HTHou opened a new pull request, #18279: URL: https://github.com/apache/iotdb/pull/18279
## Summary - bump `netty.version` from `4.1.134.Final` to `4.1.136.Final` - keep IoTDB on the compatible Netty 4.1 release line - align all Netty artifacts managed through `netty-bom` with the latest 4.1 patch release Netty release notes: - https://github.com/netty/netty/releases/tag/netty-4.1.135.Final - https://github.com/netty/netty/releases/tag/netty-4.1.136.Final ## Impact This applies the correctness and security fixes included in the two Netty patch releases without changing IoTDB code or moving to Netty 4.2. ## Validation - `mvn -DskipTests validate` - `mvn dependency:tree -pl iotdb-core/metrics/interface,external-service-impl/mqtt,iotdb-core/datanode '-Dincludes=io.netty:*' -DoutputType=text` - `mvn compile -DskipTests -pl external-service-impl/mqtt` The dependency tree resolves the affected Netty artifacts to `4.1.136.Final`. A standalone DataNode compile was also attempted, but it uses a stale locally installed `node-commons` artifact that lacks OPC UA constants already present in the current source tree; the resulting errors are unrelated to Netty. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
