Merge pull request #924 from MohamedSabthar/patch-2201.4.x

Update Netty Version

ballerina/Ballerina.toml

@@ -1,7 +1,7 @@
 [package]
 org = "ballerina"
 name = "udp"
-version = "1.6.0"
+version = "1.6.1"
 authors = ["Ballerina"]
 keywords = ["UDP", "datagram", "transport"]
 repository = "https://github.com/ballerina-platform/module-ballerina-udp"
@@ -12,39 +12,39 @@ distribution = "2201.4.0"
 [[platform.java11.dependency]]
 groupId = "io.ballerina.stdlib"
 artifactId = "udp-native"
-version = "1.6.0"
-path = "../native/build/libs/udp-native-1.6.0.jar"
+version = "1.6.1"
+path = "../native/build/libs/udp-native-1.6.1-SNAPSHOT.jar"
 
 [[platform.java11.dependency]]
-path = "../test-utils/build/libs/udp-test-utils-1.6.0.jar"
+path = "../test-utils/build/libs/udp-test-utils-1.6.1-SNAPSHOT.jar"
 scope = "testOnly"
 
 [[platform.java11.dependency]]
 groupId = "io.netty"
 artifactId = "netty-handler"
-version = "4.1.86.Final"
-path = "./lib/netty-handler-4.1.86.Final.jar"
+version = "4.1.100.Final"
+path = "./lib/netty-handler-4.1.100.Final.jar"
 
 [[platform.java11.dependency]]
 groupId = "io.netty"
 artifactId = "netty-buffer"
-version = "4.1.86.Final"
-path = "./lib/netty-buffer-4.1.86.Final.jar"
+version = "4.1.100.Final"
+path = "./lib/netty-buffer-4.1.100.Final.jar"
 
 [[platform.java11.dependency]]
 groupId = "io.netty"
 artifactId = "netty-transport"
-version = "4.1.86.Final"
-path = "./lib/netty-transport-4.1.86.Final.jar"
+version = "4.1.100.Final"
+path = "./lib/netty-transport-4.1.100.Final.jar"
 
 [[platform.java11.dependency]]
 groupId = "io.netty"
 artifactId = "netty-common"
-version = "4.1.86.Final"
-path = "./lib/netty-common-4.1.86.Final.jar"
+version = "4.1.100.Final"
+path = "./lib/netty-common-4.1.100.Final.jar"
 
 [[platform.java11.dependency]]
 groupId = "io.netty"
 artifactId = "netty-resolver"
-version = "4.1.86.Final"
-path = "./lib/netty-resolver-4.1.86.Final.jar"
+version = "4.1.100.Final"
+path = "./lib/netty-resolver-4.1.100.Final.jar"

ballerina/CompilerPlugin.toml

@@ -3,4 +3,4 @@ id = "udp-plugin"
 class = "io.ballerina.stdlib.udp.compiler.UdpCompilerPlugin"
 
 [[dependency]]
-path = "../compiler-plugin/build/libs/udp-compiler-plugin-1.6.0.jar"
+path = "../compiler-plugin/build/libs/udp-compiler-plugin-1.6.1-SNAPSHOT.jar"

ballerina/Dependencies.toml

@@ -9,7 +9,7 @@ dependencies-toml-version = "2"
 [[package]]
 org = "ballerina"
 name = "io"
-version = "1.4.0"
+version = "1.4.1"
 scope = "testOnly"
 dependencies = [
 	{org = "ballerina", name = "jballerina.java"},
@@ -54,7 +54,7 @@ modules = [
 [[package]]
 org = "ballerina"
 name = "observe"
-version = "1.0.6"
+version = "1.0.7"
 scope = "testOnly"
 dependencies = [
 	{org = "ballerina", name = "jballerina.java"}
@@ -75,7 +75,7 @@ modules = [
 [[package]]
 org = "ballerina"
 name = "udp"
-version = "1.6.0"
+version = "1.6.1"
 dependencies = [
 	{org = "ballerina", name = "io"},
 	{org = "ballerina", name = "jballerina.java"},

changelog.md

@@ -5,6 +5,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
+### Fixed
+- [Address netty vulnerability: CVE-2023-4586](https://github.com/ballerina-platform/ballerina-standard-library/issues/4908)
+
+## [1.6.0] - 2023-02-20
+
+## [1.5.0] - 2022-11-29
+
 ### Changed
 - [API docs updated](https://github.com/ballerina-platform/ballerina-standard-library/issues/3463)
 

gradle.properties

@@ -1,14 +1,14 @@
 org.gradle.caching=true
 group=io.ballerina.stdlib
-version=1.6.0
+version=1.6.1-SNAPSHOT
 ballerinaLangVersion=2201.4.0
 
 puppycrawlCheckstyleVersion=8.18
 githubJohnrengelmanShadowVersion=5.2.0
 checkstyleToolVersion=7.8.2
 githubSpotbugsVersion=4.5.1
 testngVersion=7.4.0
-nettyVersion=4.1.86.Final
+nettyVersion=4.1.100.Final
 underCouchDownloadVersion=4.0.4
 researchgateReleaseVersion=2.8.0
 slf4jVersion=1.7.30