Skip to content

CMR-11453 - Update netty version to 4.1.137.Final to address Snyk vulnerability - #2492

Merged
jaortega527 merged 1 commit into
masterfrom
CMR-11453
Sep 3, 2026
Merged

CMR-11453 - Update netty version to 4.1.137.Final to address Snyk vulnerability#2492
jaortega527 merged 1 commit into
masterfrom
CMR-11453

Conversation

@jaortega527

Copy link
Copy Markdown
Contributor

Overview

What is the objective?

Updates Netty from 4.1.136.Final to 4.1.137.Final in the CMR message queue library. Addresses SNYK-JAVA-IONETTY-18955131 and SNYK-JAVA-IONETTY-19005879.

What are the changes?

  • Updated the shared Netty version from 4.1.136.Final to 4.1.137.Final
  • Updated the resolved version for:
    • io.netty:netty-handler
    • io.netty:netty-codec-http
    • io.netty:netty-codec-http2
    • io.netty:netty-code
    • io.netty:netty-transport-classes-epoll
  • No application code or behavior was changed

What areas of the application does this impact?

  • message-queue-lib

Required Checklist

  • New and existing unit and int tests pass locally and remotely
  • clj-kondo has been run locally and all errors in changed files are corrected
  • I have commented my code, particularly in hard-to-understand areas
  • I have made changes to the documentation (if necessary)
  • My changes generate no new warnings

Additional Checklist

  • I have removed unnecessary/dead code and imports in files I have changed
  • I have cleaned up integration tests by doing one or more of the following:
    • migrated any are2 tests to are3 in files I have changed
    • de-duped, consolidated, removed dead int tests
    • transformed applicable int tests into unit tests
    • reduced number of system state resets by updating fixtures. Ex) (use-fixtures :each (ingest/reset-fixture {})) to be :once instead of :each

@codecov-commenter

codecov-commenter commented Sep 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.96%. Comparing base (3fdcbe2) to head (003f1e8).

Additional details and impacted files
@@             Coverage Diff             @@
##           master    #2492       +/-   ##
===========================================
- Coverage   86.92%   57.96%   -28.97%     
===========================================
  Files          44     1074     +1030     
  Lines        6326    74707    +68381     
  Branches      320     2190     +1870     
===========================================
+ Hits         5499    43303    +37804     
- Misses        619    29354    +28735     
- Partials      208     2050     +1842     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@jaortega527
jaortega527 merged commit 0b364bd into master Sep 3, 2026
6 checks passed
@jaortega527
jaortega527 deleted the CMR-11453 branch September 3, 2026 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants