Skip to content

Upgrade Netty to 4.1.86.Final - #3669

Merged
hangc0276 merged 4 commits into
apache:masterfrom
lhotari:lh-upgrade-netty-4.1.85.Final
Jan 11, 2023
Merged

Upgrade Netty to 4.1.86.Final#3669
hangc0276 merged 4 commits into
apache:masterfrom
lhotari:lh-upgrade-netty-4.1.85.Final

Conversation

@lhotari

@lhotari lhotari commented Nov 24, 2022

Copy link
Copy Markdown
Member

Motivation

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599

Changes

Upgrade Netty version to 4.1.86.Final

@lhotari
lhotari force-pushed the lh-upgrade-netty-4.1.85.Final branch from 81d80b2 to c9ceb44 Compare November 24, 2022 10:18
@hangc0276

Copy link
Copy Markdown
Contributor

@lhotari Thanks for your contribution, please take a look at the license check, thanks.

@hangc0276 hangc0276 added the dependencies Pull requests that update a dependency file label Nov 25, 2022
@hangc0276 hangc0276 added this to the 4.16.0 milestone Nov 25, 2022
@lhotari

lhotari commented Nov 25, 2022

Copy link
Copy Markdown
Member Author

Netty 4.1.85.Final upgrade causes a regression in Pulsar. I have commented on the Netty change about this: netty/netty#12888 (comment) . It seems that there is a major change in behavior in Netty's HashedWheelTimer.

@hangc0276 hangc0276 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Waiting for Netty new release

@lhotari
lhotari force-pushed the lh-upgrade-netty-4.1.85.Final branch from c9ceb44 to dd89aea Compare December 12, 2022 17:56
@lhotari lhotari changed the title Upgrade Netty to 4.1.85.Final Upgrade Netty to 4.1.86.Final Dec 12, 2022
@lhotari

lhotari commented Dec 12, 2022

Copy link
Copy Markdown
Member Author

Upgraded to 4.1.86.Final which reverts the HashedWheelTimer change and includes some CVE fixes. See release notes for Netty changes. (referenced in PR description)

@lhotari
lhotari requested a review from hangc0276 December 15, 2022 12:07
Commands used to refresh licenses:
cd bookkeeper-dist/src/main/resources/deps
rm -rf netty-*
mkdir netty-4.1.86.Final
cd netty-4.1.86.Final
curl -L -o - https://github.com/netty/netty/archive/refs/tags/netty-4.1.86.Final.tar.gz | tar -zxv --strip-components=2 --wildcards -f - '*/license/*'
rm LICENSE.zstd-jni.txt LICENSE.brotli4j.txt
cd ..
git add netty-4.1.86.Final
@lhotari

lhotari commented Jan 10, 2023

Copy link
Copy Markdown
Member Author

@hangc0276 Please re-review this PR and possibly also merge it.

@hangc0276
hangc0276 merged commit c64dbcd into apache:master Jan 11, 2023
yaalsn pushed a commit to yaalsn/bookkeeper that referenced this pull request Jan 30, 2023
### Motivation

- see release notes for 4.1.85.Final: https://netty.io/news/2022/11/09/4-1-85-Final.html
- see release notes for 4.1.86.Final: https://netty.io/news/2022/12/12/4-1-86-Final.html

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599


### Changes

Upgrade Netty version to 4.1.86.Final
Ghatage pushed a commit to sijie/bookkeeper that referenced this pull request Jul 12, 2024
### Motivation

- see release notes for 4.1.85.Final: https://netty.io/news/2022/11/09/4-1-85-Final.html
- see release notes for 4.1.86.Final: https://netty.io/news/2022/12/12/4-1-86-Final.html

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599


### Changes

Upgrade Netty version to 4.1.86.Final
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants