From aa942bcc797b8eebbb03c6f8a8b485b84be37549 Mon Sep 17 00:00:00 2001
From: Lari Hotari <lhotari@apache.org>
Date: Mon, 11 May 2026 10:42:09 +0300
Subject: [PATCH] Upgrade vert.x to 4.5.25 to address CVE-2026-6860

---
 bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt | 10 +++++-----
 .../src/main/resources/LICENSE-server.bin.txt          | 10 +++++-----
 pom.xml                                                |  2 +-
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index 89bb911b7b5..73dfac079fd 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -252,11 +252,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.5.24.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.5.24.jar [14]
-- lib/io.vertx-vertx-core-4.5.24.jar [15]
-- lib/io.vertx-vertx-web-4.5.24.jar [16]
-- lib/io.vertx-vertx-web-common-4.5.24.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.25.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.25.jar [14]
+- lib/io.vertx-vertx-core-4.5.25.jar [15]
+- lib/io.vertx-vertx-web-4.5.25.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.25.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index da3d3aa7a30..bdfa8b302a2 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -252,11 +252,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.5.24.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.5.24.jar [14]
-- lib/io.vertx-vertx-core-4.5.24.jar [15]
-- lib/io.vertx-vertx-web-4.5.24.jar [16]
-- lib/io.vertx-vertx-web-common-4.5.24.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.25.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.25.jar [14]
+- lib/io.vertx-vertx-core-4.5.25.jar [15]
+- lib/io.vertx-vertx-web-4.5.25.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.25.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]
diff --git a/pom.xml b/pom.xml
index 72e29bb5095..206100e068c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -197,7 +197,7 @@
     <spotless.version>2.43.0</spotless.version>
     <javax-annotations-api.version>1.3.2</javax-annotations-api.version>
     <testcontainers.version>1.19.4</testcontainers.version>
-    <vertx.version>4.5.24</vertx.version>
+    <vertx.version>4.5.25</vertx.version>
     <zookeeper.version>3.9.5</zookeeper.version>
     <snappy.version>1.1.10.5</snappy.version>
     <jctools.version>4.0.6</jctools.version>