netty-4.1.136.Final

What's Changed

• SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in #16814
• Make HTTP/2 frame hashCode consistent with equals by @daguimu in #16692
• Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in #16915
• FlowControlHandler: Fix autoRead behavior by @chrisvest in #16912
• Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in #16911
• MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in #16916
• MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in #16813
• Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in #16933
• Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in #16941
• Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in #16955
• Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in #16957
• Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in #16964
• Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in #16965
• Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in #16968
• Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in #16973
• Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in #16978
• Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in #16976
• Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in #16983
• IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in #16989
• Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in #16995
• Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in #16997
• Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in #16986
• Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in #17003
• Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in #17017
• FastLz: Guard decompression against truncated input (#17000) by @chrisvest in #17015
• Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in #17020
• Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in #17022
• Update lz4-java to 1.11.1 by @yawkat in #17060
• Pin github actions to reduce risk (#17043) by @normanmaurer in #17044
• Merge branches from forks (#17063) by @normanmaurer in #17065

Full Changelog: netty-4.1.135.Final...netty-4.1.136.Final