Skip to content

Update Netty to 4.2.13.Final - #21490

Merged
reta merged 2 commits into
opensearch-project:mainfrom
reta:netty.4.2.13.Final
May 5, 2026
Merged

Update Netty to 4.2.13.Final#21490
reta merged 2 commits into
opensearch-project:mainfrom
reta:netty.4.2.13.Final

Conversation

@reta

@reta reta commented May 5, 2026

Copy link
Copy Markdown
Contributor

Description

Update Netty to 4.2.13.Final

Related Issues

N/A

Check List

  • Functionality includes testing.
  • API changes companion pull request created, if applicable.
  • Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Andriy Redko <drreta@gmail.com>
@reta
reta requested review from a team and peternied as code owners May 5, 2026 14:20
@reta reta added the dependencies Pull requests that update a dependency file label May 5, 2026
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit ff6882e.

PathLineSeverityDescription
gradle/libs.versions.toml43highNetty dependency version bumped from 4.2.12.Final to 4.2.13.Final. Per mandatory supply chain policy, all dependency version changes must be flagged for maintainer verification. The change propagates across ~80 SHA1 checksum files spanning libs, modules, and plugins. Maintainers should verify the new SHA1 values match official Netty release artifacts from the trusted registry.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@reta reta added the skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. label May 5, 2026
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

PR Reviewer Guide 🔍

(Review updated until commit 7526c4a)

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
✅ No TODO sections
🔀 No multiple PR themes
⚡ Recommended focus areas for review

SHA1 Verification

The SHA1 checksums for the new Netty 4.2.13.Final JARs should be verified against the official Netty release artifacts to ensure integrity. SHA1 is also considered cryptographically weak; if the build system supports stronger hashes (SHA256/SHA512), consider migrating.

netty             = "4.2.13.Final"

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

❌ Gradle check result for ff6882e: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

Persistent review updated to latest commit 7526c4a

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

✅ Gradle check result for 7526c4a: SUCCESS

@codecov

codecov Bot commented May 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.48%. Comparing base (d7573c0) to head (7526c4a).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff              @@
##               main   #21490      +/-   ##
============================================
+ Coverage     73.44%   73.48%   +0.03%     
- Complexity    74429    74442      +13     
============================================
  Files          5970     5970              
  Lines        338276   338262      -14     
  Branches      48760    48758       -2     
============================================
+ Hits         248453   248569     +116     
+ Misses        69979    69803     -176     
- Partials      19844    19890      +46     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@reta
reta merged commit dd0b7a5 into opensearch-project:main May 5, 2026
24 checks passed
reta added a commit that referenced this pull request May 5, 2026
* Update Netty to 4.2.13.Final (#21490)

Signed-off-by: Andriy Redko <drreta@gmail.com>
(cherry picked from commit dd0b7a5)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Add CHANGELOG.md entry

Signed-off-by: Andriy Redko <drreta@gmail.com>

---------

Signed-off-by: Andriy Redko <drreta@gmail.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Andriy Redko <drreta@gmail.com>
bowenlan-amzn added a commit to bowenlan-amzn/OpenSearch that referenced this pull request May 5, 2026
Sandbox parquet-data-format missed the netty 4.2.12 → 4.2.13 bump in
PR opensearch-project#21490. Regenerated via `./gradlew :sandbox:plugins:parquet-data-format:updateSHAs`.

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
imRishN pushed a commit to imRishN/OpenSearch that referenced this pull request May 8, 2026
Signed-off-by: Andriy Redko <drreta@gmail.com>
vishwasgarg18 pushed a commit to vishwasgarg18/OpenSearch that referenced this pull request May 8, 2026
Signed-off-by: Andriy Redko <drreta@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport 3.6 dependencies Pull requests that update a dependency file skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants