Skip to content

Conversation

@timmy-xiao-glean
Copy link
Collaborator

Description:

Context: We want to update netty (GHSA-prj3-ccx8-p6x4), but we do not want to use 4.2.x as we don't want to change permissions to enable jfr due to netty/netty@55461aa#diff-4c5a70e02e4aaa5508712bf0fa4b30ef0688aaf0c5727f33e6f490f8a947aa8b. Little proxy (2.4.2) relies on netty 4.2, so we just downgrade to 2.4.0, but also override their provided netty version with 4.1.127

Test plan:


Change Type

  • Flag-gated development/Internal fix
  • Bug Fix/Enhancement
  • Security or Permissions related change
  • Feature launch

Platform (Choose one if applicable)

  • AWS only change
  • GCP only change

@timmy-xiao-glean timmy-xiao-glean merged commit e14972b into main Oct 7, 2025
1 check passed
@timmy-xiao-glean timmy-xiao-glean deleted the timmyabc branch October 7, 2025 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants