Skip to content

update gRPC version to fix CVE-2025-58057 in Netty.#481

Merged
smcvb merged 1 commit intoconnector-2025.2.xfrom
dependency-update/grpc
Mar 6, 2026
Merged

update gRPC version to fix CVE-2025-58057 in Netty.#481
smcvb merged 1 commit intoconnector-2025.2.xfrom
dependency-update/grpc

Conversation

@MGathier
Copy link
Contributor

@MGathier MGathier commented Mar 6, 2026

Although connector uses a shaded version of Netty libraries, vulnerability scans will report vulnerabilities in the shaded Netty version.

@MGathier MGathier requested review from a team, m1l4n54v1c, schananas, smcvb and trimoq and removed request for a team March 6, 2026 13:32
@MGathier MGathier self-assigned this Mar 6, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 6, 2026

Copy link
Contributor

@smcvb smcvb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 👍

@smcvb smcvb merged commit 4132ea3 into connector-2025.2.x Mar 6, 2026
5 checks passed
@smcvb smcvb deleted the dependency-update/grpc branch March 6, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants