Bump the netty group across 1 directory with 10 updates by dependabot[bot] · Pull Request #6832 · aws/aws-sdk-java-v2

dependabot · 2026-03-31T14:15:17Z

Bumps the netty group with 10 updates in the / directory:

Package	From	To
io.netty:netty-handler	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-transport	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec-http	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec-http2	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-common	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-buffer	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-resolver	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-resolver-dns	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-transport-classes-epoll	`4.1.132.Final`	`4.2.12.Final`

Updates io.netty:netty-handler from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-transport from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-transport's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-common from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-common's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set des...
Description has been truncated

Bumps the netty group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-transport](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-common](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-buffer](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-resolver](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-resolver-dns](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-transport-classes-epoll](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | Updates `io.netty:netty-handler` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-common` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-buffer` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver-dns` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-common` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-buffer` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver-dns` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) --- updated-dependencies: - dependency-name: io.netty:netty-handler dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-common dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-buffer dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver-dns dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-common dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-buffer dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver-dns dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-20T16:42:03Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

github-actions · 2026-04-20T16:42:14Z

This pull request has been closed and the conversation has been locked. Comments on closed PRs are hard for our team to see. If you need more assistance, please open a new issue that references this one.

dependabot Bot added dependencies This issue is a problem in a dependency. java Pull requests that update java code labels Mar 31, 2026

dependabot Bot requested a review from a team as a code owner March 31, 2026 14:15

dependabot Bot force-pushed the dependabot/maven/netty-db6d26bc52 branch 9 times, most recently from 39d2a70 to 174bc42 Compare April 6, 2026 19:58

dependabot Bot force-pushed the dependabot/maven/netty-db6d26bc52 branch 5 times, most recently from 173f09a to 38c20b5 Compare April 13, 2026 19:22

dependabot Bot force-pushed the dependabot/maven/netty-db6d26bc52 branch 6 times, most recently from e980a7a to 5e7dd60 Compare April 17, 2026 20:26

dependabot Bot force-pushed the dependabot/maven/netty-db6d26bc52 branch from 5e7dd60 to f5cf6fa Compare April 18, 2026 00:46

dependabot Bot closed this Apr 20, 2026

dependabot Bot deleted the dependabot/maven/netty-db6d26bc52 branch April 20, 2026 16:42

github-actions Bot locked as resolved and limited conversation to collaborators Apr 20, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the netty group across 1 directory with 10 updates#6832

Bump the netty group across 1 directory with 10 updates#6832
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/netty-db6d26bc52

dependabot Bot commented on behalf of github Mar 31, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 20, 2026

Uh oh!

github-actions Bot commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Apr 20, 2026

Uh oh!

github-actions Bot commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Mar 31, 2026 •

edited

Loading