dependabot[bot] opened a new pull request, #1827: URL: https://github.com/apache/activemq/pull/1827
Bumps `netty-version` from 4.2.10.Final to 4.2.11.Final. Updates `io.netty:netty-buffer` from 4.2.10.Final to 4.2.11.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-buffer's releases</a>.</em></p> <blockquote> <h2>netty-4.2.11.Final</h2> <h2>Security</h2> <ul> <li>CVE-2026-33871, <a href="https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv";>HTTP/2 CONTINUATION Frame Flood Denial of Service</a></li> <li>CVE-2026-33870, <a href="https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8";>HTTP Request Smuggling via Chunked Extension Quoted-String Parsing</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update to latest JDK 26 EA release by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16230";>netty/netty#16230</a></li> <li>HTTP3: Allow to support non-standard HTTP3 settings by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16171";>netty/netty#16171</a></li> <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by <a href="https://github.com/adwsingh";><code>@adwsingh</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16245";>netty/netty#16245</a></li> <li>Allocate one large segment and slice for each MsgHdrMemory by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16234";>netty/netty#16234</a></li> <li>Make RefCntOpenSslContext.deallocate more robust by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16253";>netty/netty#16253</a></li> <li>Epoll: Fix excessive CPU usage when Channel is only registered but no… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16250";>netty/netty#16250</a></li> <li>Update to gcc for arm 10.3-2021.07 by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16255";>netty/netty#16255</a></li> <li>Add acmeIdentifier extension support to pkitesting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16256";>netty/netty#16256</a></li> <li>Update JDK versions to latest patch releases by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16254";>netty/netty#16254</a></li> <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16241";>netty/netty#16241</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16269";>netty/netty#16269</a></li> <li>Revert "Automatic backporting workflow from 4.1 to 4.2" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16270";>netty/netty#16270</a></li> <li>HTTP2: Correctly account for padding when decompress by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16264";>netty/netty#16264</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16271";>netty/netty#16271</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16273";>netty/netty#16273</a></li> <li>Backport PRs must be created with personal access tokens by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16276";>netty/netty#16276</a></li> <li>Expose QuicSslContextBuilder::sni by <a href="https://github.com/ZeroErrors";><code>@ZeroErrors</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16178";>netty/netty#16178</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16275";>netty/netty#16275</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16283";>netty/netty#16283</a></li> <li>Remove the unpooled allocator from test permutations by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16282";>netty/netty#16282</a></li> <li>Some polishing of the porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16288";>netty/netty#16288</a></li> <li>Allow to set destination connection id when creating a client side QuicheChannel by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16286";>netty/netty#16286</a></li> <li>Update to latest JDK26 EA build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16295";>netty/netty#16295</a></li> <li>Add javadoc to clarify responsibility of the user when generating the remote connection id by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16293";>netty/netty#16293</a></li> <li>Make the build run faster by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16290";>netty/netty#16290</a></li> <li>Fix IDE warnings in SslHandler by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16237";>netty/netty#16237</a></li> <li>Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16242";>netty/netty#16242</a></li> <li>Support boringssl SSLCredential API by <a href="https://github.com/jmcrawford45";><code>@jmcrawford45</code></a> in <a href="https://redirect.github.com/netty/netty/pull/15919";>netty/netty#15919</a></li> <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a href="https://github.com/furkanvarol";><code>@furkanvarol</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16279";>netty/netty#16279</a></li> <li>Improve multi-byte access performance when UNALIGNED availability is unknown by <a href="https://github.com/Songdoeon";><code>@Songdoeon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16207";>netty/netty#16207</a></li> <li>Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16278";>netty/netty#16278</a></li> <li>Support more branch freedom for auto-porting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16300";>netty/netty#16300</a></li> <li>fix: the precedence of + is higher than >> by <a href="https://github.com/cuiweixie";><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16312";>netty/netty#16312</a></li> <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16309";>netty/netty#16309</a></li> <li>Fix flaky PooledByteBufAllocatorTest by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16313";>netty/netty#16313</a></li> <li>Fix pooled arena accounting tests by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16321";>netty/netty#16321</a></li> <li>Fix RunInFastThreadLocalThreadExtension by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16314";>netty/netty#16314</a></li> <li>AdaptivePoolingAllocator: call <code>unreserveMatchingBuddy(...)</code> if <code>byteBuf</code> initialization failed by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16327";>netty/netty#16327</a></li> <li>Recycler should not use thread locals unless they get cleaned up by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16315";>netty/netty#16315</a></li> <li>OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16337";>netty/netty#16337</a></li> <li>IoUring: Only complete deregistration promise once we received all co… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16330";>netty/netty#16330</a></li> <li>Mark LoggingHandlerTest with <a href="https://github.com/Isolated";><code>@Isolated</code></a> to fix flaky build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16338";>netty/netty#16338</a></li> <li>Fix flaky HTTP/2 test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16342";>netty/netty#16342</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6";><code>c94a818</code></a> [maven-release-plugin] prepare release netty-4.2.11.Final</li> <li><a href="https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0";><code>3b76df1</code></a> Merge commit from fork</li> <li><a href="https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf";><code>aae944a</code></a> Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858";><code>6001499</code></a> Eliminate redundant bounds checks in CompositeByteBuf accessors (<a href="https://redirect.github.com/netty/netty/issues/16525";>#16525</a>)</li> <li><a href="https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247";><code>a7fbb6f</code></a> JdkZlibDecoder: accumulate decompressed output before firing channelRead (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d";><code>7937553</code></a> Enforce io.netty.maxDirectMemory accounting on all Java versions (<a href="https://redirect.github.com/netty/netty/issues/16489";>#16489</a>)</li> <li><a href="https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b";><code>893ea2e</code></a> Allocate less in QueryStringDecoder.addParam for typical use case (<a href="https://redirect.github.com/netty/netty/issues/16527";>#16527</a>)</li> <li><a href="https://github.com/netty/netty/commit/8f744ecfabbe3f5e96a5adfcaf9966525a856f09";><code>8f744ec</code></a> Replace <code>ClosedChannelException</code> with <code>StacklessClosedChannelException</code> (<a href="https://redirect.github.com/netty/netty/issues/16506";>#16506</a>)</li> <li><a href="https://github.com/netty/netty/commit/4d7b70dc2a6417790038f70f230fa9d94f7597da";><code>4d7b70d</code></a> Fix docker image for cross-compiling (<a href="https://redirect.github.com/netty/netty/issues/16522";>#16522</a>)</li> <li><a href="https://github.com/netty/netty/commit/cfd0d9a023d405e9c3aa96cca2f4fc4d1948c766";><code>cfd0d9a</code></a> Epoll / IoUring: setTcpMg5Sig(...) might overflow (<a href="https://redirect.github.com/netty/netty/issues/16511";>#16511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.11.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-common` from 4.2.10.Final to 4.2.11.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-common's releases</a>.</em></p> <blockquote> <h2>netty-4.2.11.Final</h2> <h2>Security</h2> <ul> <li>CVE-2026-33871, <a href="https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv";>HTTP/2 CONTINUATION Frame Flood Denial of Service</a></li> <li>CVE-2026-33870, <a href="https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8";>HTTP Request Smuggling via Chunked Extension Quoted-String Parsing</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update to latest JDK 26 EA release by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16230";>netty/netty#16230</a></li> <li>HTTP3: Allow to support non-standard HTTP3 settings by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16171";>netty/netty#16171</a></li> <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by <a href="https://github.com/adwsingh";><code>@adwsingh</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16245";>netty/netty#16245</a></li> <li>Allocate one large segment and slice for each MsgHdrMemory by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16234";>netty/netty#16234</a></li> <li>Make RefCntOpenSslContext.deallocate more robust by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16253";>netty/netty#16253</a></li> <li>Epoll: Fix excessive CPU usage when Channel is only registered but no… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16250";>netty/netty#16250</a></li> <li>Update to gcc for arm 10.3-2021.07 by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16255";>netty/netty#16255</a></li> <li>Add acmeIdentifier extension support to pkitesting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16256";>netty/netty#16256</a></li> <li>Update JDK versions to latest patch releases by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16254";>netty/netty#16254</a></li> <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16241";>netty/netty#16241</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16269";>netty/netty#16269</a></li> <li>Revert "Automatic backporting workflow from 4.1 to 4.2" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16270";>netty/netty#16270</a></li> <li>HTTP2: Correctly account for padding when decompress by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16264";>netty/netty#16264</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16271";>netty/netty#16271</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16273";>netty/netty#16273</a></li> <li>Backport PRs must be created with personal access tokens by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16276";>netty/netty#16276</a></li> <li>Expose QuicSslContextBuilder::sni by <a href="https://github.com/ZeroErrors";><code>@ZeroErrors</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16178";>netty/netty#16178</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16275";>netty/netty#16275</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16283";>netty/netty#16283</a></li> <li>Remove the unpooled allocator from test permutations by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16282";>netty/netty#16282</a></li> <li>Some polishing of the porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16288";>netty/netty#16288</a></li> <li>Allow to set destination connection id when creating a client side QuicheChannel by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16286";>netty/netty#16286</a></li> <li>Update to latest JDK26 EA build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16295";>netty/netty#16295</a></li> <li>Add javadoc to clarify responsibility of the user when generating the remote connection id by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16293";>netty/netty#16293</a></li> <li>Make the build run faster by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16290";>netty/netty#16290</a></li> <li>Fix IDE warnings in SslHandler by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16237";>netty/netty#16237</a></li> <li>Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16242";>netty/netty#16242</a></li> <li>Support boringssl SSLCredential API by <a href="https://github.com/jmcrawford45";><code>@jmcrawford45</code></a> in <a href="https://redirect.github.com/netty/netty/pull/15919";>netty/netty#15919</a></li> <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a href="https://github.com/furkanvarol";><code>@furkanvarol</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16279";>netty/netty#16279</a></li> <li>Improve multi-byte access performance when UNALIGNED availability is unknown by <a href="https://github.com/Songdoeon";><code>@Songdoeon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16207";>netty/netty#16207</a></li> <li>Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16278";>netty/netty#16278</a></li> <li>Support more branch freedom for auto-porting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16300";>netty/netty#16300</a></li> <li>fix: the precedence of + is higher than >> by <a href="https://github.com/cuiweixie";><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16312";>netty/netty#16312</a></li> <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16309";>netty/netty#16309</a></li> <li>Fix flaky PooledByteBufAllocatorTest by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16313";>netty/netty#16313</a></li> <li>Fix pooled arena accounting tests by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16321";>netty/netty#16321</a></li> <li>Fix RunInFastThreadLocalThreadExtension by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16314";>netty/netty#16314</a></li> <li>AdaptivePoolingAllocator: call <code>unreserveMatchingBuddy(...)</code> if <code>byteBuf</code> initialization failed by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16327";>netty/netty#16327</a></li> <li>Recycler should not use thread locals unless they get cleaned up by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16315";>netty/netty#16315</a></li> <li>OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16337";>netty/netty#16337</a></li> <li>IoUring: Only complete deregistration promise once we received all co… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16330";>netty/netty#16330</a></li> <li>Mark LoggingHandlerTest with <a href="https://github.com/Isolated";><code>@Isolated</code></a> to fix flaky build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16338";>netty/netty#16338</a></li> <li>Fix flaky HTTP/2 test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16342";>netty/netty#16342</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6";><code>c94a818</code></a> [maven-release-plugin] prepare release netty-4.2.11.Final</li> <li><a href="https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0";><code>3b76df1</code></a> Merge commit from fork</li> <li><a href="https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf";><code>aae944a</code></a> Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858";><code>6001499</code></a> Eliminate redundant bounds checks in CompositeByteBuf accessors (<a href="https://redirect.github.com/netty/netty/issues/16525";>#16525</a>)</li> <li><a href="https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247";><code>a7fbb6f</code></a> JdkZlibDecoder: accumulate decompressed output before firing channelRead (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d";><code>7937553</code></a> Enforce io.netty.maxDirectMemory accounting on all Java versions (<a href="https://redirect.github.com/netty/netty/issues/16489";>#16489</a>)</li> <li><a href="https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b";><code>893ea2e</code></a> Allocate less in QueryStringDecoder.addParam for typical use case (<a href="https://redirect.github.com/netty/netty/issues/16527";>#16527</a>)</li> <li><a href="https://github.com/netty/netty/commit/8f744ecfabbe3f5e96a5adfcaf9966525a856f09";><code>8f744ec</code></a> Replace <code>ClosedChannelException</code> with <code>StacklessClosedChannelException</code> (<a href="https://redirect.github.com/netty/netty/issues/16506";>#16506</a>)</li> <li><a href="https://github.com/netty/netty/commit/4d7b70dc2a6417790038f70f230fa9d94f7597da";><code>4d7b70d</code></a> Fix docker image for cross-compiling (<a href="https://redirect.github.com/netty/netty/issues/16522";>#16522</a>)</li> <li><a href="https://github.com/netty/netty/commit/cfd0d9a023d405e9c3aa96cca2f4fc4d1948c766";><code>cfd0d9a</code></a> Epoll / IoUring: setTcpMg5Sig(...) might overflow (<a href="https://redirect.github.com/netty/netty/issues/16511";>#16511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.11.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-handler` from 4.2.10.Final to 4.2.11.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-handler's releases</a>.</em></p> <blockquote> <h2>netty-4.2.11.Final</h2> <h2>Security</h2> <ul> <li>CVE-2026-33871, <a href="https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv";>HTTP/2 CONTINUATION Frame Flood Denial of Service</a></li> <li>CVE-2026-33870, <a href="https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8";>HTTP Request Smuggling via Chunked Extension Quoted-String Parsing</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update to latest JDK 26 EA release by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16230";>netty/netty#16230</a></li> <li>HTTP3: Allow to support non-standard HTTP3 settings by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16171";>netty/netty#16171</a></li> <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by <a href="https://github.com/adwsingh";><code>@adwsingh</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16245";>netty/netty#16245</a></li> <li>Allocate one large segment and slice for each MsgHdrMemory by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16234";>netty/netty#16234</a></li> <li>Make RefCntOpenSslContext.deallocate more robust by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16253";>netty/netty#16253</a></li> <li>Epoll: Fix excessive CPU usage when Channel is only registered but no… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16250";>netty/netty#16250</a></li> <li>Update to gcc for arm 10.3-2021.07 by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16255";>netty/netty#16255</a></li> <li>Add acmeIdentifier extension support to pkitesting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16256";>netty/netty#16256</a></li> <li>Update JDK versions to latest patch releases by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16254";>netty/netty#16254</a></li> <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16241";>netty/netty#16241</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16269";>netty/netty#16269</a></li> <li>Revert "Automatic backporting workflow from 4.1 to 4.2" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16270";>netty/netty#16270</a></li> <li>HTTP2: Correctly account for padding when decompress by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16264";>netty/netty#16264</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16271";>netty/netty#16271</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16273";>netty/netty#16273</a></li> <li>Backport PRs must be created with personal access tokens by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16276";>netty/netty#16276</a></li> <li>Expose QuicSslContextBuilder::sni by <a href="https://github.com/ZeroErrors";><code>@ZeroErrors</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16178";>netty/netty#16178</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16275";>netty/netty#16275</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16283";>netty/netty#16283</a></li> <li>Remove the unpooled allocator from test permutations by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16282";>netty/netty#16282</a></li> <li>Some polishing of the porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16288";>netty/netty#16288</a></li> <li>Allow to set destination connection id when creating a client side QuicheChannel by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16286";>netty/netty#16286</a></li> <li>Update to latest JDK26 EA build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16295";>netty/netty#16295</a></li> <li>Add javadoc to clarify responsibility of the user when generating the remote connection id by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16293";>netty/netty#16293</a></li> <li>Make the build run faster by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16290";>netty/netty#16290</a></li> <li>Fix IDE warnings in SslHandler by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16237";>netty/netty#16237</a></li> <li>Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16242";>netty/netty#16242</a></li> <li>Support boringssl SSLCredential API by <a href="https://github.com/jmcrawford45";><code>@jmcrawford45</code></a> in <a href="https://redirect.github.com/netty/netty/pull/15919";>netty/netty#15919</a></li> <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a href="https://github.com/furkanvarol";><code>@furkanvarol</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16279";>netty/netty#16279</a></li> <li>Improve multi-byte access performance when UNALIGNED availability is unknown by <a href="https://github.com/Songdoeon";><code>@Songdoeon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16207";>netty/netty#16207</a></li> <li>Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16278";>netty/netty#16278</a></li> <li>Support more branch freedom for auto-porting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16300";>netty/netty#16300</a></li> <li>fix: the precedence of + is higher than >> by <a href="https://github.com/cuiweixie";><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16312";>netty/netty#16312</a></li> <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16309";>netty/netty#16309</a></li> <li>Fix flaky PooledByteBufAllocatorTest by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16313";>netty/netty#16313</a></li> <li>Fix pooled arena accounting tests by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16321";>netty/netty#16321</a></li> <li>Fix RunInFastThreadLocalThreadExtension by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16314";>netty/netty#16314</a></li> <li>AdaptivePoolingAllocator: call <code>unreserveMatchingBuddy(...)</code> if <code>byteBuf</code> initialization failed by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16327";>netty/netty#16327</a></li> <li>Recycler should not use thread locals unless they get cleaned up by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16315";>netty/netty#16315</a></li> <li>OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16337";>netty/netty#16337</a></li> <li>IoUring: Only complete deregistration promise once we received all co… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16330";>netty/netty#16330</a></li> <li>Mark LoggingHandlerTest with <a href="https://github.com/Isolated";><code>@Isolated</code></a> to fix flaky build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16338";>netty/netty#16338</a></li> <li>Fix flaky HTTP/2 test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16342";>netty/netty#16342</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6";><code>c94a818</code></a> [maven-release-plugin] prepare release netty-4.2.11.Final</li> <li><a href="https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0";><code>3b76df1</code></a> Merge commit from fork</li> <li><a href="https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf";><code>aae944a</code></a> Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858";><code>6001499</code></a> Eliminate redundant bounds checks in CompositeByteBuf accessors (<a href="https://redirect.github.com/netty/netty/issues/16525";>#16525</a>)</li> <li><a href="https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247";><code>a7fbb6f</code></a> JdkZlibDecoder: accumulate decompressed output before firing channelRead (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d";><code>7937553</code></a> Enforce io.netty.maxDirectMemory accounting on all Java versions (<a href="https://redirect.github.com/netty/netty/issues/16489";>#16489</a>)</li> <li><a href="https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b";><code>893ea2e</code></a> Allocate less in QueryStringDecoder.addParam for typical use case (<a href="https://redirect.github.com/netty/netty/issues/16527";>#16527</a>)</li> <li><a href="https://github.com/netty/netty/commit/8f744ecfabbe3f5e96a5adfcaf9966525a856f09";><code>8f744ec</code></a> Replace <code>ClosedChannelException</code> with <code>StacklessClosedChannelException</code> (<a href="https://redirect.github.com/netty/netty/issues/16506";>#16506</a>)</li> <li><a href="https://github.com/netty/netty/commit/4d7b70dc2a6417790038f70f230fa9d94f7597da";><code>4d7b70d</code></a> Fix docker image for cross-compiling (<a href="https://redirect.github.com/netty/netty/issues/16522";>#16522</a>)</li> <li><a href="https://github.com/netty/netty/commit/cfd0d9a023d405e9c3aa96cca2f4fc4d1948c766";><code>cfd0d9a</code></a> Epoll / IoUring: setTcpMg5Sig(...) might overflow (<a href="https://redirect.github.com/netty/netty/issues/16511";>#16511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.11.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-codec-http` from 4.2.10.Final to 4.2.11.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-codec-http's releases</a>.</em></p> <blockquote> <h2>netty-4.2.11.Final</h2> <h2>Security</h2> <ul> <li>CVE-2026-33871, <a href="https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv";>HTTP/2 CONTINUATION Frame Flood Denial of Service</a></li> <li>CVE-2026-33870, <a href="https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8";>HTTP Request Smuggling via Chunked Extension Quoted-String Parsing</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update to latest JDK 26 EA release by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16230";>netty/netty#16230</a></li> <li>HTTP3: Allow to support non-standard HTTP3 settings by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16171";>netty/netty#16171</a></li> <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by <a href="https://github.com/adwsingh";><code>@adwsingh</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16245";>netty/netty#16245</a></li> <li>Allocate one large segment and slice for each MsgHdrMemory by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16234";>netty/netty#16234</a></li> <li>Make RefCntOpenSslContext.deallocate more robust by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16253";>netty/netty#16253</a></li> <li>Epoll: Fix excessive CPU usage when Channel is only registered but no… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16250";>netty/netty#16250</a></li> <li>Update to gcc for arm 10.3-2021.07 by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16255";>netty/netty#16255</a></li> <li>Add acmeIdentifier extension support to pkitesting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16256";>netty/netty#16256</a></li> <li>Update JDK versions to latest patch releases by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16254";>netty/netty#16254</a></li> <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16241";>netty/netty#16241</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16269";>netty/netty#16269</a></li> <li>Revert "Automatic backporting workflow from 4.1 to 4.2" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16270";>netty/netty#16270</a></li> <li>HTTP2: Correctly account for padding when decompress by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16264";>netty/netty#16264</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16271";>netty/netty#16271</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16273";>netty/netty#16273</a></li> <li>Backport PRs must be created with personal access tokens by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16276";>netty/netty#16276</a></li> <li>Expose QuicSslContextBuilder::sni by <a href="https://github.com/ZeroErrors";><code>@ZeroErrors</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16178";>netty/netty#16178</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16275";>netty/netty#16275</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16283";>netty/netty#16283</a></li> <li>Remove the unpooled allocator from test permutations by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16282";>netty/netty#16282</a></li> <li>Some polishing of the porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16288";>netty/netty#16288</a></li> <li>Allow to set destination connection id when creating a client side QuicheChannel by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16286";>netty/netty#16286</a></li> <li>Update to latest JDK26 EA build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16295";>netty/netty#16295</a></li> <li>Add javadoc to clarify responsibility of the user when generating the remote connection id by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16293";>netty/netty#16293</a></li> <li>Make the build run faster by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16290";>netty/netty#16290</a></li> <li>Fix IDE warnings in SslHandler by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16237";>netty/netty#16237</a></li> <li>Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16242";>netty/netty#16242</a></li> <li>Support boringssl SSLCredential API by <a href="https://github.com/jmcrawford45";><code>@jmcrawford45</code></a> in <a href="https://redirect.github.com/netty/netty/pull/15919";>netty/netty#15919</a></li> <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a href="https://github.com/furkanvarol";><code>@furkanvarol</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16279";>netty/netty#16279</a></li> <li>Improve multi-byte access performance when UNALIGNED availability is unknown by <a href="https://github.com/Songdoeon";><code>@Songdoeon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16207";>netty/netty#16207</a></li> <li>Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16278";>netty/netty#16278</a></li> <li>Support more branch freedom for auto-porting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16300";>netty/netty#16300</a></li> <li>fix: the precedence of + is higher than >> by <a href="https://github.com/cuiweixie";><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16312";>netty/netty#16312</a></li> <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16309";>netty/netty#16309</a></li> <li>Fix flaky PooledByteBufAllocatorTest by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16313";>netty/netty#16313</a></li> <li>Fix pooled arena accounting tests by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16321";>netty/netty#16321</a></li> <li>Fix RunInFastThreadLocalThreadExtension by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16314";>netty/netty#16314</a></li> <li>AdaptivePoolingAllocator: call <code>unreserveMatchingBuddy(...)</code> if <code>byteBuf</code> initialization failed by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16327";>netty/netty#16327</a></li> <li>Recycler should not use thread locals unless they get cleaned up by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16315";>netty/netty#16315</a></li> <li>OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16337";>netty/netty#16337</a></li> <li>IoUring: Only complete deregistration promise once we received all co… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16330";>netty/netty#16330</a></li> <li>Mark LoggingHandlerTest with <a href="https://github.com/Isolated";><code>@Isolated</code></a> to fix flaky build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16338";>netty/netty#16338</a></li> <li>Fix flaky HTTP/2 test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16342";>netty/netty#16342</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6";><code>c94a818</code></a> [maven-release-plugin] prepare release netty-4.2.11.Final</li> <li><a href="https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0";><code>3b76df1</code></a> Merge commit from fork</li> <li><a href="https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf";><code>aae944a</code></a> Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858";><code>6001499</code></a> Eliminate redundant bounds checks in CompositeByteBuf accessors (<a href="https://redirect.github.com/netty/netty/issues/16525";>#16525</a>)</li> <li><a href="https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247";><code>a7fbb6f</code></a> JdkZlibDecoder: accumulate decompressed output before firing channelRead (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d";><code>7937553</code></a> Enforce io.netty.maxDirectMemory accounting on all Java versions (<a href="https://redirect.github.com/netty/netty/issues/16489";>#16489</a>)</li> <li><a href="https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b";><code>893ea2e</code></a> Allocate less in QueryStringDecoder.addParam for typical use case (<a href="https://redirect.github.com/netty/netty/issues/16527";>#16527</a>)</li> <li><a href="https://github.com/netty/netty/commit/8f744ecfabbe3f5e96a5adfcaf9966525a856f09";><code>8f744ec</code></a> Replace <code>ClosedChannelException</code> with <code>StacklessClosedChannelException</code> (<a href="https://redirect.github.com/netty/netty/issues/16506";>#16506</a>)</li> <li><a href="https://github.com/netty/netty/commit/4d7b70dc2a6417790038f70f230fa9d94f7597da";><code>4d7b70d</code></a> Fix docker image for cross-compiling (<a href="https://redirect.github.com/netty/netty/issues/16522";>#16522</a>)</li> <li><a href="https://github.com/netty/netty/commit/cfd0d9a023d405e9c3aa96cca2f4fc4d1948c766";><code>cfd0d9a</code></a> Epoll / IoUring: setTcpMg5Sig(...) might overflow (<a href="https://redirect.github.com/netty/netty/issues/16511";>#16511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.11.Final";>compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-transport` from 4.2.10.Final to 4.2.11.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases";>io.netty:netty-transport's releases</a>.</em></p> <blockquote> <h2>netty-4.2.11.Final</h2> <h2>Security</h2> <ul> <li>CVE-2026-33871, <a href="https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv";>HTTP/2 CONTINUATION Frame Flood Denial of Service</a></li> <li>CVE-2026-33870, <a href="https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8";>HTTP Request Smuggling via Chunked Extension Quoted-String Parsing</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update to latest JDK 26 EA release by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16230";>netty/netty#16230</a></li> <li>HTTP3: Allow to support non-standard HTTP3 settings by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16171";>netty/netty#16171</a></li> <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by <a href="https://github.com/adwsingh";><code>@adwsingh</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16245";>netty/netty#16245</a></li> <li>Allocate one large segment and slice for each MsgHdrMemory by <a href="https://github.com/dreamlike-ocean";><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16234";>netty/netty#16234</a></li> <li>Make RefCntOpenSslContext.deallocate more robust by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16253";>netty/netty#16253</a></li> <li>Epoll: Fix excessive CPU usage when Channel is only registered but no… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16250";>netty/netty#16250</a></li> <li>Update to gcc for arm 10.3-2021.07 by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16255";>netty/netty#16255</a></li> <li>Add acmeIdentifier extension support to pkitesting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16256";>netty/netty#16256</a></li> <li>Update JDK versions to latest patch releases by <a href="https://github.com/m1ngyuan";><code>@m1ngyuan</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16254";>netty/netty#16254</a></li> <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16241";>netty/netty#16241</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16269";>netty/netty#16269</a></li> <li>Revert "Automatic backporting workflow from 4.1 to 4.2" by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16270";>netty/netty#16270</a></li> <li>HTTP2: Correctly account for padding when decompress by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16264";>netty/netty#16264</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16271";>netty/netty#16271</a></li> <li>Automatic backporting workflow from 4.1 to 4.2 by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16273";>netty/netty#16273</a></li> <li>Backport PRs must be created with personal access tokens by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16276";>netty/netty#16276</a></li> <li>Expose QuicSslContextBuilder::sni by <a href="https://github.com/ZeroErrors";><code>@ZeroErrors</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16178";>netty/netty#16178</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16275";>netty/netty#16275</a></li> <li>Add more porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16283";>netty/netty#16283</a></li> <li>Remove the unpooled allocator from test permutations by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16282";>netty/netty#16282</a></li> <li>Some polishing of the porting workflows by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16288";>netty/netty#16288</a></li> <li>Allow to set destination connection id when creating a client side QuicheChannel by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16286";>netty/netty#16286</a></li> <li>Update to latest JDK26 EA build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16295";>netty/netty#16295</a></li> <li>Add javadoc to clarify responsibility of the user when generating the remote connection id by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16293";>netty/netty#16293</a></li> <li>Make the build run faster by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16290";>netty/netty#16290</a></li> <li>Fix IDE warnings in SslHandler by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16237";>netty/netty#16237</a></li> <li>Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16242";>netty/netty#16242</a></li> <li>Support boringssl SSLCredential API by <a href="https://github.com/jmcrawford45";><code>@jmcrawford45</code></a> in <a href="https://redirect.github.com/netty/netty/pull/15919";>netty/netty#15919</a></li> <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a href="https://github.com/furkanvarol";><code>@furkanvarol</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16279";>netty/netty#16279</a></li> <li>Improve multi-byte access performance when UNALIGNED availability is unknown by <a href="https://github.com/Songdoeon";><code>@Songdoeon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16207";>netty/netty#16207</a></li> <li>Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by <a href="https://github.com/doom369";><code>@doom369</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16278";>netty/netty#16278</a></li> <li>Support more branch freedom for auto-porting by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16300";>netty/netty#16300</a></li> <li>fix: the precedence of + is higher than >> by <a href="https://github.com/cuiweixie";><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16312";>netty/netty#16312</a></li> <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16309";>netty/netty#16309</a></li> <li>Fix flaky PooledByteBufAllocatorTest by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16313";>netty/netty#16313</a></li> <li>Fix pooled arena accounting tests by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16321";>netty/netty#16321</a></li> <li>Fix RunInFastThreadLocalThreadExtension by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16314";>netty/netty#16314</a></li> <li>AdaptivePoolingAllocator: call <code>unreserveMatchingBuddy(...)</code> if <code>byteBuf</code> initialization failed by <a href="https://github.com/laosijikaichele";><code>@laosijikaichele</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16327";>netty/netty#16327</a></li> <li>Recycler should not use thread locals unless they get cleaned up by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16315";>netty/netty#16315</a></li> <li>OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16337";>netty/netty#16337</a></li> <li>IoUring: Only complete deregistration promise once we received all co… by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16330";>netty/netty#16330</a></li> <li>Mark LoggingHandlerTest with <a href="https://github.com/Isolated";><code>@Isolated</code></a> to fix flaky build by <a href="https://github.com/normanmaurer";><code>@normanmaurer</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16338";>netty/netty#16338</a></li> <li>Fix flaky HTTP/2 test by <a href="https://github.com/chrisvest";><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16342";>netty/netty#16342</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6";><code>c94a818</code></a> [maven-release-plugin] prepare release netty-4.2.11.Final</li> <li><a href="https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0";><code>3b76df1</code></a> Merge commit from fork</li> <li><a href="https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf";><code>aae944a</code></a> Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858";><code>6001499</code></a> Eliminate redundant bounds checks in CompositeByteBuf accessors (<a href="https://redirect.github.com/netty/netty/issues/16525";>#16525</a>)</li> <li><a href="https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247";><code>a7fbb6f</code></a> JdkZlibDecoder: accumulate decompressed output before firing channelRead (<a href="https://redirect.github.com/netty/netty/issues/16";>#16</a>...</li> <li><a href="https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d";><code>7937553</code></a> Enforce io.netty.maxDirectMemory accounting on all Java versions (<a href="https://redirect.github.com/netty/netty/issues/16489";>#16489</a>)</li> <li><a href="https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b";><code>893ea2e</code></a> Allocate less in QueryStringDecoder.addParam for typical use case (<a href="https://redirect.github.com/netty/netty/issues/16527";>#16527</a>)</li> <li><a href="https://github.com/netty/netty/commit/8f744ecfabbe3f5e96a5adfcaf9966525a856f09";><code>8f744ec</code></a> Replace <code>ClosedChannelException</code> with <code>StacklessClosedChannelException</code> (<a href="https://redirect.github.com/netty/netty/issues/16506";>#16506</a>)</li> <li><a href="https://github.com/netty/netty/commit/4d7b70dc2a6417790038f70f230fa9d94f7597da";><code>4d7b70d</code></a> Fix docker image for cross-compiling (<a href="https://redirect.github.com/netty/netty/issues/16522";>#16522</a>)</li> <li><a href="https://github.com/netty/netty/commit/cfd0d9a023d405e9c3aa96cca2f4fc4d1948c766";><code>cfd0d9a</code></a> Epoll / IoUring: setTcpMg5Sig(...) might overflow (<a href="https://redirect.github.com/netty/netty/issues/16511";>#16511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.11.Final";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions ... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information, visit: https://activemq.apache.org/contact
