chore(deps): bump the gradle-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #20 · AndroidIRCx/NULVEX

dependabot · 2026-03-25T01:10:19Z

Bumps the gradle-dependencies group with 12 updates in the / directory:

Package	From	To
com.google.protobuf:protobuf-java	`4.34.0`	`4.34.1`
io.netty:netty-handler	`4.2.10.Final`	`4.2.11.Final`
com.google.firebase:firebase-bom	`34.10.0`	`34.11.0`
androidx.core:core-splashscreen	`1.0.1`	`1.2.0`
gradle-wrapper	`9.4.0`	`9.4.1`
androidx.core:core-ktx	`1.17.0`	`1.18.0`
androidx.activity:activity-compose	`1.12.4`	`1.13.0`
androidx.compose:compose-bom	`2026.02.01`	`2026.03.00`
net.zetetic:sqlcipher-android	`4.13.0`	`4.14.0`
com.google.crypto.tink:tink-android	`1.20.0`	`1.21.0`
com.google.android.gms:play-services-ads	`25.0.0`	`25.1.0`
org.jetbrains.kotlin.plugin.compose	`2.3.10`	`2.3.20`

Updates com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1

Commits

See full diff in compare view

Updates com.google.protobuf:protobuf-javalite from 4.34.0 to 4.34.1

Updates com.google.protobuf:protobuf-kotlin from 4.34.0 to 4.34.1

Updates com.google.protobuf:protobuf-kotlin-lite from 4.34.0 to 4.34.1

Updates io.netty:netty-handler from 4.2.10.Final to 4.2.11.Final

Release notes

Sourced from io.netty:netty-handler's releases.

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

Fix RunInFastThreadLocalThreadExtension by @chrisvest in netty/netty#16314

AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) if byteBuf initialization failed by @laosijikaichele in netty/netty#16327

Recycler should not use thread locals unless they get cleaned up by @chrisvest in netty/netty#16315

OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by @normanmaurer in netty/netty#16337

IoUring: Only complete deregistration promise once we received all co… by @normanmaurer in netty/netty#16330

Mark LoggingHandlerTest with @Isolated to fix flaky build by @normanmaurer in netty/netty#16338

Fix flaky HTTP/2 test by @chrisvest in netty/netty#16342

... (truncated)

Commits

c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
8f744ec Replace ClosedChannelException with StacklessClosedChannelException (#16506)
4d7b70d Fix docker image for cross-compiling (#16522)
cfd0d9a Epoll / IoUring: setTcpMg5Sig(...) might overflow (#16511)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.2.10.Final to 4.2.11.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

Fix RunInFastThreadLocalThreadExtension by @chrisvest in netty/netty#16314

AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) if byteBuf initialization failed by @laosijikaichele in netty/netty#16327

Recycler should not use thread locals unless they get cleaned up by @chrisvest in netty/netty#16315

OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by @normanmaurer in netty/netty#16337

IoUring: Only complete deregistration promise once we received all co… by @normanmaurer in netty/netty#16330

Mark LoggingHandlerTest with @Isolated to fix flaky build by @normanmaurer in netty/netty#16338

Fix flaky HTTP/2 test by @chrisvest in netty/netty#16342

... (truncated)

Commits

c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
8f744ec Replace ClosedChannelException with StacklessClosedChannelException (#16506)
4d7b70d Fix docker image for cross-compiling (#16522)
cfd0d9a Epoll / IoUring: setTcpMg5Sig(...) might overflow (#16511)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.2.10.Final to 4.2.11.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

Fix RunInFastThreadLocalThreadExtension by @chrisvest in netty/netty#16314

AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) if byteBuf initialization failed by @laosijikaichele in netty/netty#16327

Recycler should not use thread locals unless they get cleaned up by @chrisvest in netty/netty#16315

OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by @normanmaurer in netty/netty#16337

IoUring: Only complete deregistration promise once we received all co… by @normanmaurer in netty/netty#16330

Mark LoggingHandlerTest with @Isolated to fix flaky build by @normanmaurer in netty/netty#16338

Fix flaky HTTP/2 test by @chrisvest in netty/netty#16342

... (truncated)

Commits

c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
8f744ec Replace ClosedChannelException with StacklessClosedChannelException (#16506)
4d7b70d Fix docker image for cross-compiling (#16522)
cfd0d9a Epoll / IoUring: setTcpMg5Sig(...) might overflow (#16511)
Additional commits viewable in compare view

Updates io.netty:netty-codec from 4.2.10.Final to 4.2.11.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

Fix RunInFastThreadLocalThreadExtension by @chrisvest in netty/netty#16314

AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) if byteBuf initialization failed by @laosijikaichele in netty/netty#16327

Recycler should not use thread locals unless they get cleaned up by @chrisvest in netty/netty#16315

OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by @normanmaurer in netty/netty#16337

IoUring: Only complete deregistration promise once we received all co… by @normanmaurer in netty/netty#16330

Mark LoggingHandlerTest with @Isolated to fix flaky build by @normanmaurer in netty/netty#16338

Fix flaky HTTP/2 test by @chrisvest in netty/netty#16342

... (truncated)

Commits

c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
893ea2e Allocate less in QueryStringDecoder.addParam for typical use case (#16527)
8f744ec Replace ClosedChannelException with StacklessClosedChannelException (#16506)
4d7b70d Fix docker image for cross-compiling (#16522)
cfd0d9a Epoll / IoUring: setTcpMg5Sig(...) might overflow (#16511)
Additional commits viewable in compare view

Updates io.netty:netty-common from 4.2.10.Final to 4.2.11.Final

Release notes

Sourced from io.netty:netty-common's releases.

netty-4.2.11.Final

Security

CVE-2026-33871, HTTP/2 CONTINUATION Frame Flood Denial of Service

CVE-2026-33870, HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

What's Changed

Update to latest JDK 26 EA release by @normanmaurer in netty/netty#16230

HTTP3: Allow to support non-standard HTTP3 settings by @normanmaurer in netty/netty#16171

Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry loop by @adwsingh in netty/netty#16245

Allocate one large segment and slice for each MsgHdrMemory by @dreamlike-ocean in netty/netty#16234

Make RefCntOpenSslContext.deallocate more robust by @chrisvest in netty/netty#16253

Epoll: Fix excessive CPU usage when Channel is only registered but no… by @normanmaurer in netty/netty#16250

Update to gcc for arm 10.3-2021.07 by @m1ngyuan in netty/netty#16255

Add acmeIdentifier extension support to pkitesting by @chrisvest in netty/netty#16256

Update JDK versions to latest patch releases by @m1ngyuan in netty/netty#16254

Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by @doom369 in netty/netty#16241

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16269

Revert "Automatic backporting workflow from 4.1 to 4.2" by @chrisvest in netty/netty#16270

HTTP2: Correctly account for padding when decompress by @normanmaurer in netty/netty#16264

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16271

Automatic backporting workflow from 4.1 to 4.2 by @chrisvest in netty/netty#16273

Backport PRs must be created with personal access tokens by @chrisvest in netty/netty#16276

Expose QuicSslContextBuilder::sni by @ZeroErrors in netty/netty#16178

Add more porting workflows by @chrisvest in netty/netty#16275

Add more porting workflows by @chrisvest in netty/netty#16283

Remove the unpooled allocator from test permutations by @chrisvest in netty/netty#16282

Some polishing of the porting workflows by @chrisvest in netty/netty#16288

Allow to set destination connection id when creating a client side QuicheChannel by @normanmaurer in netty/netty#16286

Update to latest JDK26 EA build by @normanmaurer in netty/netty#16295

Add javadoc to clarify responsibility of the user when generating the remote connection id by @normanmaurer in netty/netty#16293

Make the build run faster by @chrisvest in netty/netty#16290

Fix IDE warnings in SslHandler by @doom369 in netty/netty#16237

Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by @doom369 in netty/netty#16242

Support boringssl SSLCredential API by @jmcrawford45 in netty/netty#15919

Fix high-order bit aliasing in HttpUtil.validateToken by @furkanvarol in netty/netty#16279

Improve multi-byte access performance when UNALIGNED availability is unknown by @Songdoeon in netty/netty#16207

Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by @doom369 in netty/netty#16278

Support more branch freedom for auto-porting by @chrisvest in netty/netty#16300

fix: the precedence of + is higher than >> by @cuiweixie in netty/netty#16312

AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by @laosijikaichele in netty/netty#16309

Fix flaky PooledByteBufAllocatorTest by @chrisvest in netty/netty#16313

Fix pooled arena accounting tests by @chrisvest in netty/netty#16321

Fix RunInFastThreadLocalThreadExtension by @chrisvest in netty/netty#16314

AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) if byteBuf initialization failed by @laosijikaichele in netty/netty#16327

Recycler should not use thread locals unless they get cleaned up by @chrisvest in netty/netty#16315

OpenSSL: Don't leak OpenSslKeyManagerProvider on exception by @normanmaurer in netty/netty#16337

IoUring: Only complete deregistration promise once we received all co… by @normanmaurer in netty/netty#16330

Mark LoggingHandlerTest with @Isolated to fix flaky build by @normanmaurer in netty/netty#16338

Fix flaky HTTP/2 test by @chrisvest in netty/netty#16342

... (truncated)

Commits

c94a818 [maven-release-plugin] prepare release netty-4.2.11.Final
3b76df1 Merge commit from fork
aae944a Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers (#16...
6001499 Eliminate redundant bounds checks in CompositeByteBuf accessors (#16525)
a7fbb6f JdkZlibDecoder: accumulate decompressed output before firing channelRead (#16...
7937553 Enforce io.netty.maxDirectMemory accounting on all Java versions (#16489)
89... Description has been truncated

…th 19 updates Bumps the gradle-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.34.0` | `4.34.1` | | [io.netty:netty-handler](https://github.com/netty/netty) | `4.2.10.Final` | `4.2.11.Final` | | com.google.firebase:firebase-bom | `34.10.0` | `34.11.0` | | androidx.core:core-splashscreen | `1.0.1` | `1.2.0` | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.4.0` | `9.4.1` | | androidx.core:core-ktx | `1.17.0` | `1.18.0` | | androidx.activity:activity-compose | `1.12.4` | `1.13.0` | | androidx.compose:compose-bom | `2026.02.01` | `2026.03.00` | | [net.zetetic:sqlcipher-android](https://github.com/sqlcipher/sqlcipher-android) | `4.13.0` | `4.14.0` | | [com.google.crypto.tink:tink-android](https://github.com/tink-crypto/tink-java) | `1.20.0` | `1.21.0` | | com.google.android.gms:play-services-ads | `25.0.0` | `25.1.0` | | [org.jetbrains.kotlin.plugin.compose](https://github.com/JetBrains/kotlin) | `2.3.10` | `2.3.20` | Updates `com.google.protobuf:protobuf-java` from 4.34.0 to 4.34.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `com.google.protobuf:protobuf-javalite` from 4.34.0 to 4.34.1 Updates `com.google.protobuf:protobuf-kotlin` from 4.34.0 to 4.34.1 Updates `com.google.protobuf:protobuf-kotlin-lite` from 4.34.0 to 4.34.1 Updates `io.netty:netty-handler` from 4.2.10.Final to 4.2.11.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.11.Final) Updates `io.netty:netty-codec-http2` from 4.2.10.Final to 4.2.11.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.11.Final) Updates `io.netty:netty-codec-http` from 4.2.10.Final to 4.2.11.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.11.Final) Updates `io.netty:netty-codec` from 4.2.10.Final to 4.2.11.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.11.Final) Updates `io.netty:netty-common` from 4.2.10.Final to 4.2.11.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.11.Final) Updates `com.google.firebase:firebase-bom` from 34.10.0 to 34.11.0 Updates `androidx.core:core-splashscreen` from 1.0.1 to 1.2.0 Updates `gradle-wrapper` from 9.4.0 to 9.4.1 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.4.0...v9.4.1) Updates `androidx.core:core-ktx` from 1.17.0 to 1.18.0 Updates `androidx.activity:activity-compose` from 1.12.4 to 1.13.0 Updates `androidx.compose:compose-bom` from 2026.02.01 to 2026.03.00 Updates `net.zetetic:sqlcipher-android` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/sqlcipher/sqlcipher-android/releases) - [Commits](sqlcipher/sqlcipher-android@v4.13.0...v4.14.0) Updates `com.google.crypto.tink:tink-android` from 1.20.0 to 1.21.0 - [Release notes](https://github.com/tink-crypto/tink-java/releases) - [Commits](tink-crypto/tink-java@v1.20.0...v1.21.0) Updates `com.google.android.gms:play-services-ads` from 25.0.0 to 25.1.0 Updates `org.jetbrains.kotlin.plugin.compose` from 2.3.10 to 2.3.20 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.10...v2.3.20) --- updated-dependencies: - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.google.protobuf:protobuf-javalite dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.google.protobuf:protobuf-kotlin dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.google.protobuf:protobuf-kotlin-lite dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: io.netty:netty-handler dependency-version: 4.2.11.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.11.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: io.netty:netty-codec-http dependency-version: 4.2.11.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: io.netty:netty-codec dependency-version: 4.2.11.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: io.netty:netty-common dependency-version: 4.2.11.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.google.firebase:firebase-bom dependency-version: 34.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: androidx.core:core-splashscreen dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: gradle-wrapper dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: androidx.core:core-ktx dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: androidx.activity:activity-compose dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: androidx.compose:compose-bom dependency-version: 2026.03.00 dependency-type: direct:production dependency-group: gradle-dependencies - dependency-name: net.zetetic:sqlcipher-android dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.google.crypto.tink:tink-android dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.google.android.gms:play-services-ads dependency-version: 25.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.jetbrains.kotlin.plugin.compose dependency-version: 2.3.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-03-26T01:08:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 25, 2026

dependabot bot closed this Mar 26, 2026

dependabot bot deleted the dependabot/gradle/gradle-dependencies-024da1acf1 branch March 26, 2026 01:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the gradle-dependencies group across 1 directory with 19 updates#20

chore(deps): bump the gradle-dependencies group across 1 directory with 19 updates#20
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/gradle-dependencies-024da1acf1

dependabot bot commented on behalf of github Mar 25, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Mar 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.11.Final

Security

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.11.Final

Security

What's Changed

netty-4.2.11.Final

Security

What's Changed

Uh oh!

dependabot bot commented on behalf of github Mar 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Mar 25, 2026 •

edited

Loading