build(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final by dependabot[bot] · Pull Request #3470 · OpenFeign/feign

dependabot · 2026-07-07T05:13:06Z

Bumps netty.version from 4.2.15.Final to 4.2.16.Final.
Updates io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-handler from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.16.Final

What's Changed

Document Java 9 requirement for io_uring by @jchambers in netty/netty#16904

Add BlockHound exception for DnsQueryIdSpace by @violetagg in netty/netty#16896

Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @skyguard1 in netty/netty#16901

Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @franz1981 in netty/netty#16766

Use Splittable/ThreadLocalRandom to generate bulk data in tests by @chrisvest in netty/netty#16808

Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @netty-project-bot in netty/netty#16909

Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @netty-project-bot in netty/netty#16910

Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @netty-project-bot in netty/netty#16919

IoUring: fix io_uring datagram writes with non-zero readerIndex by @dreamlike-ocean in netty/netty#16905

Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @franz1981 in netty/netty#16848

IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @wineway in netty/netty#16739

Avoid logging exceptions that tests ignore by @chrisvest in netty/netty#16891

Reject control characters at the boundary of HTTP method names by @daguimu in netty/netty#16723

IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @dreamlike-ocean in netty/netty#16929

Try to fix/stabilize a number of flaky tests by @chrisvest in netty/netty#16934

Fix propagation of startTls for client SslContext handlers by @skyguard1 in netty/netty#16931

Update to latest tcnative release by @normanmaurer in netty/netty#16936

Move test to shared testsuite by @normanmaurer in netty/netty#16928

[Refactor] Useful helper method getOrDefault & cleaner abstraction by @sanjomo in netty/netty#16927

Make permessage-deflate server window size and memLevel configurable by @fru1tworld in netty/netty#16809

Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @HwangRock in netty/netty#16950

Fix HTTP 2 PUSH_PROMISE stream association validation by @skyguard1 in netty/netty#16952

Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @daguimu in netty/netty#16951

Http3FrameCodec handle fragmented payloads when skipping unknown frames by @skyguard1 in netty/netty#16960

Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @hyperxpro in netty/netty#16932

Strictly validate MQTT UTF-8 Encoded String by @skyguard1 in netty/netty#16939

Stop DateFormatter trailing token from running past the parse end by @daguimu in netty/netty#16958

IpFilter: Deprecate constructor which use accept by default by @normanmaurer in netty/netty#16961

Add RFC 10008 QUERY Method support by @desiderantes in netty/netty#16966

Correctly release and fail queued traffic-shaping writes on close by @skyguard1 in netty/netty#16959

Reject control characters at the boundary of the HTTP version token by @HwangRock in netty/netty#16971

FlowControlHandler: respect auto-read when toggled while dequeueing by @schiemon in netty/netty#16949

Fix leak in ReferenceCountedOpenSslEngine.addCredential by @jmcrawford45 in netty/netty#16979

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @husseinvr97 in netty/netty#16982

Fix typo in AbstractSniHandler Javadoc by @coderbruis in netty/netty#16988

Fix client/server inconsistency in SslCredential support matrix by @jmcrawford45 in netty/netty#16990

Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @gavinbunney in netty/netty#16947

Use Ticker in Http2MaxRstFrameListener for testability by @skyguard1 in netty/netty#16993

Reset UTF-8 decode state on CR in StompSubframeDecoder by @vasiliy-mikhailov in netty/netty#16991

FastLz: Guard decompression against truncated input by @yawkat in netty/netty#17000

Reject non-token characters in HTTP/2 header names by @daguimu in netty/netty#16762

Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @netty-project-bot in netty/netty#17029

Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @sanjomo in netty/netty#17027

Implement Adaptive Cumulator by @shivaspeaks in netty/netty#16731

Allow WebSocket extension negotiation to be disabled per response by @mkurz in netty/netty#17030

Support QPACK sensitivity detector for Never Indexed header fields by @skyguard1 in netty/netty#17026

Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @skyguard1 in netty/netty#17037

Pin github actions to reduce risk by @normanmaurer in netty/netty#17043

... (truncated)

Commits

3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
63bbb2c Update rust toolchain - add required parameters
ac06c1b Update rust toolchain
5b68c61 Merge branches from forks (#17063)
de5d276 Update lz4-java to 1.11.1 (#17061)
da22048 Pin github actions to reduce risk (#17043)
0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
bc4b983 Implement Adaptive Cumulator (#16731)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `netty.version` from 4.2.15.Final to 4.2.16.Final. Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-handler` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) Updates `io.netty:netty-codec-http` from 4.2.15.Final to 4.2.16.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final) --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-handler dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.16.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 7, 2026

github-actions Bot approved these changes Jul 7, 2026

View reviewed changes

github-actions Bot enabled auto-merge July 7, 2026 05:13

github-actions Bot merged commit 7510344 into master Jul 7, 2026
4 checks passed

github-actions Bot deleted the dependabot/maven/netty.version-4.2.16.Final branch July 7, 2026 05:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final#3470

build(deps): Bump netty.version from 4.2.15.Final to 4.2.16.Final#3470
github-actions[bot] merged 1 commit into
masterfrom
dependabot/maven/netty.version-4.2.16.Final

dependabot Bot commented on behalf of github Jul 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

netty-4.2.16.Final

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants