Skip to content

fix(QTDI-3014): bump netty to 4.1.135.Final#1241

Merged
undx merged 1 commit into
masterfrom
ouf/QTDI-3014-cve-netty
Jun 12, 2026
Merged

fix(QTDI-3014): bump netty to 4.1.135.Final#1241
undx merged 1 commit into
masterfrom
ouf/QTDI-3014-cve-netty

Conversation

@undx

@undx undx commented Jun 10, 2026

Copy link
Copy Markdown
Member

Requirements

  • Any code change adding any logic MUST be tested through a unit test executed with the default build
  • Any API addition MUST be done with a documentation update if relevant

Why this PR is needed?

QTDI-3014

What does this PR adds (design/code thoughts)?

AI generated code

https://internal.qlik.dev/general/ways-of-working/code-reviews/#guidelines-for-ai-generated-code

  • [] this PR has been written with the help of GitHub Copilot or another generative AI tool

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Netty version used by the component-runtime-http-junit testing module and adjusts Spark test dependency exclusions to avoid bringing io.netty artifacts transitively from spark-core in a couple of test-focused modules.

Changes:

  • Bump component-runtime-http-junit’s netty.version property to 4.1.135.Final.
  • Exclude transitive io.netty:* artifacts from org.apache.spark:spark-core_* in two modules’ test dependencies.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
singer-parent/component-kitap/pom.xml Excludes transitive io.netty artifacts from the spark-core test dependency.
component-runtime-testing/component-runtime-testing-spark/pom.xml Excludes transitive io.netty artifacts from the spark-core test dependency.
component-runtime-testing/component-runtime-http-junit/pom.xml Updates netty.version to 4.1.135.Final for the HTTP JUnit testing module (and its shaded Netty usage).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sonar-rnd

sonar-rnd Bot commented Jun 10, 2026

Copy link
Copy Markdown

@undx undx merged commit 75d9593 into master Jun 12, 2026
11 checks passed
@undx undx deleted the ouf/QTDI-3014-cve-netty branch June 12, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants