From 2c338034e5ba452166041311b17f2f2e7f3aa32d Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Wed, 13 May 2026 09:33:30 -0400 Subject: [PATCH] chore: resolve open dependabot security alerts - io.netty:* 4.1.132.Final -> 4.1.133.Final (high/medium/low, alerts #25-#33) - Add netty-handler-proxy:4.1.133.Final force (low, alert #26) --- build.gradle | 22 ++++++++++++---------- 1 file changed, 12 insertions(+), 10 deletions(-) diff --git a/build.gradle b/build.gradle index 67da04ae..1e4af2a1 100644 --- a/build.gradle +++ b/build.gradle @@ -13,11 +13,12 @@ buildscript { // Force patched versions of vulnerable transitive dependencies in the build classpath configurations.classpath { resolutionStrategy { - force 'io.netty:netty-codec-http:4.1.132.Final' - force 'io.netty:netty-codec-http2:4.1.132.Final' - force 'io.netty:netty-codec:4.1.132.Final' - force 'io.netty:netty-handler:4.1.132.Final' - force 'io.netty:netty-common:4.1.132.Final' + force 'io.netty:netty-codec-http:4.1.133.Final' + force 'io.netty:netty-codec-http2:4.1.133.Final' + force 'io.netty:netty-codec:4.1.133.Final' + force 'io.netty:netty-handler:4.1.133.Final' + force 'io.netty:netty-handler-proxy:4.1.133.Final' + force 'io.netty:netty-common:4.1.133.Final' force 'org.bitbucket.b_c:jose4j:0.9.6' force 'org.jdom:jdom2:2.0.6.1' force 'com.google.protobuf:protobuf-java:3.25.5' @@ -34,11 +35,12 @@ buildscript { subprojects { configurations.configureEach { resolutionStrategy { - force 'io.netty:netty-codec-http:4.1.132.Final' - force 'io.netty:netty-codec-http2:4.1.132.Final' - force 'io.netty:netty-codec:4.1.132.Final' - force 'io.netty:netty-handler:4.1.132.Final' - force 'io.netty:netty-common:4.1.132.Final' + force 'io.netty:netty-codec-http:4.1.133.Final' + force 'io.netty:netty-codec-http2:4.1.133.Final' + force 'io.netty:netty-codec:4.1.133.Final' + force 'io.netty:netty-handler:4.1.133.Final' + force 'io.netty:netty-handler-proxy:4.1.133.Final' + force 'io.netty:netty-common:4.1.133.Final' force 'org.bitbucket.b_c:jose4j:0.9.6' force 'org.jdom:jdom2:2.0.6.1' force 'com.google.protobuf:protobuf-java:3.25.5'