Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Netty to 4.1.86.Final #3669

Merged
merged 4 commits into from
Jan 11, 2023

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Nov 24, 2022

Motivation

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599

Changes

Upgrade Netty version to 4.1.86.Final

@lhotari lhotari force-pushed the lh-upgrade-netty-4.1.85.Final branch from 81d80b2 to c9ceb44 Compare November 24, 2022 10:18
@hangc0276
Copy link
Contributor

@lhotari Thanks for your contribution, please take a look at the license check, thanks.

@hangc0276 hangc0276 added the dependencies Pull requests that update a dependency file label Nov 25, 2022
@hangc0276 hangc0276 added this to the 4.16.0 milestone Nov 25, 2022
@lhotari
Copy link
Member Author

lhotari commented Nov 25, 2022

Netty 4.1.85.Final upgrade causes a regression in Pulsar. I have commented on the Netty change about this: netty/netty#12888 (comment) . It seems that there is a major change in behavior in Netty's HashedWheelTimer.

Copy link
Contributor

@hangc0276 hangc0276 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Waiting for Netty new release

@lhotari lhotari force-pushed the lh-upgrade-netty-4.1.85.Final branch from c9ceb44 to dd89aea Compare December 12, 2022 17:56
@lhotari lhotari changed the title Upgrade Netty to 4.1.85.Final Upgrade Netty to 4.1.86.Final Dec 12, 2022
@lhotari
Copy link
Member Author

lhotari commented Dec 12, 2022

Upgraded to 4.1.86.Final which reverts the HashedWheelTimer change and includes some CVE fixes. See release notes for Netty changes. (referenced in PR description)

Commands used to refresh licenses:
cd bookkeeper-dist/src/main/resources/deps
rm -rf netty-*
mkdir netty-4.1.86.Final
cd netty-4.1.86.Final
curl -L -o - https://github.com/netty/netty/archive/refs/tags/netty-4.1.86.Final.tar.gz | tar -zxv --strip-components=2 --wildcards -f - '*/license/*'
rm LICENSE.zstd-jni.txt LICENSE.brotli4j.txt
cd ..
git add netty-4.1.86.Final
@lhotari
Copy link
Member Author

lhotari commented Jan 10, 2023

@hangc0276 Please re-review this PR and possibly also merge it.

@hangc0276 hangc0276 merged commit c64dbcd into apache:master Jan 11, 2023
yaalsn pushed a commit to yaalsn/bookkeeper that referenced this pull request Jan 30, 2023
### Motivation

- see release notes for 4.1.85.Final: https://netty.io/news/2022/11/09/4-1-85-Final.html
- see release notes for 4.1.86.Final: https://netty.io/news/2022/12/12/4-1-86-Final.html

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599


### Changes

Upgrade Netty version to 4.1.86.Final
Ghatage pushed a commit to sijie/bookkeeper that referenced this pull request Jul 12, 2024
### Motivation

- see release notes for 4.1.85.Final: https://netty.io/news/2022/11/09/4-1-85-Final.html
- see release notes for 4.1.86.Final: https://netty.io/news/2022/12/12/4-1-86-Final.html

It is unknown whether there are fixes that specifically target Netty features used in Bookkeeper. One of the motivation of this PR is to upgrade Netty in Bookkeeper when the Netty version gets upgraded in Pulsar. The PR for Netty 4.1.86.Final upgrade in Pulsar is apache/pulsar#18599


### Changes

Upgrade Netty version to 4.1.86.Final
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants