Bump the netty group across 1 directory with 11 updates by dependabot[bot] · Pull Request #6878 · aws/aws-sdk-java-v2

dependabot · 2026-04-20T16:42:54Z

Bumps the netty group with 11 updates in the / directory:

Package	From	To
io.netty:netty-handler	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-transport	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec-http	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec-http2	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-codec	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-common	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-buffer	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-resolver	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-resolver-dns	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-transport-classes-epoll	`4.1.132.Final`	`4.2.12.Final`
io.netty:netty-tcnative-boringssl-static	`2.0.75.Final`	`2.0.76.Final`

Updates io.netty:netty-handler from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-transport from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-transport's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-common from 4.1.132.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-common's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest<... Description has been truncated

Bumps the netty group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-transport](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-codec](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-common](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-buffer](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-resolver](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-resolver-dns](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-transport-classes-epoll](https://github.com/netty/netty) | `4.1.132.Final` | `4.2.12.Final` | | [io.netty:netty-tcnative-boringssl-static](https://github.com/netty/netty-tcnative) | `2.0.75.Final` | `2.0.76.Final` | Updates `io.netty:netty-handler` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-common` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-buffer` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver-dns` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-common` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-buffer` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-resolver-dns` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.132.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.2.12.Final) Updates `io.netty:netty-tcnative-boringssl-static` from 2.0.75.Final to 2.0.76.Final - [Release notes](https://github.com/netty/netty-tcnative/releases) - [Commits](netty/netty-tcnative@netty-tcnative-parent-2.0.75.Final...netty-tcnative-parent-2.0.76.Final) --- updated-dependencies: - dependency-name: io.netty:netty-handler dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-common dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-buffer dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver-dns dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-codec dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-common dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-buffer dependency-version: 4.2.12.Final dependency-type: direct:development update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-resolver-dns dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-minor dependency-group: netty - dependency-name: io.netty:netty-tcnative-boringssl-static dependency-version: 2.0.76.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: netty ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies This issue is a problem in a dependency. java Pull requests that update java code labels Apr 20, 2026

dependabot Bot requested a review from a team as a code owner April 20, 2026 16:42

dependabot Bot added dependencies This issue is a problem in a dependency. java Pull requests that update java code labels Apr 20, 2026

dependabot Bot force-pushed the dependabot/maven/netty-2c7e2ae89b branch 4 times, most recently from 7a4bc40 to e1f17ed Compare April 21, 2026 22:44

dependabot Bot force-pushed the dependabot/maven/netty-2c7e2ae89b branch from e1f17ed to 6feb9df Compare April 22, 2026 06:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the netty group across 1 directory with 11 updates#6878

Bump the netty group across 1 directory with 11 updates#6878
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/netty-2c7e2ae89b

dependabot Bot commented on behalf of github Apr 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 20, 2026 •

edited

Loading