From 998f15c18c5b19f2f065617e2852cc159d792a0a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jan 2025 01:38:47 +0530
Subject: [PATCH 01/32] Bump com.uber.nullaway:nullaway from 0.12.1 to 0.12.3
 (#2055)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [com.uber.nullaway:nullaway](https://github.com/uber/NullAway)
from 0.12.1 to 0.12.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/releases">com.uber.nullaway:nullaway's
releases</a>.</em></p>
<blockquote>
<h2>NullAway 0.12.3</h2>
<ul>
<li>Remove InferredJARModelsHandler (<a
href="https://redirect.github.com/uber/NullAway/issues/1079">#1079</a>)</li>
<li>Fix crash with annotation on enum (<a
href="https://redirect.github.com/uber/NullAway/issues/1097">#1097</a>)</li>
<li>Handle case null in switch statements (<a
href="https://redirect.github.com/uber/NullAway/issues/1100">#1100</a>)</li>
<li>Don't report errors for writes to <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1102">#1102</a>)</li>
<li>Support primitive static final fields as constant args in access
paths (<a
href="https://redirect.github.com/uber/NullAway/issues/1105">#1105</a>)</li>
<li>Fix issue with annotations in module-info.java files (<a
href="https://redirect.github.com/uber/NullAway/issues/1109">#1109</a>)</li>
<li>Report error for <a
href="https://github.com/nullable"><code>@​nullable</code></a>
synchronized block expression (<a
href="https://redirect.github.com/uber/NullAway/issues/1106">#1106</a>)</li>
<li>Add support for parameter types with wildcards for JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1107">#1107</a>)</li>
<li>Properly handle nested generics and multiple wildcard type args in
JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1114">#1114</a>)</li>
<li>Proper checking of vararg overrides with JSpecify annotations (<a
href="https://redirect.github.com/uber/NullAway/issues/1116">#1116</a>)</li>
<li>Add flag to indicate only <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> code
should be checked (<a
href="https://redirect.github.com/uber/NullAway/issues/1117">#1117</a>)</li>
<li>Add support for static fields in contracts (<a
href="https://redirect.github.com/uber/NullAway/issues/1118">#1118</a>)</li>
<li>Maintenance
<ul>
<li>Fix comment positions (<a
href="https://redirect.github.com/uber/NullAway/issues/1098">#1098</a>)</li>
<li>[refactoring] Wrap calls to Types.subst and Types.memberType (<a
href="https://redirect.github.com/uber/NullAway/issues/1115">#1115</a>)</li>
<li>Build latest Caffeine on CI (<a
href="https://redirect.github.com/uber/NullAway/issues/1111">#1111</a>)</li>
</ul>
</li>
</ul>
<h2>NullAway 0.12.2</h2>
<ul>
<li>Fix reading of JSpecify <a
href="https://github.com/nullable"><code>@​nullable</code></a>
annotations from varargs parameter in bytecode (<a
href="https://redirect.github.com/uber/NullAway/issues/1089">#1089</a>)</li>
<li>Fix JarInfer handling of generic types (<a
href="https://redirect.github.com/uber/NullAway/issues/1078">#1078</a>)</li>
<li>Fix another JSpecify mode crash involving raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1086">#1086</a>)</li>
<li>Fix bugs in handling of valueOf calls for map keys (<a
href="https://redirect.github.com/uber/NullAway/issues/1085">#1085</a>)</li>
<li>Suggest correct fix when array component of non-nullable array is
made null. (<a
href="https://redirect.github.com/uber/NullAway/issues/1087">#1087</a>)</li>
<li>Substitute type arguments when checking type parameter nullability
at call site (<a
href="https://redirect.github.com/uber/NullAway/issues/1070">#1070</a>)</li>
<li>Fix JarInfer parameter indexes for instance methods (<a
href="https://redirect.github.com/uber/NullAway/issues/1071">#1071</a>)</li>
<li>JSpecify mode: initial support for generic methods (with explicit
type arguments at calls) (<a
href="https://redirect.github.com/uber/NullAway/issues/1053">#1053</a>)</li>
<li>Maintenance
<ul>
<li>Update to latest Error Prone and Error Prone Gradle plugin (<a
href="https://redirect.github.com/uber/NullAway/issues/1064">#1064</a>)</li>
<li>Refactor serialization adapter retrieval by version (<a
href="https://redirect.github.com/uber/NullAway/issues/1066">#1066</a>)</li>
<li>Remove fixes.tsv serialization from NullAway serialization service
(<a
href="https://redirect.github.com/uber/NullAway/issues/1063">#1063</a>)</li>
<li>Enable javac -parameters flag (<a
href="https://redirect.github.com/uber/NullAway/issues/1069">#1069</a>)</li>
<li>Update to Gradle 8.11 (<a
href="https://redirect.github.com/uber/NullAway/issues/1073">#1073</a>)</li>
<li>Add test for issue 1035 (<a
href="https://redirect.github.com/uber/NullAway/issues/1074">#1074</a>)</li>
<li>remove use of deprecated Gradle API (<a
href="https://redirect.github.com/uber/NullAway/issues/1076">#1076</a>)</li>
<li>Update to Error Prone 2.36.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1077">#1077</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">com.uber.nullaway:nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.12.3</h2>
<ul>
<li>Remove InferredJARModelsHandler (<a
href="https://redirect.github.com/uber/NullAway/issues/1079">#1079</a>)</li>
<li>Fix crash with annotation on enum (<a
href="https://redirect.github.com/uber/NullAway/issues/1097">#1097</a>)</li>
<li>Handle case null in switch statements (<a
href="https://redirect.github.com/uber/NullAway/issues/1100">#1100</a>)</li>
<li>Don't report errors for writes to <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1102">#1102</a>)</li>
<li>Support primitive static final fields as constant args in access
paths (<a
href="https://redirect.github.com/uber/NullAway/issues/1105">#1105</a>)</li>
<li>Fix issue with annotations in module-info.java files (<a
href="https://redirect.github.com/uber/NullAway/issues/1109">#1109</a>)</li>
<li>Report error for <a
href="https://github.com/nullable"><code>@​nullable</code></a>
synchronized block expression (<a
href="https://redirect.github.com/uber/NullAway/issues/1106">#1106</a>)</li>
<li>Add support for parameter types with wildcards for JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1107">#1107</a>)</li>
<li>Properly handle nested generics and multiple wildcard type args in
JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1114">#1114</a>)</li>
<li>Proper checking of vararg overrides with JSpecify annotations (<a
href="https://redirect.github.com/uber/NullAway/issues/1116">#1116</a>)</li>
<li>Add flag to indicate only <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> code
should be checked (<a
href="https://redirect.github.com/uber/NullAway/issues/1117">#1117</a>)</li>
<li>Add support for static fields in contracts (<a
href="https://redirect.github.com/uber/NullAway/issues/1118">#1118</a>)</li>
<li>Maintenance
<ul>
<li>Fix comment positions (<a
href="https://redirect.github.com/uber/NullAway/issues/1098">#1098</a>)</li>
<li>[refactoring] Wrap calls to Types.subst and Types.memberType (<a
href="https://redirect.github.com/uber/NullAway/issues/1115">#1115</a>)</li>
<li>Build latest Caffeine on CI (<a
href="https://redirect.github.com/uber/NullAway/issues/1111">#1111</a>)</li>
</ul>
</li>
</ul>
<h2>Version 0.12.2</h2>
<ul>
<li>Fix reading of JSpecify <a
href="https://github.com/nullable"><code>@​nullable</code></a>
annotations from varargs parameter in bytecode (<a
href="https://redirect.github.com/uber/NullAway/issues/1089">#1089</a>)</li>
<li>Fix JarInfer handling of generic types (<a
href="https://redirect.github.com/uber/NullAway/issues/1078">#1078</a>)</li>
<li>Fix another JSpecify mode crash involving raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1086">#1086</a>)</li>
<li>Fix bugs in handling of valueOf calls for map keys (<a
href="https://redirect.github.com/uber/NullAway/issues/1085">#1085</a>)</li>
<li>Suggest correct fix when array component of non-nullable array is
made null. (<a
href="https://redirect.github.com/uber/NullAway/issues/1087">#1087</a>)</li>
<li>Substitute type arguments when checking type parameter nullability
at call site (<a
href="https://redirect.github.com/uber/NullAway/issues/1070">#1070</a>)</li>
<li>Fix JarInfer parameter indexes for instance methods (<a
href="https://redirect.github.com/uber/NullAway/issues/1071">#1071</a>)</li>
<li>JSpecify mode: initial support for generic methods (with explicit
type arguments at calls) (<a
href="https://redirect.github.com/uber/NullAway/issues/1053">#1053</a>)</li>
<li>Maintenance
<ul>
<li>Update to latest Error Prone and Error Prone Gradle plugin (<a
href="https://redirect.github.com/uber/NullAway/issues/1064">#1064</a>)</li>
<li>Refactor serialization adapter retrieval by version (<a
href="https://redirect.github.com/uber/NullAway/issues/1066">#1066</a>)</li>
<li>Remove fixes.tsv serialization from NullAway serialization service
(<a
href="https://redirect.github.com/uber/NullAway/issues/1063">#1063</a>)</li>
<li>Enable javac -parameters flag (<a
href="https://redirect.github.com/uber/NullAway/issues/1069">#1069</a>)</li>
<li>Update to Gradle 8.11 (<a
href="https://redirect.github.com/uber/NullAway/issues/1073">#1073</a>)</li>
<li>Add test for issue 1035 (<a
href="https://redirect.github.com/uber/NullAway/issues/1074">#1074</a>)</li>
<li>remove use of deprecated Gradle API (<a
href="https://redirect.github.com/uber/NullAway/issues/1076">#1076</a>)</li>
<li>Update to Error Prone 2.36.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1077">#1077</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uber/NullAway/commit/39b376c63f517ddfdbbd5dc1b426ce9f1ecca048"><code>39b376c</code></a>
Prepare for release 0.12.3.</li>
<li><a
href="https://github.com/uber/NullAway/commit/aaf9f0882552af56eaa56d74e6e502ae3a09f3e7"><code>aaf9f08</code></a>
Add support for static fields in contracts (<a
href="https://redirect.github.com/uber/NullAway/issues/1118">#1118</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/43054bba441ba0bcb05c0d91283cdbbcd7ff5424"><code>43054bb</code></a>
Add flag to indicate only <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> code
should be checked (<a
href="https://redirect.github.com/uber/NullAway/issues/1117">#1117</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/6d331c7e9ab5751fa213d2a4cd46f88ddde9b43e"><code>6d331c7</code></a>
Proper checking of vararg overrides with JSpecify annotations (<a
href="https://redirect.github.com/uber/NullAway/issues/1116">#1116</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/7cb6b985ff6e8dbc6d804f27cc26982fc732e49a"><code>7cb6b98</code></a>
[refactoring] Wrap calls to Types.subst and Types.memberType (<a
href="https://redirect.github.com/uber/NullAway/issues/1115">#1115</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/17df87f5203d395bf45e7b9b2f70617753f998f7"><code>17df87f</code></a>
Properly handle nested generics and multiple wildcard type args in
JarInfer (...</li>
<li><a
href="https://github.com/uber/NullAway/commit/728bf77b049e1cd6a60362f2b753dbb2537181bb"><code>728bf77</code></a>
Build latest Caffeine on CI (<a
href="https://redirect.github.com/uber/NullAway/issues/1111">#1111</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/f2bafb25ab49dcc73a15e84ff76c89c2e7b7ee3b"><code>f2bafb2</code></a>
Add support for parameter types with wildcards for JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1107">#1107</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/2754c4547d3afcdef5633b69a57bb60ef86b42e7"><code>2754c45</code></a>
Report error for <a
href="https://github.com/Nullable"><code>@​Nullable</code></a>
synchronized block expression (<a
href="https://redirect.github.com/uber/NullAway/issues/1106">#1106</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/d0502e88db741a52c9ab7f5d16a3722ea5498476"><code>d0502e8</code></a>
Fix issue with annotations in <code>module-info.java</code> files (<a
href="https://redirect.github.com/uber/NullAway/issues/1109">#1109</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uber/NullAway/compare/v0.12.1...v0.12.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=maven&previous-version=0.12.1&new-version=0.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index c01de9918..8a442dd59 100644
--- a/pom.xml
+++ b/pom.xml
@@ -327,7 +327,7 @@
                         <path>
                             <groupId>com.uber.nullaway</groupId>
                             <artifactId>nullaway</artifactId>
-                            <version>0.12.1</version>
+                            <version>0.12.3</version>
                         </path>
                         <!-- Other annotation processors go here -->
                     </annotationProcessorPaths>

From f75dfbe8c2c7d20743dd98707d21eafeed48525e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jan 2025 01:39:01 +0530
Subject: [PATCH 02/32] Bump ch.qos.logback:logback-classic from 1.5.12 to
 1.5.16 (#2054)

Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.12 to 1.5.16.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/qos-ch/logback/commit/74c9ebd0e784d9e9ffc6c627cf5016d0157956b2"><code>74c9ebd</code></a>
prepare release 1.5.16</li>
<li><a
href="https://github.com/qos-ch/logback/commit/9308a58e65ad415a86377f86e3f0e338a5167e66"><code>9308a58</code></a>
javadocs structure changed</li>
<li><a
href="https://github.com/qos-ch/logback/commit/8935470736a395429ebcd0fbf75794a83ca37cec"><code>8935470</code></a>
adapt test to SLF4J version 2.0.16</li>
<li><a
href="https://github.com/qos-ch/logback/commit/cb603698a1910e9dce1f5d39a2e51cd757eb40e0"><code>cb60369</code></a>
addded StubEventEvaluator as default class for evaluator element so as
to dir...</li>
<li><a
href="https://github.com/qos-ch/logback/commit/1da2f171dc108a2576eb33918198db7f755b1224"><code>1da2f17</code></a>
bump jxr version</li>
<li><a
href="https://github.com/qos-ch/logback/commit/5bde644c2659115790161256016b678ee0d957d1"><code>5bde644</code></a>
bump slf4j version to 2.0.16</li>
<li><a
href="https://github.com/qos-ch/logback/commit/aa2ebae414530c458dca2892351135d617474286"><code>aa2ebae</code></a>
remove stax related code</li>
<li><a
href="https://github.com/qos-ch/logback/commit/80db86b54892d5af85b6ee69b1e97a097f64f6bd"><code>80db86b</code></a>
fix issues/860</li>
<li><a
href="https://github.com/qos-ch/logback/commit/a8a2303ba3afeb5b26a90412501a6d1057d17669"><code>a8a2303</code></a>
start work on 1.5.16-SNAPSHOT</li>
<li><a
href="https://github.com/qos-ch/logback/commit/bf14c2c7f657f7d255a7fe9cb156b1913e99ca3c"><code>bf14c2c</code></a>
minor javadoc update</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.12...v_1.5.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=maven&previous-version=1.5.12&new-version=1.5.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 8a442dd59..8dfad9c98 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,7 @@
         <slf4j.version>2.0.16</slf4j.version>
         <zstd-jni.version>1.5.6-8</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
-        <logback.version>1.5.12</logback.version>
+        <logback.version>1.5.16</logback.version>
         <jetbrains-annotations.version>26.0.1</jetbrains-annotations.version>
     </properties>
 

From bf63baf04ca17e2a94adb356bcc42f2acbc51847 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jan 2025 01:39:14 +0530
Subject: [PATCH 03/32] Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (#2046)

Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from
5.11.3 to 5.11.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit5/releases">org.junit:junit-bom's
releases</a>.</em></p>
<blockquote>
<p>JUnit 5.11.4 = Platform 1.11.4 + Jupiter 5.11.4 + Vintage 5.11.4</p>
<p>See <a
href="http://junit.org/junit5/docs/5.11.4/release-notes/">Release
Notes</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/junit-team/junit5/compare/r5.11.3...r5.11.4">https://github.com/junit-team/junit5/compare/r5.11.3...r5.11.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/junit-team/junit5/commit/6430ba4f653f6ae42f326cd0731b259ee699c719"><code>6430ba4</code></a>
Release 5.11.4</li>
<li><a
href="https://github.com/junit-team/junit5/commit/d09312174e38e36ec7ac9b35f7033d6a2b693125"><code>d093121</code></a>
Finalize 5.11.4 release notes</li>
<li><a
href="https://github.com/junit-team/junit5/commit/0444353084f7c47bb29e785b10cf3e835454c2da"><code>0444353</code></a>
Fix Maven integration tests on JDK 24</li>
<li><a
href="https://github.com/junit-team/junit5/commit/b5c7f4eeaff5b8a654e9ea6b78227cf90345b0ae"><code>b5c7f4e</code></a>
Move <a
href="https://redirect.github.com/junit-team/junit5/issues/4153">#4153</a>
to 5.11.4 release notes</li>
<li><a
href="https://github.com/junit-team/junit5/commit/b20c4e2eaed8a97536d48f7bb084a4bd828a56a9"><code>b20c4e2</code></a>
Ensure the XMLStreamWriter is closed after use</li>
<li><a
href="https://github.com/junit-team/junit5/commit/6376f0ab367f1ac17ce75b5410e68090b03b9d9b"><code>6376f0a</code></a>
Configure Git username and email</li>
<li><a
href="https://github.com/junit-team/junit5/commit/2b485c4286531fe7f3aa70367a27cf141c669a12"><code>2b485c4</code></a>
Set reference repo URI</li>
<li><a
href="https://github.com/junit-team/junit5/commit/500b5a06b5964a477e65719877653bae0e2496fc"><code>500b5a0</code></a>
Inject username and password via new DSL</li>
<li><a
href="https://github.com/junit-team/junit5/commit/d67196188fb63fa5a35f63caf168dc42cecfaca8"><code>d671961</code></a>
Update plugin gitPublish to v5</li>
<li><a
href="https://github.com/junit-team/junit5/commit/3d11279dbaae5aac0ab5f28d8283272bdbca924f"><code>3d11279</code></a>
Add <code>JAVA_25</code> to <code>JRE</code> enum</li>
<li>Additional commits viewable in <a
href="https://github.com/junit-team/junit5/compare/r5.11.3...r5.11.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.junit:junit-bom&package-manager=maven&previous-version=5.11.3&new-version=5.11.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 8dfad9c98..c83b5794a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -105,7 +105,7 @@
             <dependency>
                 <groupId>org.junit</groupId>
                 <artifactId>junit-bom</artifactId>
-                <version>5.11.3</version>
+                <version>5.11.4</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

From 86c2176dfb8cb93f246ff8a134906afac6982d74 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 03:54:12 +0530
Subject: [PATCH 04/32] Bump org.jetbrains:annotations from 26.0.1 to 26.0.2
 (#2058)

Bumps
[org.jetbrains:annotations](https://github.com/JetBrains/java-annotations)
from 26.0.1 to 26.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/java-annotations/releases">org.jetbrains:annotations's
releases</a>.</em></p>
<blockquote>
<h2>26.0.2</h2>
<ul>
<li>Fixed missing klibs for apple artifacts.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/java-annotations/blob/master/CHANGELOG.md">org.jetbrains:annotations's
changelog</a>.</em></p>
<blockquote>
<h2>Version 26.0.2</h2>
<ul>
<li>Fixed missing klibs for apple artifacts.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/JetBrains/java-annotations/commit/5ed7516e96eebef2a0cedc470d776b7351f52d6b"><code>5ed7516</code></a>
Merge pull request <a
href="https://redirect.github.com/JetBrains/java-annotations/issues/119">#119</a>
from serjsysoev/v26_0_2</li>
<li><a
href="https://github.com/JetBrains/java-annotations/commit/e5c5c67a70092ddf7844bfbd88e9acf2427b25e5"><code>e5c5c67</code></a>
Version 26.0.2</li>
<li>See full diff in <a
href="https://github.com/JetBrains/java-annotations/compare/26.0.1...26.0.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.jetbrains:annotations&package-manager=maven&previous-version=26.0.1&new-version=26.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index c83b5794a..52d768182 100644
--- a/pom.xml
+++ b/pom.xml
@@ -52,7 +52,7 @@
         <zstd-jni.version>1.5.6-8</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
         <logback.version>1.5.16</logback.version>
-        <jetbrains-annotations.version>26.0.1</jetbrains-annotations.version>
+        <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>
     </properties>
 
     <developers>

From 390c26b0890ca381b8865295801156e8e945ca98 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 03:54:19 +0530
Subject: [PATCH 05/32] Bump com.github.luben:zstd-jni from 1.5.6-8 to 1.5.6-9
 (#2057)

Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)
from 1.5.6-8 to 1.5.6-9.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/luben/zstd-jni/commit/59b0b19c30b6942ad7eef8bb9a8c14e22290be3d"><code>59b0b19</code></a>
v1.5.6-9</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/0357eef1eb46b3542d1b66efc2a6be4943717dec"><code>0357eef</code></a>
Workaround <code>os.arch</code> reporting inconsistency on MacOS</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/c981e9a86a7cc2f0d49456d45d09ed2badb5827c"><code>c981e9a</code></a>
Fix typo in README</li>
<li>See full diff in <a
href="https://github.com/luben/zstd-jni/compare/v1.5.6-8...v1.5.6-9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.6-8&new-version=1.5.6-9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 52d768182..71240c309 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>
-        <zstd-jni.version>1.5.6-8</zstd-jni.version>
+        <zstd-jni.version>1.5.6-9</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
         <logback.version>1.5.16</logback.version>
         <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>

From eef8d9374b411d2bf0f42bf6452ee3b0333915c8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 03:54:26 +0530
Subject: [PATCH 06/32] Bump netty.version from 4.1.116.Final to 4.1.117.Final
 (#2056)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps `netty.version` from 4.1.116.Final to 4.1.117.Final.
Updates `io.netty:netty-buffer` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-http` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-socks` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler-proxy` from 4.1.116.Final to
4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-common` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler` from 4.1.116.Final to 4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-resolver-dns` from 4.1.116.Final to
4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-epoll` from 4.1.116.Final to
4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-kqueue` from 4.1.116.Final to
4.1.117.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/3b036489e24eb2a1e3bb45022a02a09eceaa8293"><code>3b03648</code></a>
[maven-release-plugin] prepare release netty-4.1.117.Final</li>
<li><a
href="https://github.com/netty/netty/commit/28a81c687725f6d3403341656b26a8b70391402f"><code>28a81c6</code></a>
Update java versions (<a
href="https://redirect.github.com/netty/netty/issues/14660">#14660</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/1bd459ac11ff8486641e619abdd732c7bbd94c70"><code>1bd459a</code></a>
Correcly handle comments appended to nameserver declarations (<a
href="https://redirect.github.com/netty/netty/issues/14658">#14658</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/ad00d19e5d1b488bb04c5da56571b1484ff547ef"><code>ad00d19</code></a>
Add configure to be able to use perf / intellij profiler within devco…
(<a
href="https://redirect.github.com/netty/netty/issues/14661">#14661</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/cd3dfe9b632671e7f8f7e5ca44918b34e888e14a"><code>cd3dfe9</code></a>
Update maven to 3.9.9 (<a
href="https://redirect.github.com/netty/netty/issues/14654">#14654</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/4d1f98d6caa518244b3edbc45b3e76c9712f4ec2"><code>4d1f98d</code></a>
Adaptive: Only use ThreadLocal if called from FastThreadLocalThread i…
(<a
href="https://redirect.github.com/netty/netty/issues/14656">#14656</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/01e14bc69941bcfcccfdd46d925f85ea6b71ec1e"><code>01e14bc</code></a>
Provides Brotli settings without <code>com.aayushatharva.brotli4j</code>
dependency (<a
href="https://redirect.github.com/netty/netty/issues/14">#14</a>...</li>
<li><a
href="https://github.com/netty/netty/commit/d5bad424324101ea336432d76313fa44995b0202"><code>d5bad42</code></a>
OpenSslSession: Add support to defensively check for peer certs (<a
href="https://redirect.github.com/netty/netty/issues/14641">#14641</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/b8e25e043a32c34e2c8e462bf26c37f2ec29c84d"><code>b8e25e0</code></a>
SslHandler: Ensure buffers are never leaked when wrap(...) produce SS…
(<a
href="https://redirect.github.com/netty/netty/issues/14647">#14647</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/9f0b38b7b6e01638075aa981872be306532f804b"><code>9f0b38b</code></a>
Reentrant close in EmbeddedChannel (<a
href="https://redirect.github.com/netty/netty/issues/14642">#14642</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.116.Final...netty-4.1.117.Final">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 71240c309..9dfe832a7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
         <maven.compiler.target>11</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
-        <netty.version>4.1.116.Final</netty.version>
+        <netty.version>4.1.117.Final</netty.version>
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>

From a4a3746b6461181221513870dded579cb041e4bc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Feb 2025 03:23:19 +0530
Subject: [PATCH 07/32] Bump netty.version from 4.1.117.Final to 4.1.118.Final
 (#2060)

Bumps `netty.version` from 4.1.117.Final to 4.1.118.Final.
Updates `io.netty:netty-buffer` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-http` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-socks` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler-proxy` from 4.1.117.Final to
4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-common` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler` from 4.1.117.Final to 4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-resolver-dns` from 4.1.117.Final to
4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-epoll` from 4.1.117.Final to
4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-kqueue` from 4.1.117.Final to
4.1.118.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/36f95cfaeed0c1313b21f1b5350c19436ae7fb45"><code>36f95cf</code></a>
[maven-release-plugin] prepare release netty-4.1.118.Final</li>
<li><a
href="https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4"><code>87f4072</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386"><code>d1fbda6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/f844d78e4e23182610a24576d225de933f90f92e"><code>f844d78</code></a>
Upgrade netty-tcnative to 2.0.70.Final (<a
href="https://redirect.github.com/netty/netty/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8afb5d916f135edbc3a14f855665f077ddf56ae7"><code>8afb5d9</code></a>
Only run 2 jobs with leak detection to minimize build times (<a
href="https://redirect.github.com/netty/netty/issues/14784">#14784</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f2c27dadba055e7f496ee6298262ee06522f5fd9"><code>f2c27da</code></a>
AdaptivePoolingAllocator: Round chunk sizes up to MIN_CHUNK_SIZE units
and re...</li>
<li><a
href="https://github.com/netty/netty/commit/8d387ffbecbc95758f90cc97f18096c6ad21b073"><code>8d387ff</code></a>
Change the default AdaptiveRecvByteBufAllocator buffer size values'
visibilit...</li>
<li><a
href="https://github.com/netty/netty/commit/1cfd3a62ca8633cc6d1729222214c64c5b50fd89"><code>1cfd3a6</code></a>
Fix possible buffer leak when stream can't be mapped (<a
href="https://redirect.github.com/netty/netty/issues/14746">#14746</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f9eadb7b6b4dd74b0689a01c920dac4ead18115"><code>8f9eadb</code></a>
Fix AccessControlException in GlobalEventExecutor (<a
href="https://redirect.github.com/netty/netty/issues/14743">#14743</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/6fcd3e622b9e4e7b986f9ef52a43b9b69c29c53f"><code>6fcd3e6</code></a>
KQueueEventLoop leaks memory on shutdown. (<a
href="https://redirect.github.com/netty/netty/issues/14745">#14745</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.1.117.Final...netty-4.1.118.Final">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 9dfe832a7..68d95dc04 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
         <maven.compiler.target>11</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
-        <netty.version>4.1.117.Final</netty.version>
+        <netty.version>4.1.118.Final</netty.version>
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>

From 6fa2efd3f9af636bf192a452698044a9829cf8ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Feb 2025 03:23:35 +0530
Subject: [PATCH 08/32] Bump org.apache.tomcat.embed:tomcat-embed-core from
 10.1.34 to 10.1.35 (#2061)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps org.apache.tomcat.embed:tomcat-embed-core from 10.1.34 to 10.1.35.

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| org.apache.tomcat.embed:tomcat-embed-core | [>= 11.a0, < 12] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.tomcat.embed:tomcat-embed-core&package-manager=maven&previous-version=10.1.34&new-version=10.1.35)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 client/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/pom.xml b/client/pom.xml
index b2e551d5a..f035ac57c 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -31,7 +31,7 @@
         <javaModuleName>org.asynchttpclient.client</javaModuleName>
 
         <jetty.version>11.0.24</jetty.version>
-        <tomcat.version>10.1.34</tomcat.version>
+        <tomcat.version>10.1.35</tomcat.version>
         <commons-io.version>2.18.0</commons-io.version>
         <mockito.version>4.11.0</mockito.version>
         <hamcrest.version>3.0</hamcrest.version>

From 6c2cc553201581eb5a0ec348f67b064ae32c770f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Feb 2025 03:23:45 +0530
Subject: [PATCH 09/32] Bump
 io.github.nettyplus:netty-leak-detector-junit-extension from 0.0.5 to 0.0.6
 (#2062)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[io.github.nettyplus:netty-leak-detector-junit-extension](https://github.com/nettyplus/netty-leak-detector-junit-extension)
from 0.0.5 to 0.0.6.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/581a0c98b70346ddd0241056ea57570cf126c7fe"><code>581a0c9</code></a>
build: 0.0.6</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/61ffcc4f41e7357036bede2ff4650c8276692612"><code>61ffcc4</code></a>
downgrade netty</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/889e3f3d2d6479b20e3d43306792fc2d57ffd493"><code>889e3f3</code></a>
Bump io.netty:netty-bom from 4.1.100.Final to 4.1.117.Final (<a
href="https://redirect.github.com/nettyplus/netty-leak-detector-junit-extension/issues/26">#26</a>)</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/c99548e7e4ce0de83db8779c0607d3a4914bd985"><code>c99548e</code></a>
dependabot ignore netty</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/32888df4ffca304ccfb8c075b9f17732faf888b6"><code>32888df</code></a>
netty 4.1.100</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/0245d82d96abd43a72396359b6eb74164c80bdbd"><code>0245d82</code></a>
tweak dependabot</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/83fe1440dbfe2604870e509bc702a40caa973c6f"><code>83fe144</code></a>
gradle 8.12.1</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/32fa52c00f6d3026f83cdc260a5c98758489cde6"><code>32fa52c</code></a>
Bump io.netty:netty-bom from 4.1.116.Final to 4.1.117.Final (<a
href="https://redirect.github.com/nettyplus/netty-leak-detector-junit-extension/issues/25">#25</a>)</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/e832e25ed704e63613614be74b90b25d1335fd36"><code>e832e25</code></a>
gradle 8.12</li>
<li><a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/commit/74d1518a83e7d304b0fa5ab6bbf4f9d8cef068d6"><code>74d1518</code></a>
Bump io.netty:netty-bom from 4.1.115.Final to 4.1.116.Final (<a
href="https://redirect.github.com/nettyplus/netty-leak-detector-junit-extension/issues/24">#24</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nettyplus/netty-leak-detector-junit-extension/compare/v0.0.5...v0.0.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.github.nettyplus:netty-leak-detector-junit-extension&package-manager=maven&previous-version=0.0.5&new-version=0.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 68d95dc04..8ea2684ca 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
             <dependency>
                 <groupId>io.github.nettyplus</groupId>
                 <artifactId>netty-leak-detector-junit-extension</artifactId>
-                <version>0.0.5</version>
+                <version>0.0.6</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

From 3972890fbb63ae96faafc7e1892416915b619fd6 Mon Sep 17 00:00:00 2001
From: sullis <seans@grubhub.com>
Date: Thu, 13 Feb 2025 14:05:52 -0800
Subject: [PATCH 10/32] netty leak detector 0.0.6 (#2059)

Co-authored-by: Aayush Atharva <aayush@shieldblaze.com>

From 11a15c388a930515eefc93f03fd0997200481b7d Mon Sep 17 00:00:00 2001
From: sullis <github@seansullivan.com>
Date: Sat, 15 Feb 2025 21:34:21 -0800
Subject: [PATCH 11/32] enable leak detection in AutomaticDecompressionTest
 (#2064)

use Netty Leak Detector JUnit extension in AutomaticDecompressionTest
```
https://github.com/nettyplus/netty-leak-detector-junit-extension
```
---
 .../java/org/asynchttpclient/AutomaticDecompressionTest.java   | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java b/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
index dfd0a9446..0f9843af1 100644
--- a/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
+++ b/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
@@ -22,6 +22,7 @@
 import com.sun.net.httpserver.HttpExchange;
 import com.sun.net.httpserver.HttpHandler;
 import com.sun.net.httpserver.HttpServer;
+import io.github.nettyplus.leakdetector.junit.NettyLeakDetectorExtension;
 import io.netty.handler.codec.compression.Brotli;
 import org.junit.jupiter.api.AfterAll;
 import org.junit.jupiter.api.BeforeAll;
@@ -35,9 +36,11 @@
 import java.util.List;
 import java.util.stream.Collectors;
 import java.util.zip.GZIPOutputStream;
+import org.junit.jupiter.api.extension.ExtendWith;
 
 import static org.junit.jupiter.api.Assertions.assertEquals;
 
+@ExtendWith(NettyLeakDetectorExtension.class)
 public class AutomaticDecompressionTest {
     private static final String UNCOMPRESSED_PAYLOAD = "a".repeat(500);
 

From 182ab1b36b603eeebe85ee05da269f18c710278b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 16 Feb 2025 11:04:37 +0530
Subject: [PATCH 12/32] Bump com.github.luben:zstd-jni from 1.5.6-9 to 1.5.6-10
 (#2063)

Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)
from 1.5.6-9 to 1.5.6-10.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/luben/zstd-jni/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.6-9&new-version=1.5.6-10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 8ea2684ca..18c754452 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>
-        <zstd-jni.version>1.5.6-9</zstd-jni.version>
+        <zstd-jni.version>1.5.6-10</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
         <logback.version>1.5.16</logback.version>
         <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>

From 600520c9810052c1c80925ed6041795a48e22a18 Mon Sep 17 00:00:00 2001
From: sullis <github@seansullivan.com>
Date: Mon, 17 Feb 2025 08:58:39 -0800
Subject: [PATCH 13/32] use larger payload in AutomaticDecompressionTest
 (#2065)

---
 .../java/org/asynchttpclient/AutomaticDecompressionTest.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java b/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
index 0f9843af1..8f57ffb88 100644
--- a/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
+++ b/client/src/test/java/org/asynchttpclient/AutomaticDecompressionTest.java
@@ -42,7 +42,7 @@
 
 @ExtendWith(NettyLeakDetectorExtension.class)
 public class AutomaticDecompressionTest {
-    private static final String UNCOMPRESSED_PAYLOAD = "a".repeat(500);
+    private static final String UNCOMPRESSED_PAYLOAD = "a".repeat(50_000);
 
     private static HttpServer HTTP_SERVER;
 

From f19415223262b3333212652aeae47040dc006919 Mon Sep 17 00:00:00 2001
From: Jason Joo <hblzxsj@163.com>
Date: Mon, 10 Mar 2025 03:09:46 +0800
Subject: [PATCH 14/32] fix: inappropriate connection reuse when using HTTP
 proxy if the initial CONNECT failed (#2072)

# What This MR Resolves

A CONNECT request is needed to sent to the HTTP proxy first before the
actual client request to establish the tunnel on the proxy. A `HTTP/1.1
200 Connection established` is expected for the initial CONNECT request.
Only when the CONNECT is successful, the client continues sending the
actual request through the "tunnel". And when CONNECT failed, the
connection remains the initial state `unconnected`.

There are following circumstances that a CONNECT fails under but not
limited to following situations:

- The destination is not whitelisted.
- The dest domain can't be resolved(timeout/SERVFAIL/NX/etc.).
- The dest IP can't be connected(timeout/unreachable/etc.).

There could be 2 following strategies to deal with CONNECT failures on
the client side:

1. Close the connection before return to the caller.
2. Mark this connection "unconnected" and put it into the pool. Then
retry the CONNECT next time it's picked out of the pool.

The 2nd one needs to add extra state to Channel in the manager which
brings bigger change to the code.
This MR employs the 1st strategy to resolve it. The issue is described
in #2071 .

# Readings

The CONNECT is documented in `Section 5.3` in RFC2871:
https://www.ietf.org/rfc/rfc2817.txt

The proxy won't actively terminate the connection if the CONNECT failed
if keep-alive is enabled. Unless the tunnel is established and there is
any communication failures in the middle. Therefore the client needs to
deal with this error by its own.

Signed-off-by: Jason Joo <hblzxsj@gmail.com>
---
 .../netty/handler/HttpHandler.java            | 11 +++--
 .../asynchttpclient/proxy/HttpsProxyTest.java | 45 ++++++++++++++++++-
 2 files changed, 52 insertions(+), 4 deletions(-)

diff --git a/client/src/main/java/org/asynchttpclient/netty/handler/HttpHandler.java b/client/src/main/java/org/asynchttpclient/netty/handler/HttpHandler.java
index 06ec46a2b..99a23c7e9 100755
--- a/client/src/main/java/org/asynchttpclient/netty/handler/HttpHandler.java
+++ b/client/src/main/java/org/asynchttpclient/netty/handler/HttpHandler.java
@@ -21,6 +21,7 @@
 import io.netty.handler.codec.DecoderResultProvider;
 import io.netty.handler.codec.http.HttpContent;
 import io.netty.handler.codec.http.HttpHeaders;
+import io.netty.handler.codec.http.HttpMethod;
 import io.netty.handler.codec.http.HttpRequest;
 import io.netty.handler.codec.http.HttpResponse;
 import io.netty.handler.codec.http.LastHttpContent;
@@ -32,6 +33,7 @@
 import org.asynchttpclient.netty.NettyResponseStatus;
 import org.asynchttpclient.netty.channel.ChannelManager;
 import org.asynchttpclient.netty.request.NettyRequestSender;
+import org.asynchttpclient.util.HttpConstants.ResponseStatusCodes;
 
 import java.io.IOException;
 import java.net.InetSocketAddress;
@@ -43,8 +45,11 @@ public HttpHandler(AsyncHttpClientConfig config, ChannelManager channelManager,
         super(config, channelManager, requestSender);
     }
 
-    private static boolean abortAfterHandlingStatus(AsyncHandler<?> handler, NettyResponseStatus status) throws Exception {
-        return handler.onStatusReceived(status) == State.ABORT;
+    private static boolean abortAfterHandlingStatus(AsyncHandler<?> handler, HttpMethod httpMethod, NettyResponseStatus status) throws Exception {
+        // For non-200 response of a CONNECT request, it's still unconnected.
+        // We need to either close the connection or reuse it but send CONNECT request again.
+        // The former one is easier or we have to attach more state to Channel.
+        return handler.onStatusReceived(status) == State.ABORT || httpMethod == HttpMethod.CONNECT && status.getStatusCode() != ResponseStatusCodes.OK_200;
     }
 
     private static boolean abortAfterHandlingHeaders(AsyncHandler<?> handler, HttpHeaders responseHeaders) throws Exception {
@@ -61,7 +66,7 @@ private void handleHttpResponse(final HttpResponse response, final Channel chann
         HttpHeaders responseHeaders = response.headers();
 
         if (!interceptors.exitAfterIntercept(channel, future, handler, response, status, responseHeaders)) {
-            boolean abort = abortAfterHandlingStatus(handler, status) || abortAfterHandlingHeaders(handler, responseHeaders);
+            boolean abort = abortAfterHandlingStatus(handler, httpRequest.method(), status) || abortAfterHandlingHeaders(handler, responseHeaders);
             if (abort) {
                 finishUpdate(future, channel, true);
             }
diff --git a/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java b/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
index 6c4109aec..011f15d78 100644
--- a/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
+++ b/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
@@ -13,14 +13,21 @@
 package org.asynchttpclient.proxy;
 
 import io.github.artsok.RepeatedIfExceptionsTest;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
 import org.asynchttpclient.AbstractBasicTest;
 import org.asynchttpclient.AsyncHttpClient;
 import org.asynchttpclient.AsyncHttpClientConfig;
 import org.asynchttpclient.RequestBuilder;
 import org.asynchttpclient.Response;
+import org.asynchttpclient.proxy.ProxyServer.Builder;
 import org.asynchttpclient.request.body.generator.ByteArrayBodyGenerator;
 import org.asynchttpclient.test.EchoHandler;
+import org.asynchttpclient.util.HttpConstants;
 import org.eclipse.jetty.proxy.ConnectHandler;
+import org.eclipse.jetty.server.Request;
 import org.eclipse.jetty.server.Server;
 import org.eclipse.jetty.server.ServerConnector;
 import org.eclipse.jetty.server.handler.AbstractHandler;
@@ -37,6 +44,8 @@
 import static org.asynchttpclient.test.TestUtils.addHttpsConnector;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 
+import java.io.IOException;
+
 /**
  * Proxy usage tests.
  */
@@ -46,7 +55,7 @@ public class HttpsProxyTest extends AbstractBasicTest {
 
     @Override
     public AbstractHandler configureHandler() throws Exception {
-        return new ConnectHandler();
+        return new ProxyHandler();
     }
 
     @Override
@@ -142,4 +151,38 @@ public void testPooledConnectionsWithProxy() throws Exception {
             assertEquals(200, response2.getStatusCode());
         }
     }
+    
+    @RepeatedIfExceptionsTest(repeats = 5)
+    public void testFailedConnectWithProxy() throws Exception {
+        try (AsyncHttpClient asyncHttpClient = asyncHttpClient(config().setFollowRedirect(true).setUseInsecureTrustManager(true).setKeepAlive(true))) {
+        	Builder proxyServer = proxyServer("localhost", port1);
+        	proxyServer.setCustomHeaders(r -> r.getHeaders().add(ProxyHandler.HEADER_FORBIDDEN, "1"));
+            RequestBuilder rb = get(getTargetUrl2()).setProxyServer(proxyServer);
+
+            Response response1 = asyncHttpClient.executeRequest(rb.build()).get();
+            assertEquals(403, response1.getStatusCode());
+
+            Response response2 = asyncHttpClient.executeRequest(rb.build()).get();
+            assertEquals(403, response2.getStatusCode());
+            
+            Response response3 = asyncHttpClient.executeRequest(rb.build()).get();
+            assertEquals(403, response3.getStatusCode());
+        }
+    }
+    
+    public static class ProxyHandler extends ConnectHandler {
+    	final static String HEADER_FORBIDDEN = "X-REJECT-REQUEST";
+
+        @Override
+        public void handle(String s, Request r, HttpServletRequest request, HttpServletResponse response) throws IOException, ServletException {
+            if (HttpConstants.Methods.CONNECT.equalsIgnoreCase(request.getMethod())) {
+                if (request.getHeader(HEADER_FORBIDDEN) != null) {
+                    response.setStatus(HttpServletResponse.SC_FORBIDDEN);
+                    r.setHandled(true);
+                    return;
+                }
+            }
+            super.handle(s, r, request, response);
+        }
+    }
 }

From c06dcab48c85bb84f071124a97898d56130dbcc6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 00:40:16 +0530
Subject: [PATCH 15/32] Bump org.apache.maven.plugins:maven-compiler-plugin
 from 3.13.0 to 3.14.0 (#2069)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin)
from 3.13.0 to 3.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/apache/maven-compiler-plugin/releases">org.apache.maven.plugins:maven-compiler-plugin's
releases</a>.</em></p>
<blockquote>
<h2>3.14.0</h2>
<!-- raw HTML omitted -->
<h2>🚀 New features and improvements</h2>
<ul>
<li>Enable GitHub Issues (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/305">#305</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MCOMPILER-579">[MCOMPILER-579]</a>
- allow module-version configuration (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/273">#273</a>)
<a href="https://github.com/mguillem"><code>@​mguillem</code></a></li>
<li>Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.4.0 - JDK 24
support (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/293">#293</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Update release-drafter configuration, PR automation (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/281">#281</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MCOMPILER-588">[MCOMPILER-588]</a>
- JUnit4 test framework to JUnit5 migration (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/236">#236</a>)
<a
href="https://github.com/MidNight-er"><code>@​MidNight-er</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fix release-drafter config (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/292">#292</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MCOMPILER-591">[MCOMPILER-591]</a>
- testCompile - fix detections of target less than 1.9 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/240">#240</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.4.0 - JDK 24
support (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/293">#293</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.6.3 to 3.9.9 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/283">#283</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.mockito:mockito-core from 4.8.0 to 4.11.0 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/288">#288</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugins:maven-plugins from 42 to 43 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/285">#285</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MCOMPILER-590">[MCOMPILER-590]</a>
- Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/235">#235</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Update scm tag according to branch (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/303">#303</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MNGSITE-529">[MNGSITE-529]</a>
- Rename &quot;Goals&quot; to &quot;Plugin Documentation&quot; (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/300">#300</a>)
<a href="https://github.com/Bukama"><code>@​Bukama</code></a></li>
<li>Use JUnit version from parent (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/299">#299</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MCOMPILER-529">[MCOMPILER-529]</a>
- Update docs about version schema (Maven 3) (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/295">#295</a>)
<a href="https://github.com/Bukama"><code>@​Bukama</code></a></li>
<li>Use default Maven versions for build on GitHub (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/289">#289</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Remove Maven 3 note (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/241">#241</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
<li>Remove info about old versions (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/237">#237</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
</ul>
<h2>🔧 Build</h2>
<ul>
<li>Exclude JDK 8 - temurin, adopt-openj9 on macos, use defaults values
(<a
href="https://redirect.github.com/apache/maven-compiler-plugin/pull/238">#238</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/b5e7d9b90712d75c12ca648f1a209dfc8cdc7931"><code>b5e7d9b</code></a>
[maven-release-plugin] prepare release maven-compiler-plugin-3.14.0</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/9134f1231a5ce532d779c24ebb3b4706a05978d2"><code>9134f12</code></a>
Enable GitHub Issues</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/19b8b128f422622cef20992bcadec52288fce489"><code>19b8b12</code></a>
Update scm tag according to branch</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/09dce4e613fbde5fbd88481b01d4a3004c31bea9"><code>09dce4e</code></a>
[MCOMPILER-579] allow module-version configuration (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/issues/273">#273</a>)</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/f7c3c5fab1d7b1a73b62720b772733aa82abf746"><code>f7c3c5f</code></a>
Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.4.0</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/764a54b22b011ebf0ab190cb9452d9e6561d6e93"><code>764a54b</code></a>
[MNGSITE-529] Rename &quot;Goals&quot; to &quot;Plugin
Documentation&quot;</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/cfacbc16305782da714b8f7ea5a77d47d952bd3d"><code>cfacbc1</code></a>
PR Automation only on close event</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/5c26bba9edad7b833756465c7cd0c9e54c77aaa9"><code>5c26bba</code></a>
Use JUnit version from parent</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/5449407f106ad6257471f9e7caa5fbe58c06ada9"><code>5449407</code></a>
[MCOMPILER-529] Update docs about version schema (Maven 3)</li>
<li><a
href="https://github.com/apache/maven-compiler-plugin/commit/01d5b8824e32365bb091465c747ec38299664744"><code>01d5b88</code></a>
Bump mavenVersion from 3.6.3 to 3.9.9 (<a
href="https://redirect.github.com/apache/maven-compiler-plugin/issues/283">#283</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.13.0...maven-compiler-plugin-3.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-compiler-plugin&package-manager=maven&previous-version=3.13.0&new-version=3.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 18c754452..6393a3ac5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -293,7 +293,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.13.0</version>
+                <version>3.14.0</version>
                 <configuration>
                     <source>11</source>
                     <target>11</target>

From 8f314527ffa7fa091f8cb115f7012ae01b9cc7f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 00:40:29 +0530
Subject: [PATCH 16/32] Bump com.github.luben:zstd-jni from 1.5.6-10 to 1.5.7-1
 (#2067)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)
from 1.5.6-10 to 1.5.7-1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/luben/zstd-jni/commit/6a6b1b10326557a136cbd0c71c8447d5b8c763a6"><code>6a6b1b1</code></a>
Restore compressionLevel in the dict builder</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/cc5ca81db91de8a1274b7e91e7ded3907fbadd21"><code>cc5ca81</code></a>
v1.5.7</li>
<li>See full diff in <a
href="https://github.com/luben/zstd-jni/compare/v1.5.6-10...v1.5.7-1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.6-10&new-version=1.5.7-1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 6393a3ac5..bc92eb92e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>
-        <zstd-jni.version>1.5.6-10</zstd-jni.version>
+        <zstd-jni.version>1.5.7-1</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
         <logback.version>1.5.16</logback.version>
         <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>

From 8189c92e5ab1e2a34d326cdc13d66de02b99ce67 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 00:40:43 +0530
Subject: [PATCH 17/32] Bump org.apache.tomcat.embed:tomcat-embed-core from
 10.1.35 to 10.1.36 (#2066)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps org.apache.tomcat.embed:tomcat-embed-core from 10.1.35 to 10.1.36.

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| org.apache.tomcat.embed:tomcat-embed-core | [>= 11.a0, < 12] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.tomcat.embed:tomcat-embed-core&package-manager=maven&previous-version=10.1.35&new-version=10.1.36)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 client/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/pom.xml b/client/pom.xml
index f035ac57c..826ee0db8 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -31,7 +31,7 @@
         <javaModuleName>org.asynchttpclient.client</javaModuleName>
 
         <jetty.version>11.0.24</jetty.version>
-        <tomcat.version>10.1.35</tomcat.version>
+        <tomcat.version>10.1.36</tomcat.version>
         <commons-io.version>2.18.0</commons-io.version>
         <mockito.version>4.11.0</mockito.version>
         <hamcrest.version>3.0</hamcrest.version>

From a9a3a7eb5a1df87fb2a5b5fd23eeb7519435ab4a Mon Sep 17 00:00:00 2001
From: Jason Joo <hblzxsj@gmail.com>
Date: Sat, 15 Mar 2025 01:50:47 +0800
Subject: [PATCH 18/32] fix: send CONNECT first when recovering a HTTPS request
 (#2077)

# Issue description

AHC has retry mechanism enabled with up to 5 attempts by default. But
the initial CONNECT is omitted when recovering the HTTPS requests with
IO exceptions. This MR fixes this issue and guarantees the proper
workflow in retries.

It's related to #2071 and fixes a different failing case.

# How the issue is fixed

* For any new connections, make sure there is an initial CONNECT for
WebSocket/HTTPS request.
* For the condition check that a CONNECT has been sent, make sure the
connection the current future attaches is reusable/active.

# Unit test

IOException has various reasons but in the unit test, we emulate it by
closing the connection after receiving the CONNECT request. The internal
recovery process will retry another 4 times, and through an IOException
eventually.

Signed-off-by: Jason Joo <hblzxsj@gmail.com>
---
 .../netty/request/NettyRequestSender.java     | 29 +++++++++++++-----
 .../asynchttpclient/proxy/HttpsProxyTest.java | 30 +++++++++++++++++--
 2 files changed, 50 insertions(+), 9 deletions(-)

diff --git a/client/src/main/java/org/asynchttpclient/netty/request/NettyRequestSender.java b/client/src/main/java/org/asynchttpclient/netty/request/NettyRequestSender.java
index 9fff868b2..b66dd713d 100755
--- a/client/src/main/java/org/asynchttpclient/netty/request/NettyRequestSender.java
+++ b/client/src/main/java/org/asynchttpclient/netty/request/NettyRequestSender.java
@@ -97,6 +97,13 @@ public NettyRequestSender(AsyncHttpClientConfig config, ChannelManager channelMa
         requestFactory = new NettyRequestFactory(config);
     }
 
+    // needConnect returns true if the request is secure/websocket and a HTTP proxy is set
+    private boolean needConnect(final Request request, final ProxyServer proxyServer) {
+        return proxyServer != null
+                && proxyServer.getProxyType().isHttp()
+                && (request.getUri().isSecured() || request.getUri().isWebSocket());
+    }
+
     public <T> ListenableFuture<T> sendRequest(final Request request, final AsyncHandler<T> asyncHandler, NettyResponseFuture<T> future) {
         if (isClosed()) {
             throw new IllegalStateException("Closed");
@@ -106,9 +113,7 @@ public <T> ListenableFuture<T> sendRequest(final Request request, final AsyncHan
         ProxyServer proxyServer = getProxyServer(config, request);
 
         // WebSockets use connect tunneling to work with proxies
-        if (proxyServer != null && proxyServer.getProxyType().isHttp() &&
-                (request.getUri().isSecured() || request.getUri().isWebSocket()) &&
-                !isConnectAlreadyDone(request, future)) {
+        if (needConnect(request, proxyServer) && !isConnectAlreadyDone(request, future)) {
             // Proxy with HTTPS or WebSocket: CONNECT for sure
             if (future != null && future.isConnectAllowed()) {
                 // Perform CONNECT
@@ -125,6 +130,8 @@ public <T> ListenableFuture<T> sendRequest(final Request request, final AsyncHan
 
     private static boolean isConnectAlreadyDone(Request request, NettyResponseFuture<?> future) {
         return future != null
+                // If the channel can't be reused or closed, a CONNECT is still required
+                && future.isReuseChannel() && Channels.isChannelActive(future.channel())
                 && future.getNettyRequest() != null
                 && future.getNettyRequest().getHttpRequest().method() == HttpMethod.CONNECT
                 && !request.getMethod().equals(CONNECT);
@@ -137,11 +144,19 @@ private static boolean isConnectAlreadyDone(Request request, NettyResponseFuture
      */
     private <T> ListenableFuture<T> sendRequestWithCertainForceConnect(Request request, AsyncHandler<T> asyncHandler, NettyResponseFuture<T> future,
                                                                        ProxyServer proxyServer, boolean performConnectRequest) {
-        NettyResponseFuture<T> newFuture = newNettyRequestAndResponseFuture(request, asyncHandler, future, proxyServer, performConnectRequest);
         Channel channel = getOpenChannel(future, request, proxyServer, asyncHandler);
-        return Channels.isChannelActive(channel)
-                ? sendRequestWithOpenChannel(newFuture, asyncHandler, channel)
-                : sendRequestWithNewChannel(request, proxyServer, newFuture, asyncHandler);
+        if (Channels.isChannelActive(channel)) {
+            NettyResponseFuture<T> newFuture = newNettyRequestAndResponseFuture(request, asyncHandler, future,
+                    proxyServer, performConnectRequest);
+            return sendRequestWithOpenChannel(newFuture, asyncHandler, channel);
+        } else {
+            // A new channel is not expected when performConnectRequest is false. We need to
+            // revisit the condition of sending
+            // the CONNECT request to the new channel.
+            NettyResponseFuture<T> newFuture = newNettyRequestAndResponseFuture(request, asyncHandler, future,
+                    proxyServer, needConnect(request, proxyServer));
+            return sendRequestWithNewChannel(request, proxyServer, newFuture, asyncHandler);
+        }
     }
 
     /**
diff --git a/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java b/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
index 011f15d78..9bd5ca911 100644
--- a/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
+++ b/client/src/test/java/org/asynchttpclient/proxy/HttpsProxyTest.java
@@ -13,6 +13,7 @@
 package org.asynchttpclient.proxy;
 
 import io.github.artsok.RepeatedIfExceptionsTest;
+import io.netty.handler.codec.http.DefaultHttpHeaders;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
@@ -43,8 +44,10 @@
 import static org.asynchttpclient.test.TestUtils.addHttpConnector;
 import static org.asynchttpclient.test.TestUtils.addHttpsConnector;
 import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrowsExactly;
 
 import java.io.IOException;
+import java.util.concurrent.ExecutionException;
 
 /**
  * Proxy usage tests.
@@ -156,7 +159,7 @@ public void testPooledConnectionsWithProxy() throws Exception {
     public void testFailedConnectWithProxy() throws Exception {
         try (AsyncHttpClient asyncHttpClient = asyncHttpClient(config().setFollowRedirect(true).setUseInsecureTrustManager(true).setKeepAlive(true))) {
         	Builder proxyServer = proxyServer("localhost", port1);
-        	proxyServer.setCustomHeaders(r -> r.getHeaders().add(ProxyHandler.HEADER_FORBIDDEN, "1"));
+        	proxyServer.setCustomHeaders(r -> new DefaultHttpHeaders().set(ProxyHandler.HEADER_FORBIDDEN, "1"));
             RequestBuilder rb = get(getTargetUrl2()).setProxyServer(proxyServer);
 
             Response response1 = asyncHttpClient.executeRequest(rb.build()).get();
@@ -170,16 +173,39 @@ public void testFailedConnectWithProxy() throws Exception {
         }
     }
     
+    @RepeatedIfExceptionsTest(repeats = 5)
+    public void testClosedConnectionWithProxy() throws Exception {
+        try (AsyncHttpClient asyncHttpClient = asyncHttpClient(
+                config().setFollowRedirect(true).setUseInsecureTrustManager(true).setKeepAlive(true))) {
+            Builder proxyServer = proxyServer("localhost", port1);
+            proxyServer.setCustomHeaders(r -> new DefaultHttpHeaders().set(ProxyHandler.HEADER_FORBIDDEN, "2"));
+            RequestBuilder rb = get(getTargetUrl2()).setProxyServer(proxyServer);
+
+            assertThrowsExactly(ExecutionException.class, () -> asyncHttpClient.executeRequest(rb.build()).get());
+            assertThrowsExactly(ExecutionException.class, () -> asyncHttpClient.executeRequest(rb.build()).get());
+            assertThrowsExactly(ExecutionException.class, () -> asyncHttpClient.executeRequest(rb.build()).get());
+        }
+    }
+
     public static class ProxyHandler extends ConnectHandler {
     	final static String HEADER_FORBIDDEN = "X-REJECT-REQUEST";
 
         @Override
         public void handle(String s, Request r, HttpServletRequest request, HttpServletResponse response) throws IOException, ServletException {
             if (HttpConstants.Methods.CONNECT.equalsIgnoreCase(request.getMethod())) {
-                if (request.getHeader(HEADER_FORBIDDEN) != null) {
+                String headerValue = request.getHeader(HEADER_FORBIDDEN);
+                if (headerValue == null) {
+                    headerValue = "";
+                }
+                switch (headerValue) {
+                case "1":
                     response.setStatus(HttpServletResponse.SC_FORBIDDEN);
                     r.setHandled(true);
                     return;
+                case "2":
+                    r.getHttpChannel().getConnection().close();
+                    r.setHandled(true);
+                    return;
                 }
             }
             super.handle(s, r, request, response);

From 4bd02df8668dc03ee9d09805faaaeefca97a038b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Mar 2025 23:21:27 +0530
Subject: [PATCH 19/32] Bump netty.version from 4.1.118.Final to 4.1.119.Final
 (#2076)

Bumps `netty.version` from 4.1.118.Final to 4.1.119.Final.
Updates `io.netty:netty-buffer` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-http` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-codec-socks` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler-proxy` from 4.1.118.Final to
4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-common` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-handler` from 4.1.118.Final to 4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-resolver-dns` from 4.1.118.Final to
4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-epoll` from 4.1.118.Final to
4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-transport-native-kqueue` from 4.1.118.Final to
4.1.119.Final
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/fb7c786f2df57867bcfe049b13a42e764606f0d5"><code>fb7c786</code></a>
[maven-release-plugin] prepare release netty-4.1.119.Final</li>
<li><a
href="https://github.com/netty/netty/commit/f0a546dffa0d8644eb6c1f23433601cf464c0882"><code>f0a546d</code></a>
Use initialized BouncyCastle providers when available (<a
href="https://redirect.github.com/netty/netty/issues/14855">#14855</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/7fc6a233a3a1a4fb3447e41ca5e236b6b1acfc9f"><code>7fc6a23</code></a>
Add QueryStringDecoder option to leave '+' alone (<a
href="https://redirect.github.com/netty/netty/issues/14850">#14850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/8f3dd2f9af16ff736800f09086956b2b74422f79"><code>8f3dd2f</code></a>
Consistently add channel info in HTTP/2 logs (<a
href="https://redirect.github.com/netty/netty/issues/14829">#14829</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/bd086437969573391d60ad13232617e7358e9508"><code>bd08643</code></a>
Bump BlockHound version to 1.0.11.RELEASE (<a
href="https://redirect.github.com/netty/netty/issues/14814">#14814</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/0138f2335593d50e3eb1d8e0e97d3e8438f7a74d"><code>0138f23</code></a>
SslHandler: Fix possible NPE when executor is used for delegating (<a
href="https://redirect.github.com/netty/netty/issues/14830">#14830</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/84120a782774540b9e64beff08a905b90838efcb"><code>84120a7</code></a>
Fix NPE when upgrade message fails to aggregate (<a
href="https://redirect.github.com/netty/netty/issues/14816">#14816</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/dc6b051d546d62cea4a79fec6c720bedceade13c"><code>dc6b051</code></a>
Replace SSL assertion with explicit record length check (<a
href="https://redirect.github.com/netty/netty/issues/14810">#14810</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/34011b5f02c52122eccd36ce7cc69502a514d0f1"><code>34011b5</code></a>
chore: Sync the id when DefaultHttp2FrameStream's stream is updated. (<a
href="https://redirect.github.com/netty/netty/issues/14803">#14803</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/f3311e5db4c9d9559fac96bb2f48295d63f58b67"><code>f3311e5</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/netty/netty/compare/netty-4.1.118.Final...netty-4.1.119.Final">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index bc92eb92e..d280fa329 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
         <maven.compiler.target>11</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
-        <netty.version>4.1.118.Final</netty.version>
+        <netty.version>4.1.119.Final</netty.version>
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>

From 0fe2036be2941886d4582878c20f7846f82b24f8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Mar 2025 23:21:54 +0530
Subject: [PATCH 20/32] Bump org.apache.tomcat.embed:tomcat-embed-core from
 10.1.36 to 10.1.39 (#2073)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps org.apache.tomcat.embed:tomcat-embed-core from 10.1.36 to 10.1.39.

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| org.apache.tomcat.embed:tomcat-embed-core | [>= 11.a0, < 12] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.tomcat.embed:tomcat-embed-core&package-manager=maven&previous-version=10.1.36&new-version=10.1.39)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 client/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/pom.xml b/client/pom.xml
index 826ee0db8..7cc99b940 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -31,7 +31,7 @@
         <javaModuleName>org.asynchttpclient.client</javaModuleName>
 
         <jetty.version>11.0.24</jetty.version>
-        <tomcat.version>10.1.36</tomcat.version>
+        <tomcat.version>10.1.39</tomcat.version>
         <commons-io.version>2.18.0</commons-io.version>
         <mockito.version>4.11.0</mockito.version>
         <hamcrest.version>3.0</hamcrest.version>

From acdacfb0701ec62949439b5dad78581ea0b0cf2f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 18:11:30 +0530
Subject: [PATCH 21/32] Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0
 (#2084)

Bumps
[crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg)
from 6.2.0 to 6.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/crazy-max/ghaction-import-gpg/releases">crazy-max/ghaction-import-gpg's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<ul>
<li>Bump openpgp from 5.11.2 to 6.1.0 in <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/215">crazy-max/ghaction-import-gpg#215</a></li>
<li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/212">crazy-max/ghaction-import-gpg#212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0">https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/e89d40939c28e39f97cf32126055eeae86ba74ec"><code>e89d409</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/215">#215</a>
from crazy-max/dependabot/npm_and_yarn/openpgp-6.1.0</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/92395896039cc60f9e5f7ac1f35556ab8c4c6340"><code>9239589</code></a>
fix README</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/177db9defff00616f84ff376537a20bd7efd4d27"><code>177db9d</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/78b11f3943d7153b895ce54a200f044602e95a5b"><code>78b11f3</code></a>
build(deps): bump openpgp from 5.11.2 to 6.1.0</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/bc969118f823f29ace21485950c4594e208c1b38"><code>bc96911</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/218">#218</a>
from crazy-max/bake-v6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/b70aa9b384bae860db4f4fee4d87b577eace7842"><code>b70aa9b</code></a>
ci: update bake-action to v6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/d690cc92b1309e4ece9706ab4ded933b845c40e0"><code>d690cc9</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/212">#212</a>
from crazy-max/dependabot/npm_and_yarn/cross-spawn-7.0.6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/9e887f448293293b7999c107b7c78b46586e8fd5"><code>9e887f4</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/211">#211</a>
from crazy-max/dependabot/github_actions/codecov/code...</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/442980b5038724bf9b57c968c2485eec569ab4e8"><code>442980b</code></a>
ci: fix deprecated codecov input</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/a0098b6990847e04ed88773c24d2ad2adcace4ac"><code>a0098b6</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/217">#217</a>
from crazy-max/gha-perms</li>
<li>Additional commits viewable in <a
href="https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crazy-max/ghaction-import-gpg&package-manager=github_actions&previous-version=6.2.0&new-version=6.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4a462dc99..b175fa865 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
             }]
 
       - name: Import GPG
-        uses: crazy-max/ghaction-import-gpg@v6.2.0
+        uses: crazy-max/ghaction-import-gpg@v6.3.0
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PASSPHRASE }}

From 96840692decab2541c8f13d2dbfbbca35311890f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 18:11:34 +0530
Subject: [PATCH 22/32] Bump com.uber.nullaway:nullaway from 0.12.3 to 0.12.6
 (#2082)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [com.uber.nullaway:nullaway](https://github.com/uber/NullAway)
from 0.12.3 to 0.12.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/releases">com.uber.nullaway:nullaway's
releases</a>.</em></p>
<blockquote>
<h2>NullAway 0.12.6</h2>
<ul>
<li>JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li>Infer <a
href="https://github.com/Nullable"><code>@​Nullable</code></a> type
arguments for type variables from unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li>Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li>Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
</ul>
<h2>NullAway 0.12.5</h2>
<ul>
<li>Add missing override to RestoreNullnessAnnotationsVisitor (<a
href="https://redirect.github.com/uber/NullAway/issues/1154">#1154</a>)</li>
<li>Add more bailouts for raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1153">#1153</a>)</li>
<li>Do unboxing check for invocation parameters even when calling a <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
method (<a
href="https://redirect.github.com/uber/NullAway/issues/1163">#1163</a>)</li>
<li>JSpecify: infer generic method type arguments for assignments (<a
href="https://redirect.github.com/uber/NullAway/issues/1131">#1131</a>)</li>
<li>JSpecify: properly handle lambdas in anonymous inner classes (<a
href="https://redirect.github.com/uber/NullAway/issues/1165">#1165</a>)</li>
<li>Support <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
on static fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1166">#1166</a>)</li>
<li>Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li>Don't treat <a
href="https://github.com/ParametricNullness"><code>@​ParametricNullness</code></a>
as <a href="https://github.com/Nullable"><code>@​Nullable</code></a> in
JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
</ul>
<p>Version 0.12.4</p>
<p>Better <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
support (<a
href="https://redirect.github.com/uber/NullAway/issues/1149">#1149</a>)
Add support for local variables for arrays. (<a
href="https://redirect.github.com/uber/NullAway/issues/1146">#1146</a>)
Ignore Spring Framework 6.2 <a
href="https://github.com/MockitoBean"><code>@​MockitoBean</code></a>, <a
href="https://github.com/MockitoSpyBean"><code>@​MockitoSpyBean</code></a>
fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1147">#1147</a>)
JSpecify: preserve explicit nullability annotations on type variables
when performing substitutions (<a
href="https://redirect.github.com/uber/NullAway/issues/1143">#1143</a>)
Always acknowledge restrictive annotations in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1144">#1144</a>)
Fix printing of array types in JSpecify errors (<a
href="https://redirect.github.com/uber/NullAway/issues/1145">#1145</a>)
Remove need to use JSpecify's <a
href="https://github.com/Nullable"><code>@​Nullable</code></a>
annotation (<a
href="https://redirect.github.com/uber/NullAway/issues/1142">#1142</a>)
Handle calls to generic constructors in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1141">#1141</a>)
Properly handle conditional expression within parens as RHS of
assignment (<a
href="https://redirect.github.com/uber/NullAway/issues/1140">#1140</a>)
Skip checks involving wildcard generic type arguments (<a
href="https://redirect.github.com/uber/NullAway/issues/1137">#1137</a>)
Update to Gradle 8.12.1 (<a
href="https://redirect.github.com/uber/NullAway/issues/1133">#1133</a>)</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">com.uber.nullaway:nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.12.6</h2>
<ul>
<li>JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li>Infer <a
href="https://github.com/Nullable"><code>@​Nullable</code></a> type
arguments for type variables from unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li>Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li>Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
</ul>
<h2>Version 0.12.5</h2>
<ul>
<li>Add missing override to RestoreNullnessAnnotationsVisitor (<a
href="https://redirect.github.com/uber/NullAway/issues/1154">#1154</a>)</li>
<li>Add more bailouts for raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1153">#1153</a>)</li>
<li>Do unboxing check for invocation parameters even when calling a <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
method (<a
href="https://redirect.github.com/uber/NullAway/issues/1163">#1163</a>)</li>
<li>JSpecify: infer generic method type arguments for assignments (<a
href="https://redirect.github.com/uber/NullAway/issues/1131">#1131</a>)</li>
<li>JSpecify: properly handle lambdas in anonymous inner classes (<a
href="https://redirect.github.com/uber/NullAway/issues/1165">#1165</a>)</li>
<li>Support <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
on static fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1166">#1166</a>)</li>
<li>Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li>Don't treat <a
href="https://github.com/ParametricNullness"><code>@​ParametricNullness</code></a>
as <a href="https://github.com/Nullable"><code>@​Nullable</code></a> in
JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
</ul>
<h2>Version 0.12.4</h2>
<ul>
<li>Better <code>@MonotonicNonNull</code> support (<a
href="https://redirect.github.com/uber/NullAway/issues/1149">#1149</a>)</li>
<li>Add support for local variables for arrays. (<a
href="https://redirect.github.com/uber/NullAway/issues/1146">#1146</a>)</li>
<li>Ignore Spring Framework 6.2 <code>@MockitoBean</code>,
<code>@MockitoSpyBean</code> fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1147">#1147</a>)</li>
<li>JSpecify: preserve explicit nullability annotations on type
variables when performing substitutions (<a
href="https://redirect.github.com/uber/NullAway/issues/1143">#1143</a>)</li>
<li>Always acknowledge restrictive annotations in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1144">#1144</a>)</li>
<li>Fix printing of array types in JSpecify errors (<a
href="https://redirect.github.com/uber/NullAway/issues/1145">#1145</a>)</li>
<li>Remove need to use JSpecify's <a
href="https://github.com/Nullable"><code>@​Nullable</code></a>
annotation (<a
href="https://redirect.github.com/uber/NullAway/issues/1142">#1142</a>)</li>
<li>Handle calls to generic constructors in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1141">#1141</a>)</li>
<li>Properly handle conditional expression within parens as RHS of
assignment (<a
href="https://redirect.github.com/uber/NullAway/issues/1140">#1140</a>)</li>
<li>Skip checks involving wildcard generic type arguments (<a
href="https://redirect.github.com/uber/NullAway/issues/1137">#1137</a>)</li>
<li>Update to Gradle 8.12.1 (<a
href="https://redirect.github.com/uber/NullAway/issues/1133">#1133</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uber/NullAway/commit/649f25ad3116a7c64732fbc7a5d2bc40140b9cdd"><code>649f25a</code></a>
Prepare for release 0.12.6.</li>
<li><a
href="https://github.com/uber/NullAway/commit/93697041244ad165dabe9b49d9b03441bba9dd31"><code>9369704</code></a>
Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/f1aca1b1cbb1373dc1aac7d7e2e930f159237529"><code>f1aca1b</code></a>
Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/33588de748b90848be9259dc799569cfa807704e"><code>33588de</code></a>
Infer <code>@Nullable</code> type arguments for type variables from
unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/dd0fe71e12e4acdfe4699baba7d7268420ecda30"><code>dd0fe71</code></a>
JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/2c8049c68cb81ec6cc73377102413e7a95b3fb7a"><code>2c8049c</code></a>
Prepare next development version.</li>
<li><a
href="https://github.com/uber/NullAway/commit/9613fb776f541732121079441b09dc8ac6bfe5db"><code>9613fb7</code></a>
Prepare for release 0.12.5.</li>
<li><a
href="https://github.com/uber/NullAway/commit/b84feb73782daf35c63e36b7c7fc4e19fe4a8a08"><code>b84feb7</code></a>
Don't treat <code>@ParametricNullness</code> as <code>@Nullable</code>
in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/3da2c82097cfaf7fa8360b95622f762cc5f55cc0"><code>3da2c82</code></a>
Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/685065a55d121992e511c313702ab59a12abdac8"><code>685065a</code></a>
Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uber/NullAway/compare/v0.12.3...v0.12.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=maven&previous-version=0.12.3&new-version=0.12.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index d280fa329..20b284dc0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -327,7 +327,7 @@
                         <path>
                             <groupId>com.uber.nullaway</groupId>
                             <artifactId>nullaway</artifactId>
-                            <version>0.12.3</version>
+                            <version>0.12.6</version>
                         </path>
                         <!-- Other annotation processors go here -->
                     </annotationProcessorPaths>

From 5977cd39acf22326ae5a8313987e27117c8ffbc0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 18:11:47 +0530
Subject: [PATCH 23/32] Bump com.github.luben:zstd-jni from 1.5.7-1 to 1.5.7-2
 (#2078)

Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)
from 1.5.7-1 to 1.5.7-2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/luben/zstd-jni/commit/88892eb44549a214ba4c23459618b9d5d647a44c"><code>88892eb</code></a>
v1.5.7-2</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/7b52f9b6d3912ddb59ce3ffb7e26e635bcfa71db"><code>7b52f9b</code></a>
indentation</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/cdd20becaad29372922b33c2762183bdf4726598"><code>cdd20be</code></a>
Fix lock acquisition</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/15e5eee8b871add5a50a0c53ae5167668455170f"><code>15e5eee</code></a>
Support decompression from byte array to ByteBuffer and vice-versa</li>
<li>See full diff in <a
href="https://github.com/luben/zstd-jni/compare/v1.5.7-1...v1.5.7-2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.7-1&new-version=1.5.7-2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 20b284dc0..9b48a8c0d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
         <netty.iouring>0.0.26.Final</netty.iouring>
         <brotli4j.version>1.18.0</brotli4j.version>
         <slf4j.version>2.0.16</slf4j.version>
-        <zstd-jni.version>1.5.7-1</zstd-jni.version>
+        <zstd-jni.version>1.5.7-2</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
         <logback.version>1.5.16</logback.version>
         <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>

From 1f642ba712f04b8385171107efefae2a44df72fd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 18:11:55 +0530
Subject: [PATCH 24/32] Bump ch.qos.logback:logback-classic from 1.5.16 to
 1.5.18 (#2080)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.16 to 1.5.18.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.5.18</h2>
<p><strong>2025-03-18 Release of logback version 1.5.18</strong></p>
<p>• Added<a
href="https://logback.qos.ch/manual/appenders.html#fileCompression">
support for XZ compression</a> for archived log files. Note that XZ
compression requires Tukaani project's <a
href="https://tukaani.org/xz/java.html">XZ library</a> for Java. In case
XZ compression is requested but the XZ library is missing, then logback
will substitute GZ compression as a fallback. This feature was requested
in issues/755.</p>
<p>• Removed references to <code>java.security.AccessController</code>
class. This class has been deprecated for some time and is slated for
removal in future JDK versions.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
b2a02f065379a9b1ba5ff837fc08913b744774bc associated with the tag
v_1.5.18. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<h2>Logback 1.5.17</h2>
<p><strong>2025-02-25 Release of logback version 1.5.17</strong></p>
<p>• Fixed Jansi 2.4.0 color-coded output not working on Windows CMD.exe
console when the default terminal application is set to &quot;Windows
Console Host&quot;. This problem was reported in issues/753 by Michael
Lyubkin.</p>
<p>• Fixed race condition occurring in case MDC class is initialized
while org.slf4j.LoggerFactory is initializing logback-classic's
LoggerContext. When this race conditions occurs, the MDCAdapter instance
used by MDC does not match the instance used by logback-classic. This
issue was reported in SLF4J issues/450. While logback-classic version
1.5.17 remains compatible with SLF4J versions in the 2.0.x series,
fixing this particular MDC issue requires SLF4J version 2.0.17.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
10358724ed723b3745c010aa40cb02a2dfed4593 associated with the tag
v_1.5.17. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/qos-ch/logback/commit/b2a02f065379a9b1ba5ff837fc08913b744774bc"><code>b2a02f0</code></a>
prepare release 1.5.18</li>
<li><a
href="https://github.com/qos-ch/logback/commit/991de5828b2afc2ddb8fbc7b233bd660096d793f"><code>991de58</code></a>
remove references to AccessController marked for deletion in the
JDK</li>
<li><a
href="https://github.com/qos-ch/logback/commit/f54ab16c8436475f16579e887c1305506212ac5a"><code>f54ab16</code></a>
If compression mode is XZ but the XZ library is missing, then fallback
to GZ ...</li>
<li><a
href="https://github.com/qos-ch/logback/commit/fb45971e5457296abfcf706322a06563fb3df62a"><code>fb45971</code></a>
add support for XZ compression</li>
<li><a
href="https://github.com/qos-ch/logback/commit/31c1f55a1bf177922cf6a3c609a9d379f12d0693"><code>31c1f55</code></a>
add xz compression support with tests</li>
<li><a
href="https://github.com/qos-ch/logback/commit/8968d0fd43d065f2f0e63b6679e59c89e0c2a8b8"><code>8968d0f</code></a>
introduce strategy based compression</li>
<li><a
href="https://github.com/qos-ch/logback/commit/834059cb64ea8a6ca6e51c78fa0ac2b2797df0ed"><code>834059c</code></a>
start work on 1.5.18-SNAPSHOT</li>
<li><a
href="https://github.com/qos-ch/logback/commit/10358724ed723b3745c010aa40cb02a2dfed4593"><code>1035872</code></a>
prepare release 1.5.17</li>
<li><a
href="https://github.com/qos-ch/logback/commit/2e6984d1e16c78c703a62bf2789a9c157d7bc050"><code>2e6984d</code></a>
bump to slf4j version 2.0.17</li>
<li><a
href="https://github.com/qos-ch/logback/commit/100995244bf75ded9cb51bade91f84e63f349474"><code>1009952</code></a>
use a new LoggerContert instance when running LogbackListenerTest. This
shoul...</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.16...v_1.5.18">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=maven&previous-version=1.5.16&new-version=1.5.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 9b48a8c0d..98e816c79 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,7 @@
         <slf4j.version>2.0.16</slf4j.version>
         <zstd-jni.version>1.5.7-2</zstd-jni.version>
         <activation.version>2.0.1</activation.version>
-        <logback.version>1.5.16</logback.version>
+        <logback.version>1.5.18</logback.version>
         <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>
     </properties>
 

From 4fea3f747700475af5abc96e2eaa1b7cb6185366 Mon Sep 17 00:00:00 2001
From: Aayush Atharva <aayush@shieldblaze.com>
Date: Mon, 31 Mar 2025 18:24:04 +0530
Subject: [PATCH 25/32] Disable Dependabot (#2085)

Dependabot creates a separate PR for each dependency, which has broken
the final release builds many times. It will be disabled for the time
being until a better way to manage dependency upgrades is implemented,
---
 .github/dependabot.yml | 17 -----------------
 1 file changed, 17 deletions(-)
 delete mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index f4538d3c7..000000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
-version: 2
-updates:
-  - package-ecosystem: "maven"
-    directories:
-      - "/"
-    schedule:
-      interval: "daily"
-  - package-ecosystem: "github-actions"
-    directories:
-      - "/"
-    schedule:
-      interval: "daily"

From 3f1de314d7e340a90929ef7d422eeaed2253b33c Mon Sep 17 00:00:00 2001
From: Aayush Atharva <aayush@shieldblaze.com>
Date: Mon, 31 Mar 2025 19:28:09 +0530
Subject: [PATCH 26/32] Release v3.0.2 (#2086)

---
 README.md      | 4 ++--
 client/pom.xml | 2 +-
 pom.xml        | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 4ae651b75..0272134ed 100644
--- a/README.md
+++ b/README.md
@@ -20,7 +20,7 @@ Maven:
     <dependency>
         <groupId>org.asynchttpclient</groupId>
         <artifactId>async-http-client</artifactId>
-        <version>3.0.1</version>
+        <version>3.0.2</version>
     </dependency>
 </dependencies>
 ```
@@ -28,7 +28,7 @@ Maven:
 Gradle:
 ```groovy
 dependencies {
-    implementation 'org.asynchttpclient:async-http-client:3.0.1'
+    implementation 'org.asynchttpclient:async-http-client:3.0.2'
 }
 ```
 
diff --git a/client/pom.xml b/client/pom.xml
index 7cc99b940..749a98ddb 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -19,7 +19,7 @@
     <parent>
         <groupId>org.asynchttpclient</groupId>
         <artifactId>async-http-client-project</artifactId>
-        <version>3.0.1</version>
+        <version>3.0.2</version>
     </parent>
 
     <modelVersion>4.0.0</modelVersion>
diff --git a/pom.xml b/pom.xml
index 98e816c79..70d09ac53 100644
--- a/pom.xml
+++ b/pom.xml
@@ -20,7 +20,7 @@
 
     <groupId>org.asynchttpclient</groupId>
     <artifactId>async-http-client-project</artifactId>
-    <version>3.0.1</version>
+    <version>3.0.2</version>
     <packaging>pom</packaging>
 
     <name>AHC/Project</name>

From 14ee30acf476d52831f7048bf861a4752bb13a08 Mon Sep 17 00:00:00 2001
From: sullis <seans@grubhub.com>
Date: Wed, 2 Apr 2025 12:58:01 -0700
Subject: [PATCH 27/32] netty leak detector 0.0.8 (#2087)

https://github.com/nettyplus/netty-leak-detector-junit-extension
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 70d09ac53..4dbe02c1d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
             <dependency>
                 <groupId>io.github.nettyplus</groupId>
                 <artifactId>netty-leak-detector-junit-extension</artifactId>
-                <version>0.0.6</version>
+                <version>0.0.8</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

From 73911ebe4c464588fb10c211a43caeec394d97ca Mon Sep 17 00:00:00 2001
From: Pratik Katti <90851204+pratt4@users.noreply.github.com>
Date: Fri, 9 May 2025 23:14:39 +0530
Subject: [PATCH 28/32] Fix NPE race in NettyResponseFuture.cancel (#2042)
 (#2088)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #2042

This is a typical TOCTOU (time-of-check/time-of-use) race
https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use.
The NPE was occurring because the channel field could be set to null by
another thread between the check and its use:

if (channel != null) {                 // time-of-check
    Channels.setDiscard(channel);      //  time-of-use
    Channels.silentlyCloseChannel(channel);
}

By copying channel into a local variable in one atomic read, we ensure
that—even if another thread changes the field—the local reference
remains valid.

P.S. It is hard to write a deterministic test that fails consistently,
so this PR only includes the code fix.

---------

Co-authored-by: prat <pratikkatti4@gmial.com>
---
 .../org/asynchttpclient/netty/NettyResponseFuture.java    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/client/src/main/java/org/asynchttpclient/netty/NettyResponseFuture.java b/client/src/main/java/org/asynchttpclient/netty/NettyResponseFuture.java
index c5e4a97d0..c29c0f33d 100755
--- a/client/src/main/java/org/asynchttpclient/netty/NettyResponseFuture.java
+++ b/client/src/main/java/org/asynchttpclient/netty/NettyResponseFuture.java
@@ -187,10 +187,10 @@ public boolean cancel(boolean force) {
             return false;
         }
 
-        // cancel could happen before channel was attached
-        if (channel != null) {
-            Channels.setDiscard(channel);
-            Channels.silentlyCloseChannel(channel);
+        final Channel ch = channel; //atomic read, so that it won't end up in TOCTOU
+        if (ch != null) {
+            Channels.setDiscard(ch);
+            Channels.silentlyCloseChannel(ch);
         }
 
         if (ON_THROWABLE_CALLED_FIELD.getAndSet(this, 1) == 0) {

From 6ac1cccad93bf617200f6a87f9790de273529256 Mon Sep 17 00:00:00 2001
From: Aayush Atharva <aayush@shieldblaze.com>
Date: Sun, 11 May 2025 04:58:54 +0530
Subject: [PATCH 29/32] Add japicmp (#2091)

---
 .github/workflows/builds.yml | 26 +++++++++++++++++++++-----
 pom.xml                      | 28 ++++++++++++++++++++++++++++
 2 files changed, 49 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
index 6a59bde6c..2586cf3c6 100644
--- a/.github/workflows/builds.yml
+++ b/.github/workflows/builds.yml
@@ -5,34 +5,50 @@ on:
     - cron: '0 12 * * *'
 
 jobs:
+  Verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Grant Permission
+        run: chmod +x ./mvnw
+      - uses: actions/setup-java@v4
+        with:
+          distribution: 'corretto'
+          java-version: '11'
+      - name: Verify
+        run: ./mvnw -B -ntp clean verify -DskipTests -Dgpg.skip=true
+
   RunOnLinux:
     runs-on: ubuntu-latest
+    needs: Verify
     steps:
       - uses: actions/checkout@v4
       - name: Grant Permission
-        run: sudo chmod +x ./mvnw
+        run: chmod +x ./mvnw
       - uses: actions/setup-java@v4
         with:
           distribution: 'corretto'
           java-version: '11'
       - name: Run Tests
-        run: ./mvnw -B -ntp clean test
+        run: ./mvnw -B -ntp test
 
   RunOnMacOs:
     runs-on: macos-latest
+    needs: Verify
     steps:
       - uses: actions/checkout@v4
       - name: Grant Permission
-        run: sudo chmod +x ./mvnw
+        run: chmod +x ./mvnw
       - uses: actions/setup-java@v4
         with:
           distribution: 'corretto'
           java-version: '11'
       - name: Run Tests
-        run: ./mvnw -B -ntp clean test
+        run: ./mvnw -B -ntp test
 
   RunOnWindows:
     runs-on: windows-latest
+    needs: Verify
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-java@v4
@@ -40,4 +56,4 @@ jobs:
           distribution: 'corretto'
           java-version: '11'
       - name: Run Tests
-        run: ./mvnw.cmd -B -ntp clean test
+        run: ./mvnw.cmd -B -ntp test
diff --git a/pom.xml b/pom.xml
index 4dbe02c1d..ee1c2308c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -422,10 +422,38 @@
                                 <arg>--pinentry-mode</arg>
                                 <arg>loopback</arg>
                             </gpgArguments>
+                            <gpg.skip>false</gpg.skip>
                         </configuration>
                     </execution>
                 </executions>
             </plugin>
+
+            <plugin>
+                <groupId>com.github.siom79.japicmp</groupId>
+                <artifactId>japicmp-maven-plugin</artifactId>
+                <version>0.23.1</version>
+                <configuration>
+                    <version>
+                        <old>RELEASE</old>
+                        <new>${project.version}</new>
+                    </version>
+                    <parameter>
+                        <onlyModified>true</onlyModified>
+                        <breakBuildOnBinaryIncompatibleModifications>true</breakBuildOnBinaryIncompatibleModifications>
+                        <breakBuildOnSourceIncompatibleModifications>true</breakBuildOnSourceIncompatibleModifications>
+                        <includeSynthetic>false</includeSynthetic>
+                        <accessModifier>public</accessModifier>
+                    </parameter>
+                </configuration>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>cmp</goal>
+                        </goals>
+                        <phase>verify</phase>
+                    </execution>
+                </executions>
+            </plugin>
         </plugins>
     </build>
 </project>

From fb50dc26717f0e6aaaef58e2a01924a56aab2021 Mon Sep 17 00:00:00 2001
From: Aayush Atharva <aayush@shieldblaze.com>
Date: Sun, 11 May 2025 05:00:47 +0530
Subject: [PATCH 30/32] Feature: Add Option to Strip Authorization Header on
 Redirect (#2090)

Closes #1884

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 .../AsyncHttpClientConfig.java                |  7 ++
 .../DefaultAsyncHttpClientConfig.java         | 16 ++++
 .../intercept/Redirect30xInterceptor.java     |  9 +-
 .../DefaultAsyncHttpClientConfigTest.java     | 30 ++++++
 .../StripAuthorizationOnRedirectHttpTest.java | 95 +++++++++++++++++++
 5 files changed, 153 insertions(+), 4 deletions(-)
 create mode 100644 client/src/test/java/org/asynchttpclient/DefaultAsyncHttpClientConfigTest.java
 create mode 100644 client/src/test/java/org/asynchttpclient/StripAuthorizationOnRedirectHttpTest.java

diff --git a/client/src/main/java/org/asynchttpclient/AsyncHttpClientConfig.java b/client/src/main/java/org/asynchttpclient/AsyncHttpClientConfig.java
index 12dc93d7d..954628b3d 100644
--- a/client/src/main/java/org/asynchttpclient/AsyncHttpClientConfig.java
+++ b/client/src/main/java/org/asynchttpclient/AsyncHttpClientConfig.java
@@ -375,6 +375,13 @@ public interface AsyncHttpClientConfig {
 
     int getIoThreadsCount();
 
+    /**
+     * Indicates whether the Authorization header should be stripped during redirects to a different domain.
+     *
+     * @return true if the Authorization header should be stripped, false otherwise.
+     */
+    boolean isStripAuthorizationOnRedirect();
+
     enum ResponseBodyPartFactory {
 
         EAGER {
diff --git a/client/src/main/java/org/asynchttpclient/DefaultAsyncHttpClientConfig.java b/client/src/main/java/org/asynchttpclient/DefaultAsyncHttpClientConfig.java
index e72235c17..1c7dbf37f 100644
--- a/client/src/main/java/org/asynchttpclient/DefaultAsyncHttpClientConfig.java
+++ b/client/src/main/java/org/asynchttpclient/DefaultAsyncHttpClientConfig.java
@@ -127,6 +127,7 @@ public class DefaultAsyncHttpClientConfig implements AsyncHttpClientConfig {
     private final boolean keepEncodingHeader;
     private final ProxyServerSelector proxyServerSelector;
     private final boolean validateResponseHeaders;
+    private final boolean stripAuthorizationOnRedirect;
 
     // websockets
     private final boolean aggregateWebSocketFrameFragments;
@@ -219,6 +220,7 @@ private DefaultAsyncHttpClientConfig(// http
                                          boolean validateResponseHeaders,
                                          boolean aggregateWebSocketFrameFragments,
                                          boolean enablewebSocketCompression,
+                                         boolean stripAuthorizationOnRedirect,
 
                                          // timeouts
                                          Duration connectTimeout,
@@ -307,6 +309,7 @@ private DefaultAsyncHttpClientConfig(// http
         this.keepEncodingHeader = keepEncodingHeader;
         this.proxyServerSelector = proxyServerSelector;
         this.validateResponseHeaders = validateResponseHeaders;
+        this.stripAuthorizationOnRedirect = stripAuthorizationOnRedirect;
 
         // websocket
         this.aggregateWebSocketFrameFragments = aggregateWebSocketFrameFragments;
@@ -564,6 +567,11 @@ public boolean isValidateResponseHeaders() {
         return validateResponseHeaders;
     }
 
+    @Override
+    public boolean isStripAuthorizationOnRedirect() {
+        return stripAuthorizationOnRedirect;
+    }
+
     // ssl
     @Override
     public boolean isUseOpenSsl() {
@@ -800,6 +808,7 @@ public static class Builder {
         private boolean useProxySelector = defaultUseProxySelector();
         private boolean useProxyProperties = defaultUseProxyProperties();
         private boolean validateResponseHeaders = defaultValidateResponseHeaders();
+        private boolean stripAuthorizationOnRedirect = false; // default value
 
         // websocket
         private boolean aggregateWebSocketFrameFragments = defaultAggregateWebSocketFrameFragments();
@@ -891,6 +900,7 @@ public Builder(AsyncHttpClientConfig config) {
             keepEncodingHeader = config.isKeepEncodingHeader();
             proxyServerSelector = config.getProxyServerSelector();
             validateResponseHeaders = config.isValidateResponseHeaders();
+            stripAuthorizationOnRedirect = config.isStripAuthorizationOnRedirect();
 
             // websocket
             aggregateWebSocketFrameFragments = config.isAggregateWebSocketFrameFragments();
@@ -1079,6 +1089,11 @@ public Builder setUseProxyProperties(boolean useProxyProperties) {
             return this;
         }
 
+        public Builder setStripAuthorizationOnRedirect(boolean value) {
+            stripAuthorizationOnRedirect = value;
+            return this;
+        }
+
         // websocket
         public Builder setAggregateWebSocketFrameFragments(boolean aggregateWebSocketFrameFragments) {
             this.aggregateWebSocketFrameFragments = aggregateWebSocketFrameFragments;
@@ -1444,6 +1459,7 @@ public DefaultAsyncHttpClientConfig build() {
                     validateResponseHeaders,
                     aggregateWebSocketFrameFragments,
                     enablewebSocketCompression,
+                    stripAuthorizationOnRedirect,
                     connectTimeout,
                     requestTimeout,
                     readTimeout,
diff --git a/client/src/main/java/org/asynchttpclient/netty/handler/intercept/Redirect30xInterceptor.java b/client/src/main/java/org/asynchttpclient/netty/handler/intercept/Redirect30xInterceptor.java
index e60495f80..40628a7e5 100644
--- a/client/src/main/java/org/asynchttpclient/netty/handler/intercept/Redirect30xInterceptor.java
+++ b/client/src/main/java/org/asynchttpclient/netty/handler/intercept/Redirect30xInterceptor.java
@@ -35,7 +35,6 @@
 import org.slf4j.LoggerFactory;
 
 import java.util.HashSet;
-import java.util.List;
 import java.util.Set;
 
 import static io.netty.handler.codec.http.HttpHeaderNames.AUTHORIZATION;
@@ -73,11 +72,13 @@ public class Redirect30xInterceptor {
     private final AsyncHttpClientConfig config;
     private final NettyRequestSender requestSender;
     private final MaxRedirectException maxRedirectException;
+    private final boolean stripAuthorizationOnRedirect;
 
     Redirect30xInterceptor(ChannelManager channelManager, AsyncHttpClientConfig config, NettyRequestSender requestSender) {
         this.channelManager = channelManager;
         this.config = config;
         this.requestSender = requestSender;
+        stripAuthorizationOnRedirect = config.isStripAuthorizationOnRedirect(); // New flag
         maxRedirectException = unknownStackTrace(new MaxRedirectException("Maximum redirect reached: " + config.getMaxRedirects()),
                 Redirect30xInterceptor.class, "exitAfterHandlingRedirect");
     }
@@ -127,7 +128,7 @@ public boolean exitAfterHandlingRedirect(Channel channel, NettyResponseFuture<?>
                     }
                 }
 
-                requestBuilder.setHeaders(propagatedHeaders(request, realm, keepBody));
+                requestBuilder.setHeaders(propagatedHeaders(request, realm, keepBody, stripAuthorizationOnRedirect));
 
                 // in case of a redirect from HTTP to HTTPS, future
                 // attributes might change
@@ -180,7 +181,7 @@ public boolean exitAfterHandlingRedirect(Channel channel, NettyResponseFuture<?>
         return false;
     }
 
-    private static HttpHeaders propagatedHeaders(Request request, Realm realm, boolean keepBody) {
+    private static HttpHeaders propagatedHeaders(Request request, Realm realm, boolean keepBody, boolean stripAuthorization) {
         HttpHeaders headers = request.getHeaders()
                 .remove(HOST)
                 .remove(CONTENT_LENGTH);
@@ -189,7 +190,7 @@ private static HttpHeaders propagatedHeaders(Request request, Realm realm, boole
             headers.remove(CONTENT_TYPE);
         }
 
-        if (realm != null && realm.getScheme() == AuthScheme.NTLM) {
+        if (stripAuthorization || (realm != null && realm.getScheme() == AuthScheme.NTLM)) {
             headers.remove(AUTHORIZATION)
                     .remove(PROXY_AUTHORIZATION);
         }
diff --git a/client/src/test/java/org/asynchttpclient/DefaultAsyncHttpClientConfigTest.java b/client/src/test/java/org/asynchttpclient/DefaultAsyncHttpClientConfigTest.java
new file mode 100644
index 000000000..1548d6812
--- /dev/null
+++ b/client/src/test/java/org/asynchttpclient/DefaultAsyncHttpClientConfigTest.java
@@ -0,0 +1,30 @@
+package org.asynchttpclient;
+
+import org.junit.jupiter.api.Test;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+class DefaultAsyncHttpClientConfigTest {
+    @Test
+    void testStripAuthorizationOnRedirect_DefaultIsFalse() {
+        DefaultAsyncHttpClientConfig config = new DefaultAsyncHttpClientConfig.Builder().build();
+        assertFalse(config.isStripAuthorizationOnRedirect(), "Default should be false");
+    }
+
+    @Test
+    void testStripAuthorizationOnRedirect_SetTrue() {
+        DefaultAsyncHttpClientConfig config = new DefaultAsyncHttpClientConfig.Builder()
+                .setStripAuthorizationOnRedirect(true)
+                .build();
+        assertTrue(config.isStripAuthorizationOnRedirect(), "Should be true when set");
+    }
+
+    @Test
+    void testStripAuthorizationOnRedirect_SetFalse() {
+        DefaultAsyncHttpClientConfig config = new DefaultAsyncHttpClientConfig.Builder()
+                .setStripAuthorizationOnRedirect(false)
+                .build();
+        assertFalse(config.isStripAuthorizationOnRedirect(), "Should be false when set to false");
+    }
+}
diff --git a/client/src/test/java/org/asynchttpclient/StripAuthorizationOnRedirectHttpTest.java b/client/src/test/java/org/asynchttpclient/StripAuthorizationOnRedirectHttpTest.java
new file mode 100644
index 000000000..08c150c08
--- /dev/null
+++ b/client/src/test/java/org/asynchttpclient/StripAuthorizationOnRedirectHttpTest.java
@@ -0,0 +1,95 @@
+package org.asynchttpclient;
+
+import com.sun.net.httpserver.HttpExchange;
+import com.sun.net.httpserver.HttpHandler;
+import com.sun.net.httpserver.HttpServer;
+import org.junit.jupiter.api.AfterAll;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.Test;
+
+import java.net.InetSocketAddress;
+import java.util.concurrent.TimeUnit;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+
+public class StripAuthorizationOnRedirectHttpTest {
+    private static HttpServer server;
+    private static int port;
+    private static volatile String lastAuthHeader;
+
+    @BeforeAll
+    public static void startServer() throws Exception {
+        server = HttpServer.create(new InetSocketAddress(0), 0);
+        port = server.getAddress().getPort();
+        server.createContext("/redirect", new RedirectHandler());
+        server.createContext("/final", new FinalHandler());
+        server.start();
+    }
+
+    @AfterAll
+    public static void stopServer() {
+        server.stop(0);
+    }
+
+    static class RedirectHandler implements HttpHandler {
+        @Override
+        public void handle(HttpExchange exchange) {
+            String auth = exchange.getRequestHeaders().getFirst("Authorization");
+            lastAuthHeader = auth;
+            exchange.getResponseHeaders().add("Location", "http://localhost/" + port + "/final");
+            try {
+                exchange.sendResponseHeaders(302, -1);
+            } catch (Exception ignored) {
+            }
+            exchange.close();
+        }
+    }
+
+    static class FinalHandler implements HttpHandler {
+        @Override
+        public void handle(HttpExchange exchange) {
+            String auth = exchange.getRequestHeaders().getFirst("Authorization");
+            lastAuthHeader = auth;
+            try {
+                exchange.sendResponseHeaders(200, 0);
+                exchange.getResponseBody().close();
+            } catch (Exception ignored) {
+            }
+            exchange.close();
+        }
+    }
+
+    @Test
+    void testAuthHeaderPropagatedByDefault() throws Exception {
+        DefaultAsyncHttpClientConfig config = new DefaultAsyncHttpClientConfig.Builder()
+                .setFollowRedirect(true)
+                .build();
+        try (DefaultAsyncHttpClient client = new DefaultAsyncHttpClient(config)) {
+            lastAuthHeader = null;
+            client.prepareGet("http://localhost/" + port + "/redirect")
+                    .setHeader("Authorization", "Bearer testtoken")
+                    .execute()
+                    .get(5, TimeUnit.SECONDS);
+            // By default, Authorization header is propagated to /final
+            assertEquals("Bearer testtoken", lastAuthHeader, "Authorization header should be present on redirect by default");
+        }
+    }
+
+    @Test
+    void testAuthHeaderStrippedWhenEnabled() throws Exception {
+        DefaultAsyncHttpClientConfig config = new DefaultAsyncHttpClientConfig.Builder()
+                .setFollowRedirect(true)
+                .setStripAuthorizationOnRedirect(true)
+                .build();
+        try (DefaultAsyncHttpClient client = new DefaultAsyncHttpClient(config)) {
+            lastAuthHeader = null;
+            client.prepareGet("http://localhost/" + port + "/redirect")
+                    .setHeader("Authorization", "Bearer testtoken")
+                    .execute()
+                    .get(5, TimeUnit.SECONDS);
+            // When enabled, Authorization header should be stripped on /final
+            assertNull(lastAuthHeader, "Authorization header should be stripped on redirect when enabled");
+        }
+    }
+}

From 41b1eec767ded1c2dcf9e7c690a4b8b6e0145e83 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 18 May 2025 22:24:59 +0530
Subject: [PATCH 31/32] Bump org.apache.tomcat.embed:tomcat-embed-core from
 10.1.39 to 10.1.40 in /client (#2092)

Bumps org.apache.tomcat.embed:tomcat-embed-core from 10.1.39 to 10.1.40.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.tomcat.embed:tomcat-embed-core&package-manager=maven&previous-version=10.1.39&new-version=10.1.40)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/AsyncHttpClient/async-http-client/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 client/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/pom.xml b/client/pom.xml
index 749a98ddb..733f20b51 100644
--- a/client/pom.xml
+++ b/client/pom.xml
@@ -31,7 +31,7 @@
         <javaModuleName>org.asynchttpclient.client</javaModuleName>
 
         <jetty.version>11.0.24</jetty.version>
-        <tomcat.version>10.1.39</tomcat.version>
+        <tomcat.version>10.1.40</tomcat.version>
         <commons-io.version>2.18.0</commons-io.version>
         <mockito.version>4.11.0</mockito.version>
         <hamcrest.version>3.0</hamcrest.version>

From c8cc6e82e633e4f5d8e71646a9432e6e1d5b41a3 Mon Sep 17 00:00:00 2001
From: sullis <github@seansullivan.com>
Date: Thu, 22 May 2025 12:50:25 -0700
Subject: [PATCH 32/32] netty leak detector extension 0.2.0 (#2095)

https://github.com/nettyplus/netty-leak-detector-junit-extension
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index ee1c2308c..e55fe8a26 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
             <dependency>
                 <groupId>io.github.nettyplus</groupId>
                 <artifactId>netty-leak-detector-junit-extension</artifactId>
-                <version>0.0.8</version>
+                <version>0.2.0</version>
             </dependency>
         </dependencies>
     </dependencyManagement>