From 52f8b0fa919c59dcae068e85b8e337f532704128 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Jun 2026 01:30:10 +0200
Subject: [PATCH] chore(deps): bump the infrastructure group across 1 directory
 with 2 updates (#797)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the infrastructure group with 2 updates in the / directory:
[io.github.oshai:kotlin-logging](https://github.com/oshai/kotlin-logging)
and [io.netty:netty-bom](https://github.com/netty/netty).

Updates `io.github.oshai:kotlin-logging` from 8.0.03 to 8.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oshai/kotlin-logging/releases">io.github.oshai:kotlin-logging's
releases</a>.</em></p>
<blockquote>
<h2>8.0.4</h2>
<p>Align to semver.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4">https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oshai/kotlin-logging/commit/0aaa57ccef9e1cc619de0d30bd65cc0a7271332d"><code>0aaa57c</code></a>
bump to semver 8.0.5</li>
<li><a
href="https://github.com/oshai/kotlin-logging/commit/bf60363f6ccfec666077e8c8a583b69cd50386e3"><code>bf60363</code></a>
change to semver 8.0.4</li>
<li>See full diff in <a
href="https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.netty:netty-bom` from 4.2.14.Final to 4.2.15.Final
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netty/netty/releases">io.netty:netty-bom's
releases</a>.</em></p>
<blockquote>
<h2>netty-4.2.15.Final</h2>
<h2>Security fixes</h2>
<ul>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j">CVE-2026-48059</a>:
memory exhaustion in <code>io.netty:netty-codec-haproxy</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85">CVE-2026-47691</a>:
DNS cache poisoning in <code>io.netty:netty-resolver-dns</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm">CVE-2026-XXXXX</a>:
DDoS in <code>io.netty:netty-codec-http2</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7">CVE-2026-XXXXX</a>:
memory exhaustion in <code>io.netty:netty-codec-redis</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2">CVE-2026-44250</a>:
memory exhaustion in <code>io.netty:netty-codec-redis</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3">CVE-2026-44890</a>:
memory exhaustion in <code>io.netty:netty-codec-redis</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5">CVE-2026-XXXXX</a>:
information disclosure and denial of service in
<code>io.netty:netty-codec-classes-quic</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86">CVE-2026-44249</a>:
IPv6 subnet filter bypass in <code>io.netty:netty-handler</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c">CVE-2026-XXXXX</a>:
request smuggling in <code>io.netty:netty-codec-http</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2">CVE-2026-44892</a>:
memory exhaustion in <code>io.netty:netty-codec-http3</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv">CVE-2026-44893</a>:
memory leak in <code>io.netty:netty-codec-haproxy</code> (high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j">CVE-2026-44894</a>:
traffic amplification in <code>io.netty:netty-codec-classes-quic</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9">CVE-2026-XXXXX</a>:
TLS hostname verification accidentally disabled in
<code>io.netty:netty-handler</code> (high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78">CVE-2026-45673</a>:
DNS cache poisoning in <code>io.netty:netty-resolver-dns</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh">CVE-2026-45416</a>:
excessive memory usage from SNIHandler in
<code>io.netty:netty-handler</code> (high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9">CVE-2026-45536</a>:
file descriptor leak in
<code>io.netty:netty-transport-native-epoll</code> and
<code>io.netty:netty-transport-native-kqueue</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc">CVE-2026-45674</a>:
DNS cache poisoning in <code>io.netty:netty-resolver-dns</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch">CVE-2026-46340</a>:
memory exhaustion in <code>io.netty:netty-transport-sctp</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q">CVE-2026-47244</a>:
denial of service in <code>io.netty:netty-codec-http2</code>.</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm">CVE-2026-48006</a>:
memory exhaustion in <code>io.netty:netty-codec-redis</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6">CVE-2026-48748</a>:
memory exhaustion in <code>io.netty:netty-codec-http3</code>
(high).</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j">CVE-2026-48043</a>:
memory exhaustion in <code>io.netty:netty-codec-http2</code>.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by <a
href="https://github.com/dreamlike-ocean"><code>@​dreamlike-ocean</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16836">netty/netty#16836</a></li>
<li>HTTP/2: Parse request-target path like Vert.x by <a
href="https://github.com/yawkat"><code>@​yawkat</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16810">netty/netty#16810</a></li>
<li>Auto-port 4.2: ChannelInitializer: correct misleading comment on
exceptionCaught route by <a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16853">netty/netty#16853</a></li>
<li>FlowControlHandler: Suppress duplicate channelReadComplete after
draining queue (<a
href="https://redirect.github.com/netty/netty/issues/15053">#15053</a>)
by <a href="https://github.com/schiemon"><code>@​schiemon</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16837">netty/netty#16837</a></li>
<li>Pass maxAllocation to Brotli and Zstd decoders by <a
href="https://github.com/fedinskiy"><code>@​fedinskiy</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16844">netty/netty#16844</a></li>
<li>Fix revapi warnings by <a
href="https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16885">netty/netty#16885</a></li>
<li>Fix SCTP and Redis tests by <a
href="https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16893">netty/netty#16893</a></li>
<li>Add maxWindowLog parameter to ZstdDecoder to bound memory allocation
by <a href="https://github.com/skyguard1"><code>@​skyguard1</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16850">netty/netty#16850</a></li>
<li>Auto-port 4.2: MQTT: Reject malformed no-payload packets with
non-zero Remaining Length by <a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16890">netty/netty#16890</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/schiemon"><code>@​schiemon</code></a>
made their first contribution in <a
href="https://redirect.github.com/netty/netty/pull/16837">netty/netty#16837</a></li>
<li><a href="https://github.com/fedinskiy"><code>@​fedinskiy</code></a>
made their first contribution in <a
href="https://redirect.github.com/netty/netty/pull/16844">netty/netty#16844</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final">https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40"><code>a41f7b2</code></a>
[maven-release-plugin] prepare release netty-4.2.15.Final</li>
<li><a
href="https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9"><code>2394530</code></a>
Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero
Remain...</li>
<li><a
href="https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7"><code>0bd1657</code></a>
Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (<a
href="https://redirect.github.com/netty/netty/issues/16850">#16850</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163"><code>76291f5</code></a>
Fix SCTP and Redis tests (<a
href="https://redirect.github.com/netty/netty/issues/16893">#16893</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943"><code>e067b6e</code></a>
Fix revapi warnings (<a
href="https://redirect.github.com/netty/netty/issues/16885">#16885</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811"><code>5a52600</code></a>
Pass maxAllocation to Brotli and Zstd decoders (<a
href="https://redirect.github.com/netty/netty/issues/16844">#16844</a>)</li>
<li><a
href="https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3"><code>541add0</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1"><code>270800e</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca"><code>3d45a1e</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d"><code>75127ca</code></a>
Merge commit from fork</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 gradle/libs.versions.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 8474680..4904ea4 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -9,7 +9,7 @@ kover = "0.9.8"
 ktlint = "14.2.0"
 knit = "0.5.1"
 mavenPublish = "0.36.0"
-netty = "4.2.14.Final"
+netty = "4.2.15.Final"
 
 # libraries version
 awaitility = "4.3.0"
@@ -18,7 +18,7 @@ coroutines = "1.11.0"
 kotest = "6.1.11"
 kotlinx-io = "0.9.0"
 ktor = "3.4.3"
-logging = "8.0.03"
+logging = "8.0.4"
 mockk = "1.14.11"
 serialization = "1.11.0"
 slf4j = "2.0.18"