ARTEMIS-X Bump netty.version from 4.1.132.Final to 4.1.134.Final by dependabot[bot] · Pull Request #6463 · apache/artemis

dependabot · 2026-05-21T02:43:04Z

Bumps netty.version from 4.1.132.Final to 4.1.134.Final.
Updates io.netty:netty-buffer from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-buffer's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhost addresses without querying DNS servers (#16749) by @normanmaurer in netty/netty#16820

Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting by @netty-project-bot in netty/netty#16816

Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptionCaught by @netty-project-bot in netty/netty#16824

Auto-port 4.1: Fix MQTT decoder size check after variable header replay by @netty-project-bot in netty/netty#16838

Full Changelog: netty/netty@netty-4.1.133.Final...netty-4.1.134.Final

netty-4.1.133.Final

CVEs Fixed

CVE-2026-42586 (netty-codec-redis)

CVE-2026-42578 (netty-handler-proxy)

CVE-2026-42587 (netty-codec-http, netty-codec-http2)

CVE-2026-41417 (netty-codec-http)

CVE-2026-42581 (netty-codec-http)

CVE-2026-42580 (netty-codec-http)

CVE-2026-42585 (netty-codec-http)

CVE-2026-42579 (netty-codec-dns)

CVE-2026-42582 (netty-codec-http3)

CVE-2026-42583 (netty-codec, netty-codec-compression)

CVE-2026-42584 (netty-codec-http)

CVE-2026-44248 (netty-codec-mqtt)

What's Changed

Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by @daguimu in netty/netty#16539

Auto-port 4.1: Fix implementation of strerror_r_xsi for GNU by @netty-project-bot in netty/netty#16561

Auto-port 4.1: Replace usage of strerror with thread-safe alternative by @netty-project-bot in netty/netty#16555

Auto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by @netty-project-bot in netty/netty#16554

Auto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by @netty-project-bot in netty/netty#16576

Auto-port 4.1: Native DNS resolver: Guard against malloc failures by @netty-project-bot in netty/netty#16584

Auto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by @netty-project-bot in netty/netty#16582

Auto-port 4.1: Fix parsing HTTP chunks with multiple extensions by @netty-project-bot in netty/netty#16588

Auto-port 4.1: Stabilize read-only toStringMultipleThreads1 by @netty-project-bot in netty/netty#16610

Auto-port 4.1: Epoll: Cleanup code to always return negative value on failure by @netty-project-bot in netty/netty#16601

Auto-port 4.1: Stabilize more AbstractByteBufTests by @netty-project-bot in netty/netty#16613

Auto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by @netty-project-bot in netty/netty#16616

Auto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by @netty-project-bot in netty/netty#16598

Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by @daguimu in netty/netty#16558

... (truncated)

Commits

970b248 [maven-release-plugin] prepare release netty-4.1.134.Final
30f8f28 Auto-port 4.1: Fix MQTT decoder size check after variable header replay (#16838)
4c1cb1d Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptio...
f89176a Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting (#16816)
bb458bd Resolve all localhost addresses without querying DNS servers (#16749) (#16820)
4f6cc7a Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if o...
4bacea2 Auto-port 4.1: Remove test annotations from a method that isn't a test (#16798)
2ea1c34 Isolate tests that modify available Security providers (#16793) (#16805)
25db4bb Avoid re-parsing openssl key material with non-cached provider (#16759) (#16791)
1e28f3c Auto-port 4.1: Remove dead native declarations (#16785)
Additional commits viewable in compare view

Updates io.netty:netty-transport from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-transport's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhost addresses without querying DNS servers (#16749) by @normanmaurer in netty/netty#16820

Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting by @netty-project-bot in netty/netty#16816

Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptionCaught by @netty-project-bot in netty/netty#16824

Auto-port 4.1: Fix MQTT decoder size check after variable header replay by @netty-project-bot in netty/netty#16838

Full Changelog: netty/netty@netty-4.1.133.Final...netty-4.1.134.Final

netty-4.1.133.Final

CVEs Fixed

CVE-2026-42586 (netty-codec-redis)

CVE-2026-42578 (netty-handler-proxy)

CVE-2026-42587 (netty-codec-http, netty-codec-http2)

CVE-2026-41417 (netty-codec-http)

CVE-2026-42581 (netty-codec-http)

CVE-2026-42580 (netty-codec-http)

CVE-2026-42585 (netty-codec-http)

CVE-2026-42579 (netty-codec-dns)

CVE-2026-42582 (netty-codec-http3)

CVE-2026-42583 (netty-codec, netty-codec-compression)

CVE-2026-42584 (netty-codec-http)

CVE-2026-44248 (netty-codec-mqtt)

What's Changed

Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by @daguimu in netty/netty#16539

Auto-port 4.1: Fix implementation of strerror_r_xsi for GNU by @netty-project-bot in netty/netty#16561

Auto-port 4.1: Replace usage of strerror with thread-safe alternative by @netty-project-bot in netty/netty#16555

Auto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by @netty-project-bot in netty/netty#16554

Auto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by @netty-project-bot in netty/netty#16576

Auto-port 4.1: Native DNS resolver: Guard against malloc failures by @netty-project-bot in netty/netty#16584

Auto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by @netty-project-bot in netty/netty#16582

Auto-port 4.1: Fix parsing HTTP chunks with multiple extensions by @netty-project-bot in netty/netty#16588

Auto-port 4.1: Stabilize read-only toStringMultipleThreads1 by @netty-project-bot in netty/netty#16610

Auto-port 4.1: Epoll: Cleanup code to always return negative value on failure by @netty-project-bot in netty/netty#16601

Auto-port 4.1: Stabilize more AbstractByteBufTests by @netty-project-bot in netty/netty#16613

Auto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by @netty-project-bot in netty/netty#16616

Auto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by @netty-project-bot in netty/netty#16598

Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by @daguimu in netty/netty#16558

... (truncated)

Commits

970b248 [maven-release-plugin] prepare release netty-4.1.134.Final
30f8f28 Auto-port 4.1: Fix MQTT decoder size check after variable header replay (#16838)
4c1cb1d Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptio...
f89176a Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting (#16816)
bb458bd Resolve all localhost addresses without querying DNS servers (#16749) (#16820)
4f6cc7a Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if o...
4bacea2 Auto-port 4.1: Remove test annotations from a method that isn't a test (#16798)
2ea1c34 Isolate tests that modify available Security providers (#16793) (#16805)
25db4bb Avoid re-parsing openssl key material with non-cached provider (#16759) (#16791)
1e28f3c Auto-port 4.1: Remove dead native declarations (#16785)
Additional commits viewable in compare view

Updates io.netty:netty-handler from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhost addresses without querying DNS servers (#16749) by @normanmaurer in netty/netty#16820

Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting by @netty-project-bot in netty/netty#16816

Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptionCaught by @netty-project-bot in netty/netty#16824

Auto-port 4.1: Fix MQTT decoder size check after variable header replay by @netty-project-bot in netty/netty#16838

Full Changelog: netty/netty@netty-4.1.133.Final...netty-4.1.134.Final

netty-4.1.133.Final

CVEs Fixed

CVE-2026-42586 (netty-codec-redis)

CVE-2026-42578 (netty-handler-proxy)

CVE-2026-42587 (netty-codec-http, netty-codec-http2)

CVE-2026-41417 (netty-codec-http)

CVE-2026-42581 (netty-codec-http)

CVE-2026-42580 (netty-codec-http)

CVE-2026-42585 (netty-codec-http)

CVE-2026-42579 (netty-codec-dns)

CVE-2026-42582 (netty-codec-http3)

CVE-2026-42583 (netty-codec, netty-codec-compression)

CVE-2026-42584 (netty-codec-http)

CVE-2026-44248 (netty-codec-mqtt)

What's Changed

Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by @daguimu in netty/netty#16539

Auto-port 4.1: Fix implementation of strerror_r_xsi for GNU by @netty-project-bot in netty/netty#16561

Auto-port 4.1: Replace usage of strerror with thread-safe alternative by @netty-project-bot in netty/netty#16555

Auto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by @netty-project-bot in netty/netty#16554

Auto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by @netty-project-bot in netty/netty#16576

Auto-port 4.1: Native DNS resolver: Guard against malloc failures by @netty-project-bot in netty/netty#16584

Auto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by @netty-project-bot in netty/netty#16582

Auto-port 4.1: Fix parsing HTTP chunks with multiple extensions by @netty-project-bot in netty/netty#16588

Auto-port 4.1: Stabilize read-only toStringMultipleThreads1 by @netty-project-bot in netty/netty#16610

Auto-port 4.1: Epoll: Cleanup code to always return negative value on failure by @netty-project-bot in netty/netty#16601

Auto-port 4.1: Stabilize more AbstractByteBufTests by @netty-project-bot in netty/netty#16613

Auto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by @netty-project-bot in netty/netty#16616

Auto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by @netty-project-bot in netty/netty#16598

Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by @daguimu in netty/netty#16558

... (truncated)

Commits

970b248 [maven-release-plugin] prepare release netty-4.1.134.Final
30f8f28 Auto-port 4.1: Fix MQTT decoder size check after variable header replay (#16838)
4c1cb1d Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptio...
f89176a Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting (#16816)
bb458bd Resolve all localhost addresses without querying DNS servers (#16749) (#16820)
4f6cc7a Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if o...
4bacea2 Auto-port 4.1: Remove test annotations from a method that isn't a test (#16798)
2ea1c34 Isolate tests that modify available Security providers (#16793) (#16805)
25db4bb Avoid re-parsing openssl key material with non-cached provider (#16759) (#16791)
1e28f3c Auto-port 4.1: Remove dead native declarations (#16785)
Additional commits viewable in compare view

Updates io.netty:netty-handler-proxy from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-handler-proxy's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhost addresses without querying DNS servers (#16749) by @normanmaurer in netty/netty#16820

Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting by @netty-project-bot in netty/netty#16816

Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptionCaught by @netty-project-bot in netty/netty#16824

Auto-port 4.1: Fix MQTT decoder size check after variable header replay by @netty-project-bot in netty/netty#16838

Full Changelog: netty/netty@netty-4.1.133.Final...netty-4.1.134.Final

netty-4.1.133.Final

CVEs Fixed

CVE-2026-42586 (netty-codec-redis)

CVE-2026-42578 (netty-handler-proxy)

CVE-2026-42587 (netty-codec-http, netty-codec-http2)

CVE-2026-41417 (netty-codec-http)

CVE-2026-42581 (netty-codec-http)

CVE-2026-42580 (netty-codec-http)

CVE-2026-42585 (netty-codec-http)

CVE-2026-42579 (netty-codec-dns)

CVE-2026-42582 (netty-codec-http3)

CVE-2026-42583 (netty-codec, netty-codec-compression)

CVE-2026-42584 (netty-codec-http)

CVE-2026-44248 (netty-codec-mqtt)

What's Changed

Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by @daguimu in netty/netty#16539

Auto-port 4.1: Fix implementation of strerror_r_xsi for GNU by @netty-project-bot in netty/netty#16561

Auto-port 4.1: Replace usage of strerror with thread-safe alternative by @netty-project-bot in netty/netty#16555

Auto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by @netty-project-bot in netty/netty#16554

Auto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by @netty-project-bot in netty/netty#16576

Auto-port 4.1: Native DNS resolver: Guard against malloc failures by @netty-project-bot in netty/netty#16584

Auto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by @netty-project-bot in netty/netty#16582

Auto-port 4.1: Fix parsing HTTP chunks with multiple extensions by @netty-project-bot in netty/netty#16588

Auto-port 4.1: Stabilize read-only toStringMultipleThreads1 by @netty-project-bot in netty/netty#16610

Auto-port 4.1: Epoll: Cleanup code to always return negative value on failure by @netty-project-bot in netty/netty#16601

Auto-port 4.1: Stabilize more AbstractByteBufTests by @netty-project-bot in netty/netty#16613

Auto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by @netty-project-bot in netty/netty#16616

Auto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by @netty-project-bot in netty/netty#16598

Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by @daguimu in netty/netty#16558

... (truncated)

Commits

970b248 [maven-release-plugin] prepare release netty-4.1.134.Final
30f8f28 Auto-port 4.1: Fix MQTT decoder size check after variable header replay (#16838)
4c1cb1d Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptio...
f89176a Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting (#16816)
bb458bd Resolve all localhost addresses without querying DNS servers (#16749) (#16820)
4f6cc7a Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if o...
4bacea2 Auto-port 4.1: Remove test annotations from a method that isn't a test (#16798)
2ea1c34 Isolate tests that modify available Security providers (#16793) (#16805)
25db4bb Avoid re-parsing openssl key material with non-cached provider (#16759) (#16791)
1e28f3c Auto-port 4.1: Remove dead native declarations (#16785)
Additional commits viewable in compare view

Updates io.netty:netty-codec from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhost addresses without querying DNS servers (#16749) by @normanmaurer in netty/netty#16820

Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting by @netty-project-bot in netty/netty#16816

Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptionCaught by @netty-project-bot in netty/netty#16824

Auto-port 4.1: Fix MQTT decoder size check after variable header replay by @netty-project-bot in netty/netty#16838

Full Changelog: netty/netty@netty-4.1.133.Final...netty-4.1.134.Final

netty-4.1.133.Final

CVEs Fixed

CVE-2026-42586 (netty-codec-redis)

CVE-2026-42578 (netty-handler-proxy)

CVE-2026-42587 (netty-codec-http, netty-codec-http2)

CVE-2026-41417 (netty-codec-http)

CVE-2026-42581 (netty-codec-http)

CVE-2026-42580 (netty-codec-http)

CVE-2026-42585 (netty-codec-http)

CVE-2026-42579 (netty-codec-dns)

CVE-2026-42582 (netty-codec-http3)

CVE-2026-42583 (netty-codec, netty-codec-compression)

CVE-2026-42584 (netty-codec-http)

CVE-2026-44248 (netty-codec-mqtt)

What's Changed

Fix IndexOutOfBoundsException in StompSubframeDecoder on heartbeat by @daguimu in netty/netty#16539

Auto-port 4.1: Fix implementation of strerror_r_xsi for GNU by @netty-project-bot in netty/netty#16561

Auto-port 4.1: Replace usage of strerror with thread-safe alternative by @netty-project-bot in netty/netty#16555

Auto-port 4.1: Kqueue: sendfile EINTR doesn't advance offset — data duplication by @netty-project-bot in netty/netty#16554

Auto-port 4.1: Avoid leak in PemReader on OutOfDirectMemoryError by @netty-project-bot in netty/netty#16576

Auto-port 4.1: Native DNS resolver: Guard against malloc failures by @netty-project-bot in netty/netty#16584

Auto-port 4.1: Include user properties and subscription IDs in MqttProperties#isEmpty by @netty-project-bot in netty/netty#16582

Auto-port 4.1: Fix parsing HTTP chunks with multiple extensions by @netty-project-bot in netty/netty#16588

Auto-port 4.1: Stabilize read-only toStringMultipleThreads1 by @netty-project-bot in netty/netty#16610

Auto-port 4.1: Epoll: Cleanup code to always return negative value on failure by @netty-project-bot in netty/netty#16601

Auto-port 4.1: Stabilize more AbstractByteBufTests by @netty-project-bot in netty/netty#16613

Auto-port 4.1: Stabilize testSessionInvalidate for Conscrypt by @netty-project-bot in netty/netty#16616

Auto-port 4.1: Native transports: Correctly create pipe when pipe2 is not supported by @netty-project-bot in netty/netty#16598

Use stream error for maxContentLength exceeded in InboundHttp2ToHttpAdapter by @daguimu in netty/netty#16558

... (truncated)

Commits

970b248 [maven-release-plugin] prepare release netty-4.1.134.Final
30f8f28 Auto-port 4.1: Fix MQTT decoder size check after variable header replay (#16838)
4c1cb1d Auto-port 4.1: Route synchronous onLookupComplete exceptions via fireExceptio...
f89176a Auto-port 4.1: HTTP2: Use 100 as default max concurrent streams setting (#16816)
bb458bd Resolve all localhost addresses without querying DNS servers (#16749) (#16820)
4f6cc7a Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if o...
4bacea2 Auto-port 4.1: Remove test annotations from a method that isn't a test (#16798)
2ea1c34 Isolate tests that modify available Security providers (#16793) (#16805)
25db4bb Avoid re-parsing openssl key material with non-cached provider (#16759) (#16791)
1e28f3c Auto-port 4.1: Remove dead native declarations (#16785)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.1.132.Final to 4.1.134.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.1.134.Final

What's Changed

Auto-port 4.1: HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @netty-project-bot in netty/netty#16750

Auto-port 4.1: Marshalling: Explicit document security requirements by @netty-project-bot in netty/netty#16754

Pin HTTP/RTSP version + method normalization to Locale.US (#16765) by @normanmaurer in netty/netty#16770

Adaptive: Fix concurrency issue in adaptive allocator (#16767) by @chrisvest in netty/netty#16778

Pin multipart Content-Type / Content-Transfer-Encoding case folding t… by @normanmaurer in netty/netty#16784

Auto-port 4.1: Remove dead native declarations by @netty-project-bot in netty/netty#16785

Avoid re-parsing openssl key material with non-cached provider (#16759) by @chrisvest in netty/netty#16791

Isolate tests that modify available Security providers (#16793) by @chrisvest in netty/netty#16805

Auto-port 4.1: Remove test annotations from a method that isn't a test by @netty-project-bot in netty/netty#16798

Auto-port 4.1: IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @netty-project-bot in netty/netty#16822

Resolve all localhos...
Description has been truncated

Bumps `netty.version` from 4.1.132.Final to 4.1.134.Final. Updates `io.netty:netty-buffer` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-handler` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-handler-proxy` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec-mqtt` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec-haproxy` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec-socks` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-common` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-resolver` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport-native-unix-common` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport-native-epoll` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport-classes-kqueue` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.1.134.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.134.Final) --- updated-dependencies: - dependency-name: io.netty:netty-buffer dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler-proxy dependency-version: 4.1.134.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-mqtt dependency-version: 4.1.134.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-haproxy dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-socks dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-common dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-resolver dependency-version: 4.1.134.Final dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-unix-common dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-classes-kqueue dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.1.134.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the dependencies Pull requests that update a dependency file label May 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ARTEMIS-X Bump netty.version from 4.1.132.Final to 4.1.134.Final#6463

ARTEMIS-X Bump netty.version from 4.1.132.Final to 4.1.134.Final#6463
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/netty.version-4.1.134.Final

dependabot Bot commented on behalf of github May 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 21, 2026

netty-4.1.134.Final

What's Changed

netty-4.1.133.Final

CVEs Fixed

What's Changed

netty-4.1.134.Final

What's Changed

netty-4.1.133.Final

CVEs Fixed

What's Changed

netty-4.1.134.Final

What's Changed

netty-4.1.133.Final

CVEs Fixed

What's Changed

netty-4.1.134.Final

What's Changed

netty-4.1.133.Final

CVEs Fixed

What's Changed

netty-4.1.134.Final

What's Changed

netty-4.1.133.Final

CVEs Fixed

What's Changed

netty-4.1.134.Final

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants