Skip to content

Update dependencies to latest versions #718

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 5, 2024
Merged

Update dependencies to latest versions #718

merged 2 commits into from
Apr 5, 2024

Conversation

DerGuteMoritz
Copy link
Collaborator

Most importantly, update Netty to 4.1.108.Final which includes the fix for netty/netty#13849 as well as various other fixes, particularly HTTP/2 related ones.

Most importantly, update Netty to 4.1.108.Final which includes the fix for
netty/netty#13849 as well as various other fixes, particularly HTTP/2
related ones.
This was probably accidentally pulled in from a transitive dependency.
@DerGuteMoritz DerGuteMoritz merged commit 659f245 into master Apr 5, 2024
1 check passed
@DerGuteMoritz DerGuteMoritz deleted the bump-deps branch April 5, 2024 14:13
@bitti
Copy link
Contributor

bitti commented May 22, 2024

Thanks for updating this, since we're currently getting flagged for CVE-2024-29025 in our builds. Can a new release be cut out so we don't have to update this transitive dependency ourselves in every project where we're using Aleph?

We're also eager to try out the effects #723, although it's unrelated to the CVE.

@David-Ongaro David-Ongaro mentioned this pull request May 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants