v2.9.2
In case you missed them, check the 2.9 release notes
For Spring Boot users
Due to several CVEs, we updated netty ≥ 4.1.132.
Spring Boot's dependency management may pin an older netty and silently downgrade it, causing runtime issues:
- Upgrade to Spring Boot ≥ 3.5.13 (ships netty ≥ 4.1.132), or
- Pin netty:
- Maven:
<netty.version>4.1.136.Final</netty.version>inpom.xml - Gradle (with the
io.spring.dependency-managementplugin):netty.version=4.1.136.Finalingradle.properties
- Maven:
What's Changed
- Bumps Vert.x to 4.5.30 with new Netty CVE fixes.
- Bump Spring Boot dependency to 3.5.16.
- Emit static responses exactly once regardless of subscriber demand shape by @nikhiln64 in #636
New Contributors
- @nikhiln64 made their first contribution in #636
Full Changelog: v2.9.1...v2.9.2