build(deps): bump the dependencies group with 16 updates by dependabot[bot] · Pull Request #3887 · jooby-project/jooby

dependabot · 2026-03-30T00:09:46Z

Bumps the dependencies group with 16 updates:

Package	From	To
io.netty:netty-bom	`4.2.10.Final`	`4.2.12.Final`
io.netty:netty-codec-http2	`4.2.10.Final`	`4.2.12.Final`
io.netty:netty-transport-native-epoll	`4.2.10.Final`	`4.2.12.Final`
io.netty:netty-transport-native-kqueue	`4.2.10.Final`	`4.2.12.Final`
io.netty:netty-transport-native-io_uring	`4.2.10.Final`	`4.2.12.Final`
tools.jackson:jackson-bom	`3.1.0`	`3.1.1`
org.apache.logging.log4j:log4j-core	`2.25.3`	`2.25.4`
org.apache.logging.log4j:log4j-slf4j-impl	`2.25.3`	`2.25.4`
org.jetbrains.dokka:dokka-maven-plugin	`2.1.0`	`2.2.0`
io.vertx:vertx-core	`5.0.8`	`5.0.10`
io.vertx:vertx-sql-client	`5.0.8`	`5.0.10`
io.vertx:vertx-mysql-client	`5.0.8`	`5.0.10`
io.vertx:vertx-pg-client	`5.0.8`	`5.0.10`
com.puppycrawl.tools:checkstyle	`13.3.0`	`13.4.0`
software.amazon.awssdk:bom	`2.42.18`	`2.42.23`
org.asynchttpclient:async-http-client	`3.0.7`	`3.0.8`

Updates io.netty:netty-bom from 4.2.10.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.2.10.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-epoll from 4.2.10.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-transport-native-epoll's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-kqueue from 4.2.10.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-transport-native-kqueue's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-io_uring from 4.2.10.Final to 4.2.12.Final

Release notes

Sourced from io.netty:netty-transport-native-io_uring's releases.

netty-4.2.12.Final

What's Changed

Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by @chrisvest in netty/netty#16550

Full Changelog: netty/netty@netty-4.2.11.Final...netty-4.2.12.Final

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

... (truncated)

Commits

67ce541 [maven-release-plugin] prepare release netty-4.2.12.Final
7074624 Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" (#16...
c3b0a43 [maven-release-plugin] prepare for next development iteration
c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
Additional commits viewable in compare view

Updates tools.jackson:jackson-bom from 3.1.0 to 3.1.1

Commits

0628060 [maven-release-plugin] prepare release jackson-bom-3.1.1
22b8aee Prep for 3.1.1 release
2d305e6 Add JDK 25 in CI
da85336 Merge pull request #123 from FasterXML/tatu/3.1/122-switch-to-junit6
7ec5e0e Fix #122: switch 3.x (starting with 3.1.1) to use JUnit 6
ef09770 Update oss-parent dep
096fd38 Update oss-parent dep to v78 for 3.1(.1)
9907bea Post-release dep version bump
dc69fe8 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.3 to 2.25.4

Updates org.jetbrains.dokka:dokka-maven-plugin from 2.1.0 to 2.2.0

Release notes

Sourced from org.jetbrains.dokka:dokka-maven-plugin's releases.

2.2.0

Dokka Gradle Plugin

Starting from Dokka 2.1.0, the new Dokka Gradle Plugin is enabled by default. The documentation on kotlinlang.org has been updated accordingly:

See Get started with Dokka for instructions on adding Dokka to a project

See Migrate to Dokka Gradle plugin v2 for migrating from the old plugin

Dokka 2.2.0 introduces multiple improvements and fixes:

Note: most of the following changes affect only the new Dokka Gradle Plugin, enabled by default since Dokka 2.1.0

Compatibility with Android Gradle Plugin 9.0.0, including Built-in Kotlin. (#4231, #4295, #4412)

See #4472 on documenting Android projects with flavors / multiple variants

Android Gradle Library Plugin for KMP is now properly supported. (#4359, #4366)

Support the new Kotlin Gradle Plugin API to work with generated sources (#4402, #4410)

Fix suppressGeneratedFiles flag was unused (#4348)

Improve classpath resolution and platform detection logic (#4296, #4263, #4258)

Add olderVersionsDirName to DokkaVersioningPluginParameters (

Bumps the dependencies group with 16 updates: | Package | From | To | | --- | --- | --- | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.12.Final` | | [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.12.Final` | | [io.netty:netty-transport-native-epoll](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.12.Final` | | [io.netty:netty-transport-native-kqueue](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.12.Final` | | [io.netty:netty-transport-native-io_uring](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.12.Final` | | [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `3.1.0` | `3.1.1` | | org.apache.logging.log4j:log4j-core | `2.25.3` | `2.25.4` | | org.apache.logging.log4j:log4j-slf4j-impl | `2.25.3` | `2.25.4` | | [org.jetbrains.dokka:dokka-maven-plugin](https://github.com/Kotlin/dokka) | `2.1.0` | `2.2.0` | | [io.vertx:vertx-core](https://github.com/eclipse/vert.x) | `5.0.8` | `5.0.10` | | [io.vertx:vertx-sql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.8` | `5.0.10` | | [io.vertx:vertx-mysql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.8` | `5.0.10` | | [io.vertx:vertx-pg-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.8` | `5.0.10` | | [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `13.3.0` | `13.4.0` | | software.amazon.awssdk:bom | `2.42.18` | `2.42.23` | | [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `3.0.7` | `3.0.8` | Updates `io.netty:netty-bom` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-codec-http2` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `tools.jackson:jackson-bom` from 3.1.0 to 3.1.1 - [Commits](FasterXML/jackson-bom@jackson-bom-3.1.0...jackson-bom-3.1.1) Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.3 to 2.25.4 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.3 to 2.25.4 Updates `org.jetbrains.dokka:dokka-maven-plugin` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/Kotlin/dokka/releases) - [Commits](Kotlin/dokka@v2.1.0...v2.2.0) Updates `io.netty:netty-codec-http2` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.10.Final to 4.2.12.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final) Updates `io.vertx:vertx-core` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vert.x@5.0.8...5.0.10) Updates `io.vertx:vertx-sql-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `io.vertx:vertx-mysql-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `io.vertx:vertx-pg-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `com.puppycrawl.tools:checkstyle` from 13.3.0 to 13.4.0 - [Release notes](https://github.com/checkstyle/checkstyle/releases) - [Commits](checkstyle/checkstyle@checkstyle-13.3.0...checkstyle-13.4.0) Updates `io.vertx:vertx-sql-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `io.vertx:vertx-mysql-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `io.vertx:vertx-pg-client` from 5.0.8 to 5.0.10 - [Commits](eclipse-vertx/vertx-sql-client@5.0.8...5.0.10) Updates `software.amazon.awssdk:bom` from 2.42.18 to 2.42.23 Updates `org.asynchttpclient:async-http-client` from 3.0.7 to 3.0.8 - [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases) - [Commits](AsyncHttpClient/async-http-client@async-http-client-project-3.0.7...async-http-client-project-3.0.8) --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tools.jackson:jackson-bom dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jetbrains.dokka:dokka-maven-plugin dependency-version: 2.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.12.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-core dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-sql-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-mysql-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-pg-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.puppycrawl.tools:checkstyle dependency-version: 13.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.vertx:vertx-sql-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-mysql-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-pg-client dependency-version: 5.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: software.amazon.awssdk:bom dependency-version: 2.42.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.asynchttpclient:async-http-client dependency-version: 3.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 30, 2026

jknack merged commit 263dc0c into main Mar 30, 2026
5 checks passed

dependabot bot deleted the dependabot/maven/dependencies-2608b6bec9 branch March 30, 2026 23:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the dependencies group with 16 updates#3887

build(deps): bump the dependencies group with 16 updates#3887
jknack merged 1 commit intomainfrom
dependabot/maven/dependencies-2608b6bec9

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.12.Final

What's Changed

netty-4.2.11.Final

Security

What's Changed

2.2.0

Dokka Gradle Plugin

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant