Skip to content

[WFLY-21415] Upgrade vertx to 4.5.24 for [CVE-2026-1002]#19557

Merged
rhusar merged 1 commit intomainfrom
dependabot/maven/version.io.vertx.vertx-4.5.24
Jan 30, 2026
Merged

[WFLY-21415] Upgrade vertx to 4.5.24 for [CVE-2026-1002]#19557
rhusar merged 1 commit intomainfrom
dependabot/maven/version.io.vertx.vertx-4.5.24

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps version.io.vertx.vertx from 4.5.23 to 4.5.24.
Updates io.vertx:vertx-core from 4.5.23 to 4.5.24

Commits
  • 98983a8 Releasing 4.5.24
  • d007e7b Fix a bug in the removeDots implementation.
  • 03b51c6 Update the Vert.x logging implementation to log better human readable message...
  • 5762bdf Ensure setup is only called once
  • da78d5c Stabilize test HttpBandwidthLimitingTest.testDynamicOutboundRateUpdateSharedS...
  • b430d5b Stabilize test by keeping reference to NetClient
  • bc34930 Ensure setup is only called once
  • 16ba3c6 Restore handling of headers after goaway received
  • f039681 Set next snapshot version
  • See full diff in compare view

Updates io.vertx:vertx-amqp-client from 4.5.23 to 4.5.24

Commits

Updates io.vertx:vertx-grpc-client from 4.5.23 to 4.5.24

Commits
  • 17beca0 Releasing 4.5.24
  • cc28f32 GrpcServer should response with the UNIMPLEMENTED grpc status when the servic...
  • 5f147c9 Set next snapshot version
  • See full diff in compare view

Updates io.vertx:vertx-grpc-common from 4.5.23 to 4.5.24

Commits
  • 17beca0 Releasing 4.5.24
  • cc28f32 GrpcServer should response with the UNIMPLEMENTED grpc status when the servic...
  • 5f147c9 Set next snapshot version
  • See full diff in compare view

Updates io.vertx:vertx-proton from 4.5.23 to 4.5.24

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Warning

This section is automatically managed by the WildFly Bot. Manual modifications will be overwritten.

Additional WildFly Issue Links Found:

More information about the wildfly-bot[bot]

Bumps `version.io.vertx.vertx` from 4.5.23 to 4.5.24.

Updates `io.vertx:vertx-core` from 4.5.23 to 4.5.24
- [Commits](eclipse-vertx/vert.x@4.5.23...4.5.24)

Updates `io.vertx:vertx-amqp-client` from 4.5.23 to 4.5.24
- [Commits](vert-x3/vertx-amqp-client@4.5.23...4.5.24)

Updates `io.vertx:vertx-grpc-client` from 4.5.23 to 4.5.24
- [Commits](eclipse-vertx/vertx-grpc@4.5.23...4.5.24)

Updates `io.vertx:vertx-grpc-common` from 4.5.23 to 4.5.24
- [Commits](eclipse-vertx/vertx-grpc@4.5.23...4.5.24)

Updates `io.vertx:vertx-proton` from 4.5.23 to 4.5.24
- [Commits](vert-x3/vertx-proton@4.5.23...4.5.24)

---
updated-dependencies:
- dependency-name: io.vertx:vertx-core
  dependency-version: 4.5.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: io.vertx:vertx-amqp-client
  dependency-version: 4.5.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.vertx:vertx-grpc-client
  dependency-version: 4.5.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.vertx:vertx-grpc-common
  dependency-version: 4.5.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.vertx:vertx-proton
  dependency-version: 4.5.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Added by dependabot to pull requests that update a dependency file java Pull requests that update Java code. Typically added by dependabot. labels Jan 26, 2026
@wildfly-bot
Copy link

wildfly-bot bot commented Jan 26, 2026

WildFly Bot recognized this PR as dependabot dependency update. Please create a WFLY issue and add new comment containing this JIRA link please.

@github-actions github-actions bot added the deps-ok Dependencies have been checked, and there are no significant changes label Jan 26, 2026
@rhusar
Copy link
Member

rhusar commented Jan 27, 2026

@kabir @jasondlee for review and Jira. Thanks; this is the last ping in this iteration :)

@rhusar rhusar requested review from jasondlee and kabir January 27, 2026 11:09
@darranl darranl changed the title Bump version.io.vertx.vertx from 4.5.23 to 4.5.24 [WFLY-21415] Upgrade vertx to 4.5.24 for [CVE-2026-1002] Jan 30, 2026
@darranl
Copy link
Contributor

darranl commented Jan 30, 2026

@rhusar
Copy link
Member

rhusar commented Jan 30, 2026

@jasondlee Kind reminder...

@rhusar
Copy link
Member

rhusar commented Jan 30, 2026

https://issues.redhat.com/browse/WFLY-21415

Thanks @darranl - opened backport for 39.x is #19586

@rhusar rhusar merged commit c39ded6 into main Jan 30, 2026
16 checks passed
@rhusar rhusar deleted the dependabot/maven/version.io.vertx.vertx-4.5.24 branch January 30, 2026 19:50
@rhusar
Copy link
Member

rhusar commented Jan 30, 2026

Thanks @kabir @darranl @jasondlee !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Added by dependabot to pull requests that update a dependency file deps-ok Dependencies have been checked, and there are no significant changes java Pull requests that update Java code. Typically added by dependabot.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants