chore(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final by dependabot[bot] · Pull Request #1225 · firebase/firebase-admin-java

dependabot · 2026-07-10T22:52:32Z

Bumps netty.version from 4.2.15.Final to 4.2.16.Final.
Updates io.netty:netty-codec-http from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-handler from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-transport from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-transport's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

jonathanedey · 2026-07-29T18:31:01Z

@dependabot rebase

dependabot · 2026-07-29T18:31:06Z

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

jonathanedey · 2026-07-29T18:31:55Z

@dependabot recreate

Bumps `netty.version` from 4.2.15.Final to 4.2.16.Final. Updates `io.netty:netty-codec-http` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-handler` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-transport` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) --- updated-dependencies: - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-transport dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 10, 2026

jonathanedey approved these changes Jul 29, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/maven/netty.version-4.2.16.Final branch from 35cd5a5 to 4486f64 Compare July 29, 2026 18:32

jonathanedey merged commit 197489e into main Jul 29, 2026
17 checks passed

dependabot Bot deleted the dependabot/maven/netty.version-4.2.16.Final branch July 29, 2026 18:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final - #1225

chore(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final#1225
jonathanedey merged 1 commit into
mainfrom
dependabot/maven/netty.version-4.2.16.Final

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited

Loading

Uh oh!

jonathanedey commented Jul 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 29, 2026

Uh oh!

jonathanedey commented Jul 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

Uh oh!

jonathanedey commented Jul 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 29, 2026

Uh oh!

jonathanedey commented Jul 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited

Loading