From ff560bf6ebed2611888d3bda0699a199829a4bcd Mon Sep 17 00:00:00 2001 From: Mattis Bratland Date: Sat, 9 May 2026 20:04:03 +0200 Subject: [PATCH] fix(deps): override netty to address 2026 CVEs --- build.gradle.kts | 2 ++ gradle/libs.versions.toml | 4 +++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index c7a3ecf..f6475cf 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -23,6 +23,7 @@ repositories { mavenCentral() } dependencies { implementation(kotlin("stdlib")) implementation(platform(libs.koin.bom)) + implementation(platform(libs.netty.bom)) implementation(libs.koin.core) implementation(libs.bundles.fabric8) implementation(libs.bundles.operator) @@ -34,6 +35,7 @@ dependencies { implementation(libs.micrometer.registry.prometheus) testImplementation(kotlin("test")) + testImplementation(platform(libs.netty.bom)) testImplementation(libs.mockk) testImplementation(libs.awaitility.kotlin) testImplementation(libs.operator.framework.junit5) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 0ff41ab..18f6913 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -11,6 +11,7 @@ jackson = "2.21.3" logunit = "2.0.0" http4k = "6.46.0.0" micrometer = "1.16.5" +netty = "4.1.133.Final" [libraries] fabric8-kubernetes-client = { module = "io.fabric8:kubernetes-client", version.ref = "fabric8" } @@ -28,6 +29,7 @@ http4k-server-jetty = { module = "org.http4k:http4k-server-jetty" } http4k-metrics-micrometer = { module = "org.http4k:http4k-ops-micrometer" } micrometer-registry-prometheus = { module = "io.micrometer:micrometer-registry-prometheus", version.ref = "micrometer" } +netty-bom = { module = "io.netty:netty-bom", version.ref = "netty" } logback-classic = { module = "ch.qos.logback:logback-classic", version.ref = "logback" } logstash-logback-encoder = { module = "net.logstash.logback:logstash-logback-encoder", version.ref = "logstashEncoder" } @@ -58,4 +60,4 @@ fabric8 = ["fabric8-kubernetes-client", "fabric8-generator-api"] fabric8test = ["fabric8-kubernetes-server-mock", "fabric8-kube-api-test"] logging = ["logback-classic", "logstash-logback-encoder"] hoplite = ["hoplite-core", "hoplite-yaml"] -http4k = ["http4k-server-jetty", "http4k-metrics-micrometer"] \ No newline at end of file +http4k = ["http4k-server-jetty", "http4k-metrics-micrometer"]