52f8b0fa91Bumps the infrastructure group with 2 updates in the / directory: [io.github.oshai:kotlin-logging](https://github.com/oshai/kotlin-logging) and [io.netty:netty-bom](https://github.com/netty/netty). Updates `io.github.oshai:kotlin-logging` from 8.0.03 to 8.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/oshai/kotlin-logging/releases">io.github.oshai:kotlin-logging's releases</a>.</em></p> <blockquote> <h2>8.0.4</h2> <p>Align to semver.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4">https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="0aaa57ccef"><code>0aaa57c</code></a> bump to semver 8.0.5</li> <li><a href="bf60363f6c"><code>bf60363</code></a> change to semver 8.0.4</li> <li>See full diff in <a href="https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4">compare view</a></li> </ul> </details> <br /> Updates `io.netty:netty-bom` from 4.2.14.Final to 4.2.15.Final <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netty/netty/releases">io.netty:netty-bom's releases</a>.</em></p> <blockquote> <h2>netty-4.2.15.Final</h2> <h2>Security fixes</h2> <ul> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j">CVE-2026-48059</a>: memory exhaustion in <code>io.netty:netty-codec-haproxy</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85">CVE-2026-47691</a>: DNS cache poisoning in <code>io.netty:netty-resolver-dns</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm">CVE-2026-XXXXX</a>: DDoS in <code>io.netty:netty-codec-http2</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7">CVE-2026-XXXXX</a>: memory exhaustion in <code>io.netty:netty-codec-redis</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2">CVE-2026-44250</a>: memory exhaustion in <code>io.netty:netty-codec-redis</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3">CVE-2026-44890</a>: memory exhaustion in <code>io.netty:netty-codec-redis</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5">CVE-2026-XXXXX</a>: information disclosure and denial of service in <code>io.netty:netty-codec-classes-quic</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86">CVE-2026-44249</a>: IPv6 subnet filter bypass in <code>io.netty:netty-handler</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c">CVE-2026-XXXXX</a>: request smuggling in <code>io.netty:netty-codec-http</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2">CVE-2026-44892</a>: memory exhaustion in <code>io.netty:netty-codec-http3</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv">CVE-2026-44893</a>: memory leak in <code>io.netty:netty-codec-haproxy</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j">CVE-2026-44894</a>: traffic amplification in <code>io.netty:netty-codec-classes-quic</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9">CVE-2026-XXXXX</a>: TLS hostname verification accidentally disabled in <code>io.netty:netty-handler</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78">CVE-2026-45673</a>: DNS cache poisoning in <code>io.netty:netty-resolver-dns</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh">CVE-2026-45416</a>: excessive memory usage from SNIHandler in <code>io.netty:netty-handler</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9">CVE-2026-45536</a>: file descriptor leak in <code>io.netty:netty-transport-native-epoll</code> and <code>io.netty:netty-transport-native-kqueue</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc">CVE-2026-45674</a>: DNS cache poisoning in <code>io.netty:netty-resolver-dns</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch">CVE-2026-46340</a>: memory exhaustion in <code>io.netty:netty-transport-sctp</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q">CVE-2026-47244</a>: denial of service in <code>io.netty:netty-codec-http2</code>.</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm">CVE-2026-48006</a>: memory exhaustion in <code>io.netty:netty-codec-redis</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6">CVE-2026-48748</a>: memory exhaustion in <code>io.netty:netty-codec-http3</code> (high).</li> <li><a href="https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j">CVE-2026-48043</a>: memory exhaustion in <code>io.netty:netty-codec-http2</code>.</li> </ul> <h2>What's Changed</h2> <ul> <li>Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by <a href="https://github.com/dreamlike-ocean"><code>@dreamlike-ocean</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16836">netty/netty#16836</a></li> <li>HTTP/2: Parse request-target path like Vert.x by <a href="https://github.com/yawkat"><code>@yawkat</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16810">netty/netty#16810</a></li> <li>Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by <a href="https://github.com/netty-project-bot"><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16853">netty/netty#16853</a></li> <li>FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (<a href="https://redirect.github.com/netty/netty/issues/15053">#15053</a>) by <a href="https://github.com/schiemon"><code>@schiemon</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16837">netty/netty#16837</a></li> <li>Pass maxAllocation to Brotli and Zstd decoders by <a href="https://github.com/fedinskiy"><code>@fedinskiy</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16844">netty/netty#16844</a></li> <li>Fix revapi warnings by <a href="https://github.com/chrisvest"><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16885">netty/netty#16885</a></li> <li>Fix SCTP and Redis tests by <a href="https://github.com/chrisvest"><code>@chrisvest</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16893">netty/netty#16893</a></li> <li>Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by <a href="https://github.com/skyguard1"><code>@skyguard1</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16850">netty/netty#16850</a></li> <li>Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by <a href="https://github.com/netty-project-bot"><code>@netty-project-bot</code></a> in <a href="https://redirect.github.com/netty/netty/pull/16890">netty/netty#16890</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/schiemon"><code>@schiemon</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16837">netty/netty#16837</a></li> <li><a href="https://github.com/fedinskiy"><code>@fedinskiy</code></a> made their first contribution in <a href="https://redirect.github.com/netty/netty/pull/16844">netty/netty#16844</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final">https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="a41f7b289c"><code>a41f7b2</code></a> [maven-release-plugin] prepare release netty-4.2.15.Final</li> <li><a href="2394530bdb"><code>2394530</code></a> Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...</li> <li><a href="0bd1657a60"><code>0bd1657</code></a> Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (<a href="https://redirect.github.com/netty/netty/issues/16850">#16850</a>)</li> <li><a href="76291f58a9"><code>76291f5</code></a> Fix SCTP and Redis tests (<a href="https://redirect.github.com/netty/netty/issues/16893">#16893</a>)</li> <li><a href="e067b6e337"><code>e067b6e</code></a> Fix revapi warnings (<a href="https://redirect.github.com/netty/netty/issues/16885">#16885</a>)</li> <li><a href="5a52600d96"><code>5a52600</code></a> Pass maxAllocation to Brotli and Zstd decoders (<a href="https://redirect.github.com/netty/netty/issues/16844">#16844</a>)</li> <li><a href="541add0f7f"><code>541add0</code></a> Merge commit from fork</li> <li><a href="270800e5d3"><code>270800e</code></a> Merge commit from fork</li> <li><a href="3d45a1e4e8"><code>3d45a1e</code></a> Merge commit from fork</li> <li><a href="75127cab73"><code>75127ca</code></a> Merge commit from fork</li> <li>Additional commits viewable in <a href="https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
80 lines
4.6 KiB
TOML
80 lines
4.6 KiB
TOML
[versions]
|
|
# plugins version
|
|
atomicfu = "0.33.0"
|
|
binaryCompatibilityValidatorPlugin = "0.18.1"
|
|
detekt = "2.0.0-alpha.3"
|
|
dokka = "2.2.0"
|
|
kotlin = "2.3.21"
|
|
kover = "0.9.8"
|
|
ktlint = "14.2.0"
|
|
knit = "0.5.1"
|
|
mavenPublish = "0.36.0"
|
|
netty = "4.2.15.Final"
|
|
|
|
# libraries version
|
|
awaitility = "4.3.0"
|
|
collections-immutable = "0.4.0"
|
|
coroutines = "1.11.0"
|
|
kotest = "6.1.11"
|
|
kotlinx-io = "0.9.0"
|
|
ktor = "3.4.3"
|
|
logging = "8.0.4"
|
|
mockk = "1.14.11"
|
|
serialization = "1.11.0"
|
|
slf4j = "2.0.18"
|
|
logback = "1.5.34"
|
|
junit = "5.14.4"
|
|
|
|
[libraries]
|
|
# Plugins
|
|
detekt-gradle = { module = "dev.detekt:detekt-gradle-plugin", version.ref = "detekt" }
|
|
dokka-gradle = { module = "org.jetbrains.dokka:dokka-gradle-plugin", version.ref = "dokka" }
|
|
kotlin-gradle = { module = "org.jetbrains.kotlin:kotlin-gradle-plugin", version.ref = "kotlin" }
|
|
kotlin-serialization = { module = "org.jetbrains.kotlin:kotlin-serialization", version.ref = "kotlin" }
|
|
kotlinx-atomicfu-gradle = { module = "org.jetbrains.kotlinx:atomicfu-gradle-plugin", version.ref = "atomicfu" }
|
|
maven-publish = { module = "com.vanniktech:gradle-maven-publish-plugin", version.ref = "mavenPublish" }
|
|
|
|
# Kotlinx libraries
|
|
kotlin-logging = { group = "io.github.oshai", name = "kotlin-logging", version.ref = "logging" }
|
|
kotlinx-collections-immutable = { group = "org.jetbrains.kotlinx", name = "kotlinx-collections-immutable", version.ref = "collections-immutable" }
|
|
kotlinx-coroutines-core = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-core", version.ref = "coroutines" }
|
|
kotlinx-coroutines-core-wasm = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-core-wasm-js", version.ref = "coroutines" }
|
|
kotlinx-io-core = { group = "org.jetbrains.kotlinx", name = "kotlinx-io-core", version.ref = "kotlinx-io" }
|
|
kotlinx-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "serialization" }
|
|
|
|
# Ktor
|
|
ktor-client-apache5 = { group = "io.ktor", name = "ktor-client-apache5", version.ref = "ktor" }
|
|
ktor-client-auth = { group = "io.ktor", name = "ktor-client-auth", version.ref = "ktor" }
|
|
ktor-client-core = { group = "io.ktor", name = "ktor-client-core", version.ref = "ktor" }
|
|
ktor-client-logging = { group = "io.ktor", name = "ktor-client-logging", version.ref = "ktor" }
|
|
ktor-server-content-negotiation = { group = "io.ktor", name = "ktor-server-content-negotiation", version.ref = "ktor" }
|
|
ktor-client-content-negotiation = { group = "io.ktor", name = "ktor-client-content-negotiation", version.ref = "ktor" }
|
|
ktor-serialization = { group = "io.ktor", name = "ktor-serialization-kotlinx-json", version.ref = "ktor" }
|
|
ktor-server-auth = { group = "io.ktor", name = "ktor-server-auth", version.ref = "ktor" }
|
|
ktor-server-core = { group = "io.ktor", name = "ktor-server-core", version.ref = "ktor" }
|
|
ktor-server-sse = { group = "io.ktor", name = "ktor-server-sse", version.ref = "ktor" }
|
|
ktor-server-websockets = { group = "io.ktor", name = "ktor-server-websockets", version.ref = "ktor" }
|
|
|
|
# Testing
|
|
awaitility = { group = "org.awaitility", name = "awaitility-kotlin", version.ref = "awaitility" }
|
|
kotest-assertions-core = { group = "io.kotest", name = "kotest-assertions-core", version.ref = "kotest" }
|
|
kotest-assertions-json = { group = "io.kotest", name = "kotest-assertions-json", version.ref = "kotest" }
|
|
kotest-assertions-ktor = { group = "io.kotest", name = "kotest-assertions-ktor", version.ref = "kotest" }
|
|
kotlinx-coroutines-test = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-test", version.ref = "coroutines" }
|
|
ktor-client-mock = { group = "io.ktor", name = "ktor-client-mock", version.ref = "ktor" }
|
|
ktor-server-test-host = { group = "io.ktor", name = "ktor-server-test-host", version.ref = "ktor" }
|
|
mockk = { module = "io.mockk:mockk", version.ref = "mockk" }
|
|
netty-bom = { group = "io.netty", name = "netty-bom", version.ref = "netty" }
|
|
slf4j-simple = { group = "org.slf4j", name = "slf4j-simple", version.ref = "slf4j" }
|
|
logback-classic = { group = "ch.qos.logback", name = "logback-classic", version.ref = "logback" }
|
|
junit-jupiter-params = { module = "org.junit.jupiter:junit-jupiter-params", version.ref = "junit" }
|
|
|
|
# Samples
|
|
ktor-client-cio = { group = "io.ktor", name = "ktor-client-cio", version.ref = "ktor" }
|
|
ktor-server-cio = { group = "io.ktor", name = "ktor-server-cio", version.ref = "ktor" }
|
|
|
|
[plugins]
|
|
kotlinx-binary-compatibility-validator = { id = "org.jetbrains.kotlinx.binary-compatibility-validator", version.ref = "binaryCompatibilityValidatorPlugin" }
|
|
kover = { id = "org.jetbrains.kotlinx.kover", version.ref = "kover" }
|
|
ktlint = { id = "org.jlleitschuh.gradle.ktlint", version.ref = "ktlint" }
|
|
knit = { id = "org.jetbrains.kotlinx.knit", version.ref = "knit" }
|