Skip to content

CMR-11453 - Update netty version to 4.1.137.Final to address Snyk vulnerability - #2492

Open
jaortega527 wants to merge 1 commit into
masterfrom
CMR-11453
Open

CMR-11453 - Update netty version to 4.1.137.Final to address Snyk vulnerability#2492
jaortega527 wants to merge 1 commit into
masterfrom
CMR-11453

Conversation

@jaortega527

Copy link
Copy Markdown
Contributor

Overview

What is the objective?

Updates Netty from 4.1.136.Final to 4.1.137.Final in the CMR message queue library. Addresses SNYK-JAVA-IONETTY-18955131 and SNYK-JAVA-IONETTY-19005879.

What are the changes?

  • Updated the shared Netty version from 4.1.136.Final to 4.1.137.Final
  • Updated the resolved version for:
    • io.netty:netty-handler
    • io.netty:netty-codec-http
    • io.netty:netty-codec-http2
    • io.netty:netty-code
    • io.netty:netty-transport-classes-epoll
  • No application code or behavior was changed

What areas of the application does this impact?

  • message-queue-lib

Required Checklist

  • New and existing unit and int tests pass locally and remotely
  • clj-kondo has been run locally and all errors in changed files are corrected
  • I have commented my code, particularly in hard-to-understand areas
  • I have made changes to the documentation (if necessary)
  • My changes generate no new warnings

Additional Checklist

  • I have removed unnecessary/dead code and imports in files I have changed
  • I have cleaned up integration tests by doing one or more of the following:
    • migrated any are2 tests to are3 in files I have changed
    • de-duped, consolidated, removed dead int tests
    • transformed applicable int tests into unit tests
    • reduced number of system state resets by updating fixtures. Ex) (use-fixtures :each (ingest/reset-fixture {})) to be :once instead of :each

@codecov-commenter

codecov-commenter commented Sep 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.96%. Comparing base (3fdcbe2) to head (003f1e8).

Additional details and impacted files
@@             Coverage Diff             @@
##           master    #2492       +/-   ##
===========================================
- Coverage   86.92%   57.96%   -28.97%     
===========================================
  Files          44     1074     +1030     
  Lines        6326    74707    +68381     
  Branches      320     2190     +1870     
===========================================
+ Hits         5499    43303    +37804     
- Misses        619    29354    +28735     
- Partials      208     2050     +1842     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants