NIFI-15339 - Bump Netty to 4.2.9.Final, jGit to 7.5.0, Excel Streaming Reader to 5.2.0, and others

[pvillard31]

Summary

NIFI-15339 - Bump Netty to 4.2.9.Final, jGit to 7.5.0, Excel Streaming Reader to 5.2.0, and others

• Google Drive API from v3-rev20251114-2.0.0 to v3-rev20251210-2.0.0 - https://github.com/googleapis/google-api-java-client-services/blob/main/clients/google-api-services-drive/v3/2.0.0/README.md
• HiveMQ MQTT Client from 1.3.10 to 1.3.11 - https://github.com/hivemq/hivemq-mqtt-client/releases/tag/v1.3.11
• Excel Streaming Reader from 5.1.2 to 5.2.0 - https://github.com/pjfanning/excel-streaming-reader/releases/tag/v5.2.0
• Spring Data Redis from 4.0.0 to 4.0.1 - https://github.com/spring-projects/spring-data-redis/releases/tag/4.0.1
• JSON Schema Validator from 2.0.0 to 2.0.1 - https://github.com/networknt/json-schema-validator/releases/tag/2.0.1
• jGit from 7.4.0.202509020913-r to 7.5.0.202512021534-r - https://github.com/eclipse-jgit/jgit/releases/tag/v7.5.0.202512021534-r
• AWS SDK BOM from 2.40.6 to 2.40.8 - https://github.com/aws/aws-sdk-java-v2/blob/master/CHANGELOG.md
• Greenmail from 2.1.7 to 2.1.8 - https://github.com/greenmail-mail-test/greenmail/releases/tag/release-2.1.8
• Localstack from 4.10.0 to 4.12.0 - https://github.com/localstack/localstack/releases/tag/v4.12.0
• Netty from 4.2.7.Final to 4.2.9.Final - https://github.com/netty/netty/releases/tag/netty-4.2.9.Final

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

• Apache NiFi Jira issue created

Pull Request Tracking

• Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
• Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

• Pull Request based on current revision of the main branch
• Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

• Build completed using ./mvnw clean install -P contrib-check
  • JDK 21
  • JDK 25

Licensing

• New dependencies are compatible with the Apache License 2.0 according to the License Policy
• New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

• Documentation formatting appears as expected in rendered files

[pvillard31]

The errors are due to a bug in Netty 4.2.8.Final (netty/netty#16020) - I will switch this PR to draft until they release a version with the fix

[exceptionfactory]

Thanks @pvillard31, if the new Netty version is not available soon, it seems best to back out that particular upgrade and retain the others.

[pvillard31]

Definitely agree @exceptionfactory. Given how critical the bug is, I'd expect a new release very soon. I'll give it until Monday and if no new release is out by then, I'll just skip the Netty version change for now.

[pvillard31]

At the moment I removed the Netty bump, it looks like the release is in progress as we speak :) Will keep an eye on the progress and add it back if it completes in the next hour or so.

[pvillard31]

OK so it's now released... it just needs to make its way to Maven Central...

[exceptionfactory]

Thanks @pvillard31, looks good now! +1 merging