From 2f1e9aece90a3bc76cb8bf379f43d7b7c4522af7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 19:56:55 +0000 Subject: [PATCH] Bump nettyVersion from 4.1.135.Final to 4.2.17.Final Bumps `nettyVersion` from 4.1.135.Final to 4.2.17.Final. Updates `io.netty:netty-codec-http2` from 4.1.135.Final to 4.2.17.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.17.Final) Updates `io.netty:netty-handler-proxy` from 4.1.135.Final to 4.2.17.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.17.Final) Updates `io.netty:netty-transport-native-unix-common` from 4.1.135.Final to 4.2.17.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.2.17.Final) --- updated-dependencies: - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.17.Final dependency-type: direct:production - dependency-name: io.netty:netty-handler-proxy dependency-version: 4.2.17.Final dependency-type: direct:production - dependency-name: io.netty:netty-transport-native-unix-common dependency-version: 4.2.17.Final dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 5074defc..43cb3863 100644 --- a/build.gradle +++ b/build.gradle @@ -55,7 +55,7 @@ def grpcVersion = '1.60.2' // Netty is pulled in transitively by grpc-netty (1.60.2 -> 4.1.100.Final, which is vulnerable // to CVE-2025-24970). grpc-netty does not pin a patched Netty even in recent releases, so we // pin Netty directly here. Bump alongside grpc when grpc itself ships a patched Netty. -def nettyVersion = '4.1.135.Final' +def nettyVersion = '4.2.17.Final' dependencies { api "io.grpc:grpc-protobuf:${grpcVersion}"