All pull requests

Pull requests

• Port: Add opt-in Origin validation to WebSocketServerProtocolHandler (hardening) (#17944)

  #18183·chrisvest opened Oct 30, 2026Member·

  ·

  · 5.0.0.Final

• Port: SslHandler: Size the unwrap output buffer for the plaintext, not the record (#18028)

  #18182·chrisvest opened Oct 30, 2026Member·

  ·

  · 4.1.140.Final
  1

• Auto-port 4.1: Send bad_certificate alert when the TrustManager rejects the certificate

  #18181·netty-project-bot opened Oct 30, 2026Contributor·

  ·

  · 4.1.140.Final
  1

• Initialize the hexadecimal tables of StringUtil lazily and cheaply

  #18174·gsmet opened Oct 30, 2026·

  ·

• io_uring: Don't complete an already completed connect promise in connectComplete

  #18173·normanmaurer opened Oct 30, 2026Member·

  ·
  2

• Avoid String.format in MacAddressUtil.formatAddress

  #18172·gsmet opened Oct 30, 2026·

  ·
  2

• Don't emit an XML declaration or comment as its own frame in XmlFrameDecoder

  #18171·CCCLL opened Oct 30, 2026Contributor·

  ·
  1

• Don't escape or fold Set-Cookie values in CombinedHttpHeaders

  #18170·CCCLL opened Oct 30, 2026Contributor·

  ·
  1

• Check the range in ByteBuf.toString(index, length, charset)

  #18156·Marti2203 opened Oct 30, 2026Contributor·

  ·
  1

• Complete write promises of Lz4FrameEncoder and Bzip2Encoder only once the data was written (#9281)

  #18153·normanmaurer opened Oct 29, 2026Member·

  ·
  2

• Allow MqttDecoder's maxBytesInMessage to be changed

  #18125·jbertram opened Oct 27, 2026Contributor·

  ·
  1

• Bound the SNI host name by the server_name extension

  #18121·Marti2203 opened Oct 27, 2026Contributor·

  ·
  4

• Allow empty names in HTTP form fields

  #18118·umtong opened Oct 26, 2026·

  ·
  1

• Fix native loading workflow branch filters

  #18101·2748109647 opened Oct 24, 2026·

  ·
  1

  1

• Do not close keep-alive connections for a 304 without Content-Length

  #18093·HwangRock opened Oct 24, 2026Contributor·

  ·
  1

• Don't encode Snappy copies with an offset that does not fit into 16 bits

  needs-cherry-pick-4.1needs-cherry-pick-5.0
  #18055·normanmaurer opened Oct 23, 2026Member·

  ·

  · 4.2.20.Final
  3

• Don't truncate binary memcache key and extras lengths

  needs-cherry-pick-4.1needs-cherry-pick-5.0
  #18041·Raghuvardhan-Reddy78 opened Oct 23, 2026Contributor·

  ·

  · 4.2.20.Final
  10

• Close channels that are still registered when an IoEventLoop exits on shutdown

  #18035·AbhishekShukla1289 opened Oct 22, 2026Contributor·

  ·
  1

  7

• Validate multipart field names in HttpPostRequestEncoder

  #18024·Raghuvardhan-Reddy78 opened Oct 22, 2026Contributor·

  ·
  1

• Add a generic control message (cmsg) API for the native UDP transports

  #18023·normanmaurer opened Oct 22, 2026Member·

  ·
  2

• Create a child channel for pushed streams in Http2MultiplexHandler

  #18020·Marti2203 opened Oct 22, 2026Contributor·

  ·
  9

• Return null or the default from getTimeMillis() for invalid dates

  #17965·CCCLL opened Oct 21, 2026Contributor·

  ·
  2

• MqttEncoder: Reject fields longer than 65535 bytes

  #17960·Raghuvardhan-Reddy78 opened Oct 21, 2026Contributor·

  ·

  · 4.2.20.Final
  1

• Search adaptive buffers and their slices without a buffer call per word

  #17951·franz1981 opened Oct 20, 2026Contributor·

  ·
  7

• Discard input after a failed Socks5PrivateAuthRequestDecoder decode

  #17945·Raghuvardhan-Reddy78 opened Oct 20, 2026Contributor·

  ·
  1