What's Changed
- SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in #16814
- Make HTTP/2 frame hashCode consistent with equals by @daguimu in #16692
- Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in #16915
- FlowControlHandler: Fix autoRead behavior by @chrisvest in #16912
- Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in #16911
- MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in #16916
- MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in #16813
- Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in #16933
- Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in #16941
- Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in #16955
- Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in #16957
- Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in #16964
- Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in #16965
- Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in #16968
- Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in #16973
- Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in #16978
- Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in #16976
- Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in #16983
- IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in #16989
- Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in #16995
- Auto-port 4.1: Reconcile
AbstractCoalescingBufferQueuereadableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in #16997 - Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in #16986
- Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in #17003
- Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in #17017
- FastLz: Guard decompression against truncated input (#17000) by @chrisvest in #17015
- Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in #17020
- Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in #17022
- Update lz4-java to 1.11.1 by @yawkat in #17060
- Pin github actions to reduce risk (#17043) by @normanmaurer in #17044
- Merge branches from forks (#17063) by @normanmaurer in #17065
Full Changelog: netty-4.1.135.Final...netty-4.1.136.Final