From 8b13ce9265e2d2965be0713b24af8aa276a8fc50 Mon Sep 17 00:00:00 2001 From: Anna Cocuzzo <63511057+acocuzzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 12:37:25 -0500 Subject: [PATCH 1/5] Update SECURITY.md --- SECURITY.md | 1 + 1 file changed, 1 insertion(+) diff --git a/SECURITY.md b/SECURITY.md index 48d6e0919a1..c8546983f6b 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -372,6 +372,7 @@ grpc-netty version | netty-handler version | netty-tcnative-boringssl-static ver 1.0.0-1.0.1 | 4.1.3.Final | 1.1.33.Fork19 1.0.2-1.0.3 | 4.1.6.Final | 1.1.33.Fork23 1.1.x-1.3.x | 4.1.8.Final | 1.1.33.Fork26 +1.4.x | 4.1.18.Final | 2.0.1.Final 1.4.x | 4.1.11.Final | 2.0.1.Final 1.5.x | 4.1.12.Final | 2.0.5.Final 1.6.x | 4.1.14.Final | 2.0.5.Final From dd5524f4d9503fc82f1b7be40aacdef74dc2d6b6 Mon Sep 17 00:00:00 2001 From: Anna Cocuzzo <63511057+acocuzzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 12:38:28 -0500 Subject: [PATCH 2/5] Update libs.versions.toml --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 2ea4c8b5fa1..0fee472603e 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,5 +1,5 @@ [versions] -netty = '4.1.110.Final' +netty = '4.1.118.Final' # Keep the following references of tcnative version in sync whenever it's updated: # SECURITY.md nettytcnative = '2.0.70.Final' From 8872aabeef87968d838947cb06d40089c0214692 Mon Sep 17 00:00:00 2001 From: Anna Cocuzzo <63511057+acocuzzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 12:39:35 -0500 Subject: [PATCH 3/5] Update repositories.bzl --- repositories.bzl | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/repositories.bzl b/repositories.bzl index d55ff07e7e6..71d231d0a4f 100644 --- a/repositories.bzl +++ b/repositories.bzl @@ -27,20 +27,20 @@ IO_GRPC_GRPC_JAVA_ARTIFACTS = [ "com.google.truth:truth:1.4.2", "com.squareup.okhttp:okhttp:2.7.5", "com.squareup.okio:okio:2.10.0", # 3.0+ needs swapping to -jvm; need work to avoid flag-day - "io.netty:netty-buffer:4.1.110.Final", - "io.netty:netty-codec-http2:4.1.110.Final", - "io.netty:netty-codec-http:4.1.110.Final", - "io.netty:netty-codec-socks:4.1.110.Final", - "io.netty:netty-codec:4.1.110.Final", - "io.netty:netty-common:4.1.110.Final", - "io.netty:netty-handler-proxy:4.1.110.Final", - "io.netty:netty-handler:4.1.110.Final", - "io.netty:netty-resolver:4.1.110.Final", + "io.netty:netty-buffer:4.1.118.Final", + "io.netty:netty-codec-http2:4.1.118.Final", + "io.netty:netty-codec-http:4.1.118.Final", + "io.netty:netty-codec-socks:4.1.118.Final", + "io.netty:netty-codec:4.1.118.Final", + "io.netty:netty-common:4.1.118.Final", + "io.netty:netty-handler-proxy:4.1.118.Final", + "io.netty:netty-handler:4.1.118.Final", + "io.netty:netty-resolver:4.1.118.Final", "io.netty:netty-tcnative-boringssl-static:2.0.70.Final", "io.netty:netty-tcnative-classes:2.0.70.Final", - "io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.110.Final", - "io.netty:netty-transport-native-unix-common:4.1.110.Final", - "io.netty:netty-transport:4.1.110.Final", + "io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.118.Final", + "io.netty:netty-transport-native-unix-common:4.1.118.Final", + "io.netty:netty-transport:4.1.118.Final", "io.opencensus:opencensus-api:0.31.0", "io.opencensus:opencensus-contrib-grpc-metrics:0.31.0", "io.perfmark:perfmark-api:0.27.0", From cdcfdcb0d3d8aefaedc047e274a03f90d5e043b4 Mon Sep 17 00:00:00 2001 From: Anna Cocuzzo <63511057+acocuzzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 12:45:40 -0500 Subject: [PATCH 4/5] Update MODULE.bazel --- MODULE.bazel | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/MODULE.bazel b/MODULE.bazel index 88f3a524060..445b3832863 100644 --- a/MODULE.bazel +++ b/MODULE.bazel @@ -23,20 +23,20 @@ IO_GRPC_GRPC_JAVA_ARTIFACTS = [ "com.google.truth:truth:1.4.2", "com.squareup.okhttp:okhttp:2.7.5", "com.squareup.okio:okio:2.10.0", # 3.0+ needs swapping to -jvm; need work to avoid flag-day - "io.netty:netty-buffer:4.1.110.Final", - "io.netty:netty-codec-http2:4.1.110.Final", - "io.netty:netty-codec-http:4.1.110.Final", - "io.netty:netty-codec-socks:4.1.110.Final", - "io.netty:netty-codec:4.1.110.Final", - "io.netty:netty-common:4.1.110.Final", - "io.netty:netty-handler-proxy:4.1.110.Final", - "io.netty:netty-handler:4.1.110.Final", - "io.netty:netty-resolver:4.1.110.Final", + "io.netty:netty-buffer:4.1.118.Final", + "io.netty:netty-codec-http2:4.1.118.Final", + "io.netty:netty-codec-http:4.1.118.Final", + "io.netty:netty-codec-socks:4.1.118.Final", + "io.netty:netty-codec:4.1.118.Final", + "io.netty:netty-common:4.1.118.Final", + "io.netty:netty-handler-proxy:4.1.118.Final", + "io.netty:netty-handler:4.1.118.Final", + "io.netty:netty-resolver:4.1.118.Final", "io.netty:netty-tcnative-boringssl-static:2.0.70.Final", "io.netty:netty-tcnative-classes:2.0.70.Final", - "io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.110.Final", - "io.netty:netty-transport-native-unix-common:4.1.110.Final", - "io.netty:netty-transport:4.1.110.Final", + "io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.118.Final", + "io.netty:netty-transport-native-unix-common:4.1.118.Final", + "io.netty:netty-transport:4.1.118.Final", "io.opencensus:opencensus-api:0.31.0", "io.opencensus:opencensus-contrib-grpc-metrics:0.31.0", "io.perfmark:perfmark-api:0.27.0", From 11f781941254ca614952ad1615848933c3df62a1 Mon Sep 17 00:00:00 2001 From: Anna Cocuzzo <63511057+acocuzzo@users.noreply.github.com> Date: Thu, 20 Feb 2025 12:47:17 -0500 Subject: [PATCH 5/5] Update SECURITY.md --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index c8546983f6b..f8a941a973d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -372,12 +372,12 @@ grpc-netty version | netty-handler version | netty-tcnative-boringssl-static ver 1.0.0-1.0.1 | 4.1.3.Final | 1.1.33.Fork19 1.0.2-1.0.3 | 4.1.6.Final | 1.1.33.Fork23 1.1.x-1.3.x | 4.1.8.Final | 1.1.33.Fork26 -1.4.x | 4.1.18.Final | 2.0.1.Final 1.4.x | 4.1.11.Final | 2.0.1.Final 1.5.x | 4.1.12.Final | 2.0.5.Final 1.6.x | 4.1.14.Final | 2.0.5.Final 1.7.x-1.8.x | 4.1.16.Final | 2.0.6.Final 1.9.x-1.10.x | 4.1.17.Final | 2.0.7.Final +1.9.x-1.10.x | 4.1.18.Final | 2.0.7.Final 1.11.x-1.12.x | 4.1.22.Final | 2.0.7.Final 1.13.x | 4.1.25.Final | 2.0.8.Final 1.14.x-1.15.x | 4.1.27.Final | 2.0.12.Final