...</li> <li><a href="https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc";><code>0ccb265</code></a> IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...</li> <li><a href="https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794";><code>a6aeb6d</code></a> Resolve all localhost addresses without querying DNS servers (<a href="https://redirect.github.com/netty/netty/issues/16749";>#16749</a>)</li> <li><a href="https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b";><code>c328ba2</code></a> Fix ResumptionController wrapping (<a href="https://redirect.github.com/netty/netty/issues/16815";>#16815</a>)</li> <li><a href="https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880";><code>bc5862b</code></a> HTTP2: Use 100 as default max concurrent streams setting (<a href="https://redirect.github.com/netty/netty/issues/16804";>#16804</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.121.Final...netty-4.2.14.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-transport` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-transport's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final";>https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final</a></p> <h2>netty-4.2.13.Final</h2> <h2>CVEs Fixed</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7";>CVE-2026-42586</a> (netty-codec-redis)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr";>CVE-2026-42578</a> (netty-handler-proxy)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p";>CVE-2026-42577</a> (netty-transport-native-epoll)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv";>CVE-2026-42587</a> (netty-codec-http, netty-codec-http2)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv";>CVE-2026-41417</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9";>CVE-2026-42581</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723";>CVE-2026-42580</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv";>CVE-2026-42585</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm";>CVE-2026-42579</a> (netty-codec-dns)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2";><code>0a60b75</code></a> [maven-release-plugin] prepare release netty-4.2.14.Final</li> <li><a href="https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269";><code>72df658</code></a> Fix MQTT decoder size check after variable header replay (<a href="https://redirect.github.com/netty/netty/issues/16787";>#16787</a>)</li> <li><a href="https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9";><code>7125dba</code></a> MQTT: Allow MQTT 5 CONNECT with password only (<a href="https://redirect.github.com/netty/netty/issues/16833";>#16833</a>)</li> <li><a href="https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d";><code>9e19320</code></a> IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...</li> <li><a href="https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162";><code>4ce9f17</code></a> Route synchronous onLookupComplete exceptions via fireExceptionCaught (<a href="https://redirect.github.com/netty/netty/issues/16794";>#16794</a>)</li> <li><a href="https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759";><code>f7b1b7d</code></a> Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...</li> <li><a href="https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc";><code>0ccb265</code></a> IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...</li> <li><a href="https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794";><code>a6aeb6d</code></a> Resolve all localhost addresses without querying DNS servers (<a href="https://redirect.github.com/netty/netty/issues/16749";>#16749</a>)</li> <li><a href="https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b";><code>c328ba2</code></a> Fix ResumptionController wrapping (<a href="https://redirect.github.com/netty/netty/issues/16815";>#16815</a>)</li> <li><a href="https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880";><code>bc5862b</code></a> HTTP2: Use 100 as default max concurrent streams setting (<a href="https://redirect.github.com/netty/netty/issues/16804";>#16804</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.121.Final...netty-4.2.14.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-common` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-common's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final";>https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final</a></p> <h2>netty-4.2.13.Final</h2> <h2>CVEs Fixed</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7";>CVE-2026-42586</a> (netty-codec-redis)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr";>CVE-2026-42578</a> (netty-handler-proxy)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p";>CVE-2026-42577</a> (netty-transport-native-epoll)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv";>CVE-2026-42587</a> (netty-codec-http, netty-codec-http2)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv";>CVE-2026-41417</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9";>CVE-2026-42581</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723";>CVE-2026-42580</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv";>CVE-2026-42585</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm";>CVE-2026-42579</a> (netty-codec-dns)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2";><code>0a60b75</code></a> [maven-release-plugin] prepare release netty-4.2.14.Final</li> <li><a href="https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269";><code>72df658</code></a> Fix MQTT decoder size check after variable header replay (<a href="https://redirect.github.com/netty/netty/issues/16787";>#16787</a>)</li> <li><a href="https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9";><code>7125dba</code></a> MQTT: Allow MQTT 5 CONNECT with password only (<a href="https://redirect.github.com/netty/netty/issues/16833";>#16833</a>)</li> <li><a href="https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d";><code>9e19320</code></a> IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...</li> <li><a href="https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162";><code>4ce9f17</code></a> Route synchronous onLookupComplete exceptions via fireExceptionCaught (<a href="https://redirect.github.com/netty/netty/issues/16794";>#16794</a>)</li> <li><a href="https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759";><code>f7b1b7d</code></a> Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...</li> <li><a href="https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc";><code>0ccb265</code></a> IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...</li> <li><a href="https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794";><code>a6aeb6d</code></a> Resolve all localhost addresses without querying DNS servers (<a href="https://redirect.github.com/netty/netty/issues/16749";>#16749</a>)</li> <li><a href="https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b";><code>c328ba2</code></a> Fix ResumptionController wrapping (<a href="https://redirect.github.com/netty/netty/issues/16815";>#16815</a>)</li> <li><a href="https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880";><code>bc5862b</code></a> HTTP2: Use 100 as default max concurrent streams setting (<a href="https://redirect.github.com/netty/netty/issues/16804";>#16804</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.121.Final...netty-4.2.14.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-resolver` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-resolver's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final";>https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final</a></p> <h2>netty-4.2.13.Final</h2> <h2>CVEs Fixed</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7";>CVE-2026-42586</a> (netty-codec-redis)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr";>CVE-2026-42578</a> (netty-handler-proxy)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p";>CVE-2026-42577</a> (netty-transport-native-epoll)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv";>CVE-2026-42587</a> (netty-codec-http, netty-codec-http2)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv";>CVE-2026-41417</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9";>CVE-2026-42581</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723";>CVE-2026-42580</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv";>CVE-2026-42585</a> (netty-codec-http)</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm";>CVE-2026-42579</a> (netty-codec-dns)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2";><code>0a60b75</code></a> [maven-release-plugin] prepare release netty-4.2.14.Final</li> <li><a href="https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269";><code>72df658</code></a> Fix MQTT decoder size check after variable header replay (<a href="https://redirect.github.com/netty/netty/issues/16787";>#16787</a>)</li> <li><a href="https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9";><code>7125dba</code></a> MQTT: Allow MQTT 5 CONNECT with password only (<a href="https://redirect.github.com/netty/netty/issues/16833";>#16833</a>)</li> <li><a href="https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d";><code>9e19320</code></a> IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...</li> <li><a href="https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162";><code>4ce9f17</code></a> Route synchronous onLookupComplete exceptions via fireExceptionCaught (<a href="https://redirect.github.com/netty/netty/issues/16794";>#16794</a>)</li> <li><a href="https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759";><code>f7b1b7d</code></a> Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...</li> <li><a href="https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc";><code>0ccb265</code></a> IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...</li> <li><a href="https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794";><code>a6aeb6d</code></a> Resolve all localhost addresses without querying DNS servers (<a href="https://redirect.github.com/netty/netty/issues/16749";>#16749</a>)</li> <li><a href="https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b";><code>c328ba2</code></a> Fix ResumptionController wrapping (<a href="https://redirect.github.com/netty/netty/issues/16815";>#16815</a>)</li> <li><a href="https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880";><code>bc5862b</code></a> HTTP2: Use 100 as default max concurrent streams setting (<a href="https://redirect.github.com/netty/netty/issues/16804";>#16804</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.1.121.Final...netty-4.2.14.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-transport-native-unix-common` from 4.1.121.Final to 4.2.14.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-transport-native-unix-common's releases</a>.</em></p> <blockquote> <h2>netty-4.2.14.Final</h2> <h2>What's Changed</h2> <ul> <li>HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16748";>netty/netty#16748</a></li> <li>HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16747";>netty/netty#16747</a></li> <li>Marshalling: Explicit document security requirements by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16752";>netty/netty#16752</a></li> <li>Fix io_uring op completion TRACE logging by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16755";>netty/netty#16755</a></li> <li>Quic: Ensure writes are done before notify close promise of QuicheQui… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16758";>netty/netty#16758</a></li> <li>Avoid re-parsing openssl key material with non-cached provider by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16759";>netty/netty#16759</a></li> <li>Pin HTTP/RTSP version + method normalization to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16765";>netty/netty#16765</a></li> <li>Fill MsgHdrMemoryArray#hdrs with null entry on release by <a href="https://github.com/tsegismont";><code>@tsegismont</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16764";>netty/netty#16764</a></li> <li>Revapi: Use default "oldVersion" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16774";>netty/netty#16774</a></li> <li>Adaptive: Fix concurrency issue in adaptive allocator by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16767";>netty/netty#16767</a></li> <li>Auto-port 4.2: Make bulk byte moving in ByteBuf faster by <a href="https://github.com/netty-project-bot";><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16781";>netty/netty#16781</a></li> <li>Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16768";>netty/netty#16768</a></li> <li>Remove dead native declarations by <a href="https://github.com/pandareen";><code>@pandareen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li>Isolate tests that modify available Security providers by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16793";>netty/netty#16793</a></li> <li>Remove test annotations from a method that isn't a test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16792";>netty/netty#16792</a></li> <li>Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by <a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li>IoUring: extend user data from short to long by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16682";>netty/netty#16682</a></li> <li>Revert CompositeByteBuf component search fast path by <a href="https://github.com/yawkat";><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16811";>netty/netty#16811</a></li> <li>HTTP2: Use 100 as default max concurrent streams setting by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16804";>netty/netty#16804</a></li> <li>Fix ResumptionController wrapping by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16815";>netty/netty#16815</a></li> <li>Resolve all localhost addresses without querying DNS servers by <a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li>IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16803";>netty/netty#16803</a></li> <li>Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16788";>netty/netty#16788</a></li> <li>Route synchronous onLookupComplete exceptions via fireExceptionCaught by <a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li>IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by <a href="https://github.com/LuciferYang";><code>@LuciferYang</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16826";>netty/netty#16826</a></li> <li>MQTT: Allow MQTT 5 CONNECT with password only by <a href="https://github.com/shblue21";><code>@shblue21</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16833";>netty/netty#16833</a></li> <li>Fix MQTT decoder size check after variable header replay by <a href="https://github.com/daguimu";><code>@daguimu</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16787";>netty/netty#16787</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pandareen";><code>@pandareen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16783";>netty/netty#16783</a></li> <li><a href="https://github.com/zhangweikop";><code>@zhangweikop</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16523";>netty/netty#16523</a></li> <li><a href="https://github.com/JulianVennen";><code>@JulianVennen</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16749";>netty/netty#16749</a></li> <li><a href="https://github.com/kwondh5217";><code>@kwondh5217</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16794";>netty/netty#16794</a></li> <li><a href="https://github.com/shblue21";><code>@shblue21</code></a> made their first contribution in <a href="https://redirect.github.com/netty/... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
