Bump netty from 4.2.15.Final to 4.2.16.Final by dependabot[bot] · Pull Request #4656 · apache/solr

dependabot · 2026-07-23T15:12:27Z

Bumps netty from 4.2.15.Final to 4.2.16.Final.
Updates io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-handler from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-transport-classes-epoll from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-transport-classes-epoll's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-epoll from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-transport-native-epoll's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in

Bumps `netty` from 4.2.15.Final to 4.2.16.Final. Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-codec-http` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-handler` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-transport-classes-epoll` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.2.16.Final dependency-type: direct:production - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.16.Final dependency-type: direct:production - dependency-name: io.netty:netty-handler dependency-version: 4.2.16.Final dependency-type: direct:production - dependency-name: io.netty:netty-transport-classes-epoll dependency-version: 4.2.16.Final dependency-type: direct:production - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.16.Final dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-17T19:27:22Z

Superseded by #4746.

dependabot Bot added dependencies Dependency upgrades java Pull requests that update java code labels Jul 23, 2026

github-actions Bot added the tool:build label Jul 23, 2026

dependabot Bot force-pushed the dependabot/gradle/netty-4.2.16.Final branch from 08c3317 to c16de6e Compare August 4, 2026 14:41

dependabot Bot closed this Aug 17, 2026

dependabot Bot deleted the dependabot/gradle/netty-4.2.16.Final branch August 17, 2026 19:27

Navigation Menu

Uh oh!

Bump netty from 4.2.15.Final to 4.2.16.Final - #4656

Bump netty from 4.2.15.Final to 4.2.16.Final#4656
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/netty-4.2.16.Final

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading