Skip to content

Remove the unpooled allocator from test permutations#16282

Merged
chrisvest merged 1 commit intonetty:4.2from
chrisvest:4.2-no-unpooled-testing
Feb 17, 2026
Merged

Remove the unpooled allocator from test permutations#16282
chrisvest merged 1 commit intonetty:4.2from
chrisvest:4.2-no-unpooled-testing

Conversation

@chrisvest
Copy link
Copy Markdown
Member

@chrisvest chrisvest commented Feb 16, 2026

Motivation:
The unpooled allocator will allocate and deallocate memory for each buffer, rather than pool the memory. On Java 25+, deallocating memory (in the form of shared memory segments) involves thread-local handshakes, and can have significant overhead to the point of causing frequent test timeouts. Additionally, having the unpooled allocator in the test permutations does not add very much to test coverage.

Modification:
Remove the unpooled allocator from the transport test permutation parameters.

Result:
Much faster builds, from removing the overhead of releasing millions of shared memory segments.

@chrisvest
Remove the unpooled allocator from test permutations
e9d4b76 
Motivation:
The unpooled allocator will allocate and deallocate memory for each buffer, rather than pool the memory.
On Java 25+, deallocating memory (in the form of shared memory segments) involves thread-local handshakes, and can have significant overhead to the point of causing frequent test timeouts.
Additionally, having the unpooled allocator in the test permutations does not add very much to test coverage.

Modification:
Remove the unpooled allocator from the transport test permutation parameters.

Result:
Much faster builds, from removing the overhead of releasing millions of shared memory segments.
@chrisvest chrisvest added this to the 4.2.11.Final milestone Feb 16, 2026
@chrisvest chrisvest added needs-cherry-pick-4.1 This PR should be cherry-picked to 4.1 once merged. needs-cherry-pick-5.0 This PR should be cherry-picked to 5.0 once merged. labels Feb 16, 2026
@chrisvest
Copy link
Copy Markdown
Member Author

chrisvest commented Feb 16, 2026

@normanmaurer How attached are you to having the unpooled allocator as part of the transport test suite?

@chrisvest chrisvest mentioned this pull request Feb 16, 2026
Merged
@normanmaurer
Copy link
Copy Markdown
Member

normanmaurer commented Feb 17, 2026

@chrisvest I am ok removing it that said I think we need to do something about the performance as there are people that definitely want to use it.

@chrisvest chrisvest mentioned this pull request Feb 17, 2026
Merged
@chrisvest chrisvest removed the needs-cherry-pick-4.1 This PR should be cherry-picked to 4.1 once merged. label Feb 17, 2026
@chrisvest
Copy link
Copy Markdown
Member Author

chrisvest commented Feb 17, 2026

Removed the 4.1 cherry-pick label, since the CleanerJava25 is only in 4.2/5.0, so I don't think we need to backport this.

@chrisvest chrisvest merged commit 8987ec5 into netty:4.2 Feb 17, 2026
35 of 37 checks passed
netty-project-bot pushed a commit that referenced this pull request Feb 17, 2026
@chrisvest @netty-project-bot
Remove the unpooled allocator from test permutations (#16282)
a02fb37 
Motivation:
The unpooled allocator will allocate and deallocate memory for each
buffer, rather than pool the memory. On Java 25+, deallocating memory
(in the form of shared memory segments) involves thread-local
handshakes, and can have significant overhead to the point of causing
frequent test timeouts. Additionally, having the unpooled allocator in
the test permutations does not add very much to test coverage.

Modification:
Remove the unpooled allocator from the transport test permutation
parameters.

Result:
Much faster builds, from removing the overhead of releasing millions of
shared memory segments.

(cherry picked from commit 8987ec5)
@chrisvest chrisvest deleted the 4.2-no-unpooled-testing branch February 17, 2026 19:43
@netty-project-bot
Copy link
Copy Markdown
Contributor

netty-project-bot commented Feb 17, 2026

Forward port PR for 5.0: #16289

@netty-project-bot netty-project-bot mentioned this pull request Feb 17, 2026
Merged
chrisvest added a commit that referenced this pull request Feb 17, 2026
@netty-project-bot @chrisvest
Forward port 5.0: Remove the unpooled allocator from test permutations (
9759a4a 
#16289)

Forward port of #16282 to 5.0
Cherry-picked commit: 8987ec5

---
Motivation:
The unpooled allocator will allocate and deallocate memory for each
buffer, rather than pool the memory. On Java 25+, deallocating memory
(in the form of shared memory segments) involves thread-local
handshakes, and can have significant overhead to the point of causing
frequent test timeouts. Additionally, having the unpooled allocator in
the test permutations does not add very much to test coverage.

Modification:
Remove the unpooled allocator from the transport test permutation
parameters.

Result:
Much faster builds, from removing the overhead of releasing millions of
shared memory segments.

Co-authored-by: Chris Vest <christianvest_hansen@apple.com>
@chrisvest chrisvest mentioned this pull request Feb 18, 2026
Merged
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Mar 29, 2026
@mergify
chore(deps): bump io.netty:netty-all from 4.2.10.Final to 4.2.12.Fina…
e42aa05 
…l [skip ci]

Bumps [io.netty:netty-all](https://github.com/netty/netty) from 4.2.10.Final to 4.2.12.Final.
Release notes

*Sourced from [io.netty:netty-all's releases](https://github.com/netty/netty/releases).*

> netty-4.2.12.Final
> ------------------
>
> What's Changed
> --------------
>
> * Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16550](https://redirect.github.com/netty/netty/pull/16550)
>
> **Full Changelog**: <netty/netty@netty-4.2.11.Final...netty-4.2.12.Final>
>
> netty-4.2.11.Final
> ------------------
>
> Security
> --------
>
> * CVE-2026-33871, [HTTP/2 CONTINUATION Frame Flood Denial of Service](GHSA-w9fj-cfpg-grvv)
> * CVE-2026-33870, [HTTP Request Smuggling via Chunked Extension Quoted-String Parsing](GHSA-pwqr-wmgm-9rr8)
>
> What's Changed
> --------------
>
> * Update to latest JDK 26 EA release by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16230](https://redirect.github.com/netty/netty/pull/16230)
> * HTTP3: Allow to support non-standard HTTP3 settings by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16171](https://redirect.github.com/netty/netty/pull/16171)
> * Fix Incorrect nanos-to-millis conversion in epoll\_wait EINTR retry loop by [`@​adwsingh`](https://github.com/adwsingh) in [netty/netty#16245](https://redirect.github.com/netty/netty/pull/16245)
> * Allocate one large segment and slice for each MsgHdrMemory by [`@​dreamlike-ocean`](https://github.com/dreamlike-ocean) in [netty/netty#16234](https://redirect.github.com/netty/netty/pull/16234)
> * Make RefCntOpenSslContext.deallocate more robust by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16253](https://redirect.github.com/netty/netty/pull/16253)
> * Epoll: Fix excessive CPU usage when Channel is only registered but no… by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16250](https://redirect.github.com/netty/netty/pull/16250)
> * Update to gcc for arm 10.3-2021.07 by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16255](https://redirect.github.com/netty/netty/pull/16255)
> * Add acmeIdentifier extension support to pkitesting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16256](https://redirect.github.com/netty/netty/pull/16256)
> * Update JDK versions to latest patch releases by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16254](https://redirect.github.com/netty/netty/pull/16254)
> * Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16241](https://redirect.github.com/netty/netty/pull/16241)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16269](https://redirect.github.com/netty/netty/pull/16269)
> * Revert "Automatic backporting workflow from 4.1 to 4.2" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16270](https://redirect.github.com/netty/netty/pull/16270)
> * HTTP2: Correctly account for padding when decompress by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16264](https://redirect.github.com/netty/netty/pull/16264)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16271](https://redirect.github.com/netty/netty/pull/16271)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16273](https://redirect.github.com/netty/netty/pull/16273)
> * Backport PRs must be created with personal access tokens by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16276](https://redirect.github.com/netty/netty/pull/16276)
> * Expose QuicSslContextBuilder::sni by [`@​ZeroErrors`](https://github.com/ZeroErrors) in [netty/netty#16178](https://redirect.github.com/netty/netty/pull/16178)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16275](https://redirect.github.com/netty/netty/pull/16275)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16283](https://redirect.github.com/netty/netty/pull/16283)
> * Remove the unpooled allocator from test permutations by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16282](https://redirect.github.com/netty/netty/pull/16282)
> * Some polishing of the porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16288](https://redirect.github.com/netty/netty/pull/16288)
> * Allow to set destination connection id when creating a client side QuicheChannel by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16286](https://redirect.github.com/netty/netty/pull/16286)
> * Update to latest JDK26 EA build by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16295](https://redirect.github.com/netty/netty/pull/16295)
> * Add javadoc to clarify responsibility of the user when generating the remote connection id by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16293](https://redirect.github.com/netty/netty/pull/16293)
> * Make the build run faster by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16290](https://redirect.github.com/netty/netty/pull/16290)
> * Fix IDE warnings in SslHandler by [`@​doom369`](https://github.com/doom369) in [netty/netty#16237](https://redirect.github.com/netty/netty/pull/16237)
> * Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16242](https://redirect.github.com/netty/netty/pull/16242)
> * Support boringssl SSLCredential API by [`@​jmcrawford45`](https://github.com/jmcrawford45) in [netty/netty#15919](https://redirect.github.com/netty/netty/pull/15919)
> * Fix high-order bit aliasing in HttpUtil.validateToken by [`@​furkanvarol`](https://github.com/furkanvarol) in [netty/netty#16279](https://redirect.github.com/netty/netty/pull/16279)
> * Improve multi-byte access performance when UNALIGNED availability is unknown by [`@​Songdoeon`](https://github.com/Songdoeon) in [netty/netty#16207](https://redirect.github.com/netty/netty/pull/16207)
> * Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by [`@​doom369`](https://github.com/doom369) in [netty/netty#16278](https://redirect.github.com/netty/netty/pull/16278)
> * Support more branch freedom for auto-porting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16300](https://redirect.github.com/netty/netty/pull/16300)
> * fix: the precedence of + is higher than >> by [`@​cuiweixie`](https://github.com/cuiweixie) in [netty/netty#16312](https://redirect.github.com/netty/netty/pull/16312)
> * AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by [`@​laosijikaichele`](https://github.com/laosijikaichele) in [netty/netty#16309](https://redirect.github.com/netty/netty/pull/16309)
> * Fix flaky PooledByteBufAllocatorTest by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16313](https://redirect.github.com/netty/netty/pull/16313)
> * Fix pooled arena accounting tests by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16321](https://redirect.github.com/netty/netty/pull/16321)

... (truncated)


Commits

* [`67ce541`](netty/netty@67ce541) [maven-release-plugin] prepare release netty-4.2.12.Final
* [`7074624`](netty/netty@7074624) Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`c3b0a43`](netty/netty@c3b0a43) [maven-release-plugin] prepare for next development iteration
* [`c94a818`](netty/netty@c94a818) [maven-release-plugin] prepare release netty-4.2.11.Final
* [`3b76df1`](netty/netty@3b76df1) Merge commit from fork
* [`aae944a`](netty/netty@aae944a) Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`6001499`](netty/netty@6001499) Eliminate redundant bounds checks in CompositeByteBuf accessors ([#16525](https://redirect.github.com/netty/netty/issues/16525))
* [`a7fbb6f`](netty/netty@a7fbb6f) JdkZlibDecoder: accumulate decompressed output before firing channelRead ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`7937553`](netty/netty@7937553) Enforce io.netty.maxDirectMemory accounting on all Java versions ([#16489](https://redirect.github.com/netty/netty/issues/16489))
* [`893ea2e`](netty/netty@893ea2e) Allocate less in QueryStringDecoder.addParam for typical use case ([#16527](https://redirect.github.com/netty/netty/issues/16527))
* Additional commits viewable in [compare view](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=io.netty:netty-all&package-manager=maven&previous-version=4.2.10.Final&new-version=4.2.12.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Mar 29, 2026
@mergify
chore(deps): bump netty.version from 4.2.10.Final to 4.2.12.Final [sk…
a88075d 
…ip ci]

Bumps `netty.version` from 4.2.10.Final to 4.2.12.Final.
Updates `io.netty:netty-transport` from 4.2.10.Final to 4.2.12.Final
Release notes

*Sourced from [io.netty:netty-transport's releases](https://github.com/netty/netty/releases).*

> netty-4.2.12.Final
> ------------------
>
> What's Changed
> --------------
>
> * Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16550](https://redirect.github.com/netty/netty/pull/16550)
>
> **Full Changelog**: <netty/netty@netty-4.2.11.Final...netty-4.2.12.Final>
>
> netty-4.2.11.Final
> ------------------
>
> Security
> --------
>
> * CVE-2026-33871, [HTTP/2 CONTINUATION Frame Flood Denial of Service](GHSA-w9fj-cfpg-grvv)
> * CVE-2026-33870, [HTTP Request Smuggling via Chunked Extension Quoted-String Parsing](GHSA-pwqr-wmgm-9rr8)
>
> What's Changed
> --------------
>
> * Update to latest JDK 26 EA release by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16230](https://redirect.github.com/netty/netty/pull/16230)
> * HTTP3: Allow to support non-standard HTTP3 settings by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16171](https://redirect.github.com/netty/netty/pull/16171)
> * Fix Incorrect nanos-to-millis conversion in epoll\_wait EINTR retry loop by [`@​adwsingh`](https://github.com/adwsingh) in [netty/netty#16245](https://redirect.github.com/netty/netty/pull/16245)
> * Allocate one large segment and slice for each MsgHdrMemory by [`@​dreamlike-ocean`](https://github.com/dreamlike-ocean) in [netty/netty#16234](https://redirect.github.com/netty/netty/pull/16234)
> * Make RefCntOpenSslContext.deallocate more robust by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16253](https://redirect.github.com/netty/netty/pull/16253)
> * Epoll: Fix excessive CPU usage when Channel is only registered but no… by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16250](https://redirect.github.com/netty/netty/pull/16250)
> * Update to gcc for arm 10.3-2021.07 by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16255](https://redirect.github.com/netty/netty/pull/16255)
> * Add acmeIdentifier extension support to pkitesting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16256](https://redirect.github.com/netty/netty/pull/16256)
> * Update JDK versions to latest patch releases by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16254](https://redirect.github.com/netty/netty/pull/16254)
> * Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16241](https://redirect.github.com/netty/netty/pull/16241)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16269](https://redirect.github.com/netty/netty/pull/16269)
> * Revert "Automatic backporting workflow from 4.1 to 4.2" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16270](https://redirect.github.com/netty/netty/pull/16270)
> * HTTP2: Correctly account for padding when decompress by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16264](https://redirect.github.com/netty/netty/pull/16264)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16271](https://redirect.github.com/netty/netty/pull/16271)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16273](https://redirect.github.com/netty/netty/pull/16273)
> * Backport PRs must be created with personal access tokens by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16276](https://redirect.github.com/netty/netty/pull/16276)
> * Expose QuicSslContextBuilder::sni by [`@​ZeroErrors`](https://github.com/ZeroErrors) in [netty/netty#16178](https://redirect.github.com/netty/netty/pull/16178)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16275](https://redirect.github.com/netty/netty/pull/16275)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16283](https://redirect.github.com/netty/netty/pull/16283)
> * Remove the unpooled allocator from test permutations by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16282](https://redirect.github.com/netty/netty/pull/16282)
> * Some polishing of the porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16288](https://redirect.github.com/netty/netty/pull/16288)
> * Allow to set destination connection id when creating a client side QuicheChannel by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16286](https://redirect.github.com/netty/netty/pull/16286)
> * Update to latest JDK26 EA build by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16295](https://redirect.github.com/netty/netty/pull/16295)
> * Add javadoc to clarify responsibility of the user when generating the remote connection id by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16293](https://redirect.github.com/netty/netty/pull/16293)
> * Make the build run faster by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16290](https://redirect.github.com/netty/netty/pull/16290)
> * Fix IDE warnings in SslHandler by [`@​doom369`](https://github.com/doom369) in [netty/netty#16237](https://redirect.github.com/netty/netty/pull/16237)
> * Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16242](https://redirect.github.com/netty/netty/pull/16242)
> * Support boringssl SSLCredential API by [`@​jmcrawford45`](https://github.com/jmcrawford45) in [netty/netty#15919](https://redirect.github.com/netty/netty/pull/15919)
> * Fix high-order bit aliasing in HttpUtil.validateToken by [`@​furkanvarol`](https://github.com/furkanvarol) in [netty/netty#16279](https://redirect.github.com/netty/netty/pull/16279)
> * Improve multi-byte access performance when UNALIGNED availability is unknown by [`@​Songdoeon`](https://github.com/Songdoeon) in [netty/netty#16207](https://redirect.github.com/netty/netty/pull/16207)
> * Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by [`@​doom369`](https://github.com/doom369) in [netty/netty#16278](https://redirect.github.com/netty/netty/pull/16278)
> * Support more branch freedom for auto-porting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16300](https://redirect.github.com/netty/netty/pull/16300)
> * fix: the precedence of + is higher than >> by [`@​cuiweixie`](https://github.com/cuiweixie) in [netty/netty#16312](https://redirect.github.com/netty/netty/pull/16312)
> * AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by [`@​laosijikaichele`](https://github.com/laosijikaichele) in [netty/netty#16309](https://redirect.github.com/netty/netty/pull/16309)
> * Fix flaky PooledByteBufAllocatorTest by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16313](https://redirect.github.com/netty/netty/pull/16313)
> * Fix pooled arena accounting tests by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16321](https://redirect.github.com/netty/netty/pull/16321)

... (truncated)


Commits

* [`67ce541`](netty/netty@67ce541) [maven-release-plugin] prepare release netty-4.2.12.Final
* [`7074624`](netty/netty@7074624) Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`c3b0a43`](netty/netty@c3b0a43) [maven-release-plugin] prepare for next development iteration
* [`c94a818`](netty/netty@c94a818) [maven-release-plugin] prepare release netty-4.2.11.Final
* [`3b76df1`](netty/netty@3b76df1) Merge commit from fork
* [`aae944a`](netty/netty@aae944a) Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`6001499`](netty/netty@6001499) Eliminate redundant bounds checks in CompositeByteBuf accessors ([#16525](https://redirect.github.com/netty/netty/issues/16525))
* [`a7fbb6f`](netty/netty@a7fbb6f) JdkZlibDecoder: accumulate decompressed output before firing channelRead ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`7937553`](netty/netty@7937553) Enforce io.netty.maxDirectMemory accounting on all Java versions ([#16489](https://redirect.github.com/netty/netty/issues/16489))
* [`893ea2e`](netty/netty@893ea2e) Allocate less in QueryStringDecoder.addParam for typical use case ([#16527](https://redirect.github.com/netty/netty/issues/16527))
* Additional commits viewable in [compare view](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final)
  
Updates `io.netty:netty-codec` from 4.2.10.Final to 4.2.12.Final
Release notes

*Sourced from [io.netty:netty-codec's releases](https://github.com/netty/netty/releases).*

> netty-4.2.12.Final
> ------------------
>
> What's Changed
> --------------
>
> * Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16550](https://redirect.github.com/netty/netty/pull/16550)
>
> **Full Changelog**: <netty/netty@netty-4.2.11.Final...netty-4.2.12.Final>
>
> netty-4.2.11.Final
> ------------------
>
> Security
> --------
>
> * CVE-2026-33871, [HTTP/2 CONTINUATION Frame Flood Denial of Service](GHSA-w9fj-cfpg-grvv)
> * CVE-2026-33870, [HTTP Request Smuggling via Chunked Extension Quoted-String Parsing](GHSA-pwqr-wmgm-9rr8)
>
> What's Changed
> --------------
>
> * Update to latest JDK 26 EA release by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16230](https://redirect.github.com/netty/netty/pull/16230)
> * HTTP3: Allow to support non-standard HTTP3 settings by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16171](https://redirect.github.com/netty/netty/pull/16171)
> * Fix Incorrect nanos-to-millis conversion in epoll\_wait EINTR retry loop by [`@​adwsingh`](https://github.com/adwsingh) in [netty/netty#16245](https://redirect.github.com/netty/netty/pull/16245)
> * Allocate one large segment and slice for each MsgHdrMemory by [`@​dreamlike-ocean`](https://github.com/dreamlike-ocean) in [netty/netty#16234](https://redirect.github.com/netty/netty/pull/16234)
> * Make RefCntOpenSslContext.deallocate more robust by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16253](https://redirect.github.com/netty/netty/pull/16253)
> * Epoll: Fix excessive CPU usage when Channel is only registered but no… by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16250](https://redirect.github.com/netty/netty/pull/16250)
> * Update to gcc for arm 10.3-2021.07 by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16255](https://redirect.github.com/netty/netty/pull/16255)
> * Add acmeIdentifier extension support to pkitesting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16256](https://redirect.github.com/netty/netty/pull/16256)
> * Update JDK versions to latest patch releases by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16254](https://redirect.github.com/netty/netty/pull/16254)
> * Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16241](https://redirect.github.com/netty/netty/pull/16241)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16269](https://redirect.github.com/netty/netty/pull/16269)
> * Revert "Automatic backporting workflow from 4.1 to 4.2" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16270](https://redirect.github.com/netty/netty/pull/16270)
> * HTTP2: Correctly account for padding when decompress by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16264](https://redirect.github.com/netty/netty/pull/16264)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16271](https://redirect.github.com/netty/netty/pull/16271)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16273](https://redirect.github.com/netty/netty/pull/16273)
> * Backport PRs must be created with personal access tokens by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16276](https://redirect.github.com/netty/netty/pull/16276)
> * Expose QuicSslContextBuilder::sni by [`@​ZeroErrors`](https://github.com/ZeroErrors) in [netty/netty#16178](https://redirect.github.com/netty/netty/pull/16178)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16275](https://redirect.github.com/netty/netty/pull/16275)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16283](https://redirect.github.com/netty/netty/pull/16283)
> * Remove the unpooled allocator from test permutations by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16282](https://redirect.github.com/netty/netty/pull/16282)
> * Some polishing of the porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16288](https://redirect.github.com/netty/netty/pull/16288)
> * Allow to set destination connection id when creating a client side QuicheChannel by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16286](https://redirect.github.com/netty/netty/pull/16286)
> * Update to latest JDK26 EA build by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16295](https://redirect.github.com/netty/netty/pull/16295)
> * Add javadoc to clarify responsibility of the user when generating the remote connection id by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16293](https://redirect.github.com/netty/netty/pull/16293)
> * Make the build run faster by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16290](https://redirect.github.com/netty/netty/pull/16290)
> * Fix IDE warnings in SslHandler by [`@​doom369`](https://github.com/doom369) in [netty/netty#16237](https://redirect.github.com/netty/netty/pull/16237)
> * Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16242](https://redirect.github.com/netty/netty/pull/16242)
> * Support boringssl SSLCredential API by [`@​jmcrawford45`](https://github.com/jmcrawford45) in [netty/netty#15919](https://redirect.github.com/netty/netty/pull/15919)
> * Fix high-order bit aliasing in HttpUtil.validateToken by [`@​furkanvarol`](https://github.com/furkanvarol) in [netty/netty#16279](https://redirect.github.com/netty/netty/pull/16279)
> * Improve multi-byte access performance when UNALIGNED availability is unknown by [`@​Songdoeon`](https://github.com/Songdoeon) in [netty/netty#16207](https://redirect.github.com/netty/netty/pull/16207)
> * Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by [`@​doom369`](https://github.com/doom369) in [netty/netty#16278](https://redirect.github.com/netty/netty/pull/16278)
> * Support more branch freedom for auto-porting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16300](https://redirect.github.com/netty/netty/pull/16300)
> * fix: the precedence of + is higher than >> by [`@​cuiweixie`](https://github.com/cuiweixie) in [netty/netty#16312](https://redirect.github.com/netty/netty/pull/16312)
> * AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by [`@​laosijikaichele`](https://github.com/laosijikaichele) in [netty/netty#16309](https://redirect.github.com/netty/netty/pull/16309)
> * Fix flaky PooledByteBufAllocatorTest by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16313](https://redirect.github.com/netty/netty/pull/16313)
> * Fix pooled arena accounting tests by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16321](https://redirect.github.com/netty/netty/pull/16321)

... (truncated)


Commits

* [`67ce541`](netty/netty@67ce541) [maven-release-plugin] prepare release netty-4.2.12.Final
* [`7074624`](netty/netty@7074624) Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`c3b0a43`](netty/netty@c3b0a43) [maven-release-plugin] prepare for next development iteration
* [`c94a818`](netty/netty@c94a818) [maven-release-plugin] prepare release netty-4.2.11.Final
* [`3b76df1`](netty/netty@3b76df1) Merge commit from fork
* [`aae944a`](netty/netty@aae944a) Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`6001499`](netty/netty@6001499) Eliminate redundant bounds checks in CompositeByteBuf accessors ([#16525](https://redirect.github.com/netty/netty/issues/16525))
* [`a7fbb6f`](netty/netty@a7fbb6f) JdkZlibDecoder: accumulate decompressed output before firing channelRead ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`7937553`](netty/netty@7937553) Enforce io.netty.maxDirectMemory accounting on all Java versions ([#16489](https://redirect.github.com/netty/netty/issues/16489))
* [`893ea2e`](netty/netty@893ea2e) Allocate less in QueryStringDecoder.addParam for typical use case ([#16527](https://redirect.github.com/netty/netty/issues/16527))
* Additional commits viewable in [compare view](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final)
  
Updates `io.netty:netty-handler` from 4.2.10.Final to 4.2.12.Final
Release notes

*Sourced from [io.netty:netty-handler's releases](https://github.com/netty/netty/releases).*

> netty-4.2.12.Final
> ------------------
>
> What's Changed
> --------------
>
> * Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16550](https://redirect.github.com/netty/netty/pull/16550)
>
> **Full Changelog**: <netty/netty@netty-4.2.11.Final...netty-4.2.12.Final>
>
> netty-4.2.11.Final
> ------------------
>
> Security
> --------
>
> * CVE-2026-33871, [HTTP/2 CONTINUATION Frame Flood Denial of Service](GHSA-w9fj-cfpg-grvv)
> * CVE-2026-33870, [HTTP Request Smuggling via Chunked Extension Quoted-String Parsing](GHSA-pwqr-wmgm-9rr8)
>
> What's Changed
> --------------
>
> * Update to latest JDK 26 EA release by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16230](https://redirect.github.com/netty/netty/pull/16230)
> * HTTP3: Allow to support non-standard HTTP3 settings by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16171](https://redirect.github.com/netty/netty/pull/16171)
> * Fix Incorrect nanos-to-millis conversion in epoll\_wait EINTR retry loop by [`@​adwsingh`](https://github.com/adwsingh) in [netty/netty#16245](https://redirect.github.com/netty/netty/pull/16245)
> * Allocate one large segment and slice for each MsgHdrMemory by [`@​dreamlike-ocean`](https://github.com/dreamlike-ocean) in [netty/netty#16234](https://redirect.github.com/netty/netty/pull/16234)
> * Make RefCntOpenSslContext.deallocate more robust by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16253](https://redirect.github.com/netty/netty/pull/16253)
> * Epoll: Fix excessive CPU usage when Channel is only registered but no… by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16250](https://redirect.github.com/netty/netty/pull/16250)
> * Update to gcc for arm 10.3-2021.07 by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16255](https://redirect.github.com/netty/netty/pull/16255)
> * Add acmeIdentifier extension support to pkitesting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16256](https://redirect.github.com/netty/netty/pull/16256)
> * Update JDK versions to latest patch releases by [`@​m1ngyuan`](https://github.com/m1ngyuan) in [netty/netty#16254](https://redirect.github.com/netty/netty/pull/16254)
> * Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16241](https://redirect.github.com/netty/netty/pull/16241)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16269](https://redirect.github.com/netty/netty/pull/16269)
> * Revert "Automatic backporting workflow from 4.1 to 4.2" by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16270](https://redirect.github.com/netty/netty/pull/16270)
> * HTTP2: Correctly account for padding when decompress by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16264](https://redirect.github.com/netty/netty/pull/16264)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16271](https://redirect.github.com/netty/netty/pull/16271)
> * Automatic backporting workflow from 4.1 to 4.2 by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16273](https://redirect.github.com/netty/netty/pull/16273)
> * Backport PRs must be created with personal access tokens by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16276](https://redirect.github.com/netty/netty/pull/16276)
> * Expose QuicSslContextBuilder::sni by [`@​ZeroErrors`](https://github.com/ZeroErrors) in [netty/netty#16178](https://redirect.github.com/netty/netty/pull/16178)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16275](https://redirect.github.com/netty/netty/pull/16275)
> * Add more porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16283](https://redirect.github.com/netty/netty/pull/16283)
> * Remove the unpooled allocator from test permutations by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16282](https://redirect.github.com/netty/netty/pull/16282)
> * Some polishing of the porting workflows by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16288](https://redirect.github.com/netty/netty/pull/16288)
> * Allow to set destination connection id when creating a client side QuicheChannel by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16286](https://redirect.github.com/netty/netty/pull/16286)
> * Update to latest JDK26 EA build by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16295](https://redirect.github.com/netty/netty/pull/16295)
> * Add javadoc to clarify responsibility of the user when generating the remote connection id by [`@​normanmaurer`](https://github.com/normanmaurer) in [netty/netty#16293](https://redirect.github.com/netty/netty/pull/16293)
> * Make the build run faster by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16290](https://redirect.github.com/netty/netty/pull/16290)
> * Fix IDE warnings in SslHandler by [`@​doom369`](https://github.com/doom369) in [netty/netty#16237](https://redirect.github.com/netty/netty/pull/16237)
> * Decrease Long allocations and map.put calls in ReferenceCountedOpenSllEngine in handshake() method by [`@​doom369`](https://github.com/doom369) in [netty/netty#16242](https://redirect.github.com/netty/netty/pull/16242)
> * Support boringssl SSLCredential API by [`@​jmcrawford45`](https://github.com/jmcrawford45) in [netty/netty#15919](https://redirect.github.com/netty/netty/pull/15919)
> * Fix high-order bit aliasing in HttpUtil.validateToken by [`@​furkanvarol`](https://github.com/furkanvarol) in [netty/netty#16279](https://redirect.github.com/netty/netty/pull/16279)
> * Improve multi-byte access performance when UNALIGNED availability is unknown by [`@​Songdoeon`](https://github.com/Songdoeon) in [netty/netty#16207](https://redirect.github.com/netty/netty/pull/16207)
> * Avoid unnecessary SSL.getVersion() call and string allocation in ReferenceCountedOpenSslEngine by [`@​doom369`](https://github.com/doom369) in [netty/netty#16278](https://redirect.github.com/netty/netty/pull/16278)
> * Support more branch freedom for auto-porting by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16300](https://redirect.github.com/netty/netty/pull/16300)
> * fix: the precedence of + is higher than >> by [`@​cuiweixie`](https://github.com/cuiweixie) in [netty/netty#16312](https://redirect.github.com/netty/netty/pull/16312)
> * AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater than byteBuf.maxCapacity() by [`@​laosijikaichele`](https://github.com/laosijikaichele) in [netty/netty#16309](https://redirect.github.com/netty/netty/pull/16309)
> * Fix flaky PooledByteBufAllocatorTest by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16313](https://redirect.github.com/netty/netty/pull/16313)
> * Fix pooled arena accounting tests by [`@​chrisvest`](https://github.com/chrisvest) in [netty/netty#16321](https://redirect.github.com/netty/netty/pull/16321)

... (truncated)


Commits

* [`67ce541`](netty/netty@67ce541) [maven-release-plugin] prepare release netty-4.2.12.Final
* [`7074624`](netty/netty@7074624) Revert "Eliminate redundant bounds checks in CompositeByteBuf accessors" ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`c3b0a43`](netty/netty@c3b0a43) [maven-release-plugin] prepare for next development iteration
* [`c94a818`](netty/netty@c94a818) [maven-release-plugin] prepare release netty-4.2.11.Final
* [`3b76df1`](netty/netty@3b76df1) Merge commit from fork
* [`aae944a`](netty/netty@aae944a) Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`6001499`](netty/netty@6001499) Eliminate redundant bounds checks in CompositeByteBuf accessors ([#16525](https://redirect.github.com/netty/netty/issues/16525))
* [`a7fbb6f`](netty/netty@a7fbb6f) JdkZlibDecoder: accumulate decompressed output before firing channelRead ([#16](https://redirect.github.com/netty/netty/issues/16)...
* [`7937553`](netty/netty@7937553) Enforce io.netty.maxDirectMemory accounting on all Java versions ([#16489](https://redirect.github.com/netty/netty/issues/16489))
* [`893ea2e`](netty/netty@893ea2e) Allocate less in QueryStringDecoder.addParam for typical use case ([#16527](https://redirect.github.com/netty/netty/issues/16527))
* Additional commits viewable in [compare view](netty/netty@netty-4.2.10.Final...netty-4.2.12.Final)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yawkat yawkat yawkat approved these changes

@normanmaurer normanmaurer Awaiting requested review from normanmaurer

Assignees

No one assigned

Labels

needs-cherry-pick-5.0 This PR should be cherry-picked to 5.0 once merged.

Projects

None yet

Milestone

4.2.11.Final

Development

Successfully merging this pull request may close these issues.

4 participants

@chrisvest @normanmaurer @netty-project-bot @yawkat