clj-commons / aleph

Asynchronous streaming communication for Clojure - web server, web client, and raw TCP/UDP
http://aleph.io
MIT License
2.54k stars 241 forks source link

Update dependencies to latest versions #718

Closed DerGuteMoritz closed 7 months ago

DerGuteMoritz commented 7 months ago

Most importantly, update Netty to 4.1.108.Final which includes the fix for https://github.com/netty/netty/issues/13849 as well as various other fixes, particularly HTTP/2 related ones.

bitti commented 6 months ago

Thanks for updating this, since we're currently getting flagged for CVE-2024-29025 in our builds. Can a new release be cut out so we don't have to update this transitive dependency ourselves in every project where we're using Aleph?

We're also eager to try out the effects #723, although it's unrelated to the CVE.