ARTEMIS-X Bump netty.version from 4.1.135.Final to 4.1.136.Final by dependabot[bot] · Pull Request #6577 · apache/artemis

dependabot · 2026-07-09T02:24:33Z

Bumps netty.version from 4.1.135.Final to 4.1.136.Final.
Updates io.netty:netty-buffer from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-buffer's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-transport from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-transport's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-handler from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-handler-proxy from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-handler-proxy's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-codec from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.1.135.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
Description has been truncated

Bumps `netty.version` from 4.1.135.Final to 4.1.136.Final. Updates `io.netty:netty-buffer` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-handler` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-handler-proxy` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-mqtt` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-haproxy` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-socks` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-common` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-resolver` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport-native-unix-common` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport-native-epoll` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport-classes-kqueue` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http2` from 4.1.135.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.135.Final...netty-4.1.136.Final) --- updated-dependencies: - dependency-name: io.netty:netty-buffer dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler-proxy dependency-version: 4.1.136.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-mqtt dependency-version: 4.1.136.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-haproxy dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-socks dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-common dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-resolver dependency-version: 4.1.136.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-unix-common dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-classes-kqueue dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ARTEMIS-X Bump netty.version from 4.1.135.Final to 4.1.136.Final#6577

ARTEMIS-X Bump netty.version from 4.1.135.Final to 4.1.136.Final#6577
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/netty.version-4.1.136.Final

dependabot Bot commented on behalf of github Jul 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 9, 2026

netty-4.1.136.Final

What's Changed

netty-4.1.136.Final

What's Changed

netty-4.1.136.Final

What's Changed

netty-4.1.136.Final

What's Changed

netty-4.1.136.Final

What's Changed

netty-4.1.136.Final

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants