diff --git a/ballerina/Ballerina.toml b/ballerina/Ballerina.toml index 3050a629a..c4b588144 100644 --- a/ballerina/Ballerina.toml +++ b/ballerina/Ballerina.toml @@ -1,7 +1,7 @@ [package] org = "ballerina" name = "websocket" -version = "2.6.0" +version = "2.6.1" authors = ["Ballerina"] keywords = ["ws", "network", "bi-directional", "streaming", "service", "client"] repository = "https://github.com/ballerina-platform/module-ballerina-websocket" @@ -12,14 +12,14 @@ distribution = "2201.4.0" [[platform.java11.dependency]] groupId = "io.ballerina.stdlib" artifactId = "websocket-native" -version = "2.6.0" -path = "../native/build/libs/websocket-native-2.6.0.jar" +version = "2.6.1" +path = "../native/build/libs/websocket-native-2.6.1-SNAPSHOT.jar" [[platform.java11.dependency]] groupId = "io.ballerina.stdlib" artifactId = "http-native" -version = "2.6.0" -path = "./lib/http-native-2.6.0.jar" +version = "2.6.2" +path = "./lib/http-native-2.6.2-20231013-151500-b205e1d.jar" [[platform.java11.dependency]] groupId = "io.ballerina.stdlib" @@ -36,51 +36,51 @@ path = "./lib/constraint-native-1.1.0.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-common" -version = "4.1.86.Final" -path = "./lib/netty-common-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-common-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-buffer" -version = "4.1.86.Final" -path = "./lib/netty-buffer-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-buffer-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-transport" -version = "4.1.86.Final" -path = "./lib/netty-transport-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-transport-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-resolver" -version = "4.1.86.Final" -path = "./lib/netty-resolver-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-resolver-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-handler" -version = "4.1.86.Final" -path = "./lib/netty-handler-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-handler-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-codec-http" -version = "4.1.86.Final" -path = "./lib/netty-codec-http-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-codec-http-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-codec" -version = "4.1.86.Final" -path = "./lib/netty-codec-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-codec-4.1.100.Final.jar" [[platform.java11.dependency]] groupId = "io.netty" artifactId = "netty-handler-proxy" -version = "4.1.86.Final" -path = "./lib/netty-handler-proxy-4.1.86.Final.jar" +version = "4.1.100.Final" +path = "./lib/netty-handler-proxy-4.1.100.Final.jar" [[platform.java11.dependency]] -path = "../test-utils/build/libs/websocket-test-utils-2.6.0.jar" +path = "../test-utils/build/libs/websocket-test-utils-2.6.1-SNAPSHOT.jar" scope = "testOnly" diff --git a/ballerina/CompilerPlugin.toml b/ballerina/CompilerPlugin.toml index 47ace53c7..c359995b5 100644 --- a/ballerina/CompilerPlugin.toml +++ b/ballerina/CompilerPlugin.toml @@ -3,4 +3,4 @@ id = "websocket-compiler-plugin" class = "io.ballerina.stdlib.websocket.plugin.WebSocketCompilerPlugin" [[dependency]] -path = "../compiler-plugin/build/libs/websocket-compiler-plugin-2.6.0.jar" +path = "../compiler-plugin/build/libs/websocket-compiler-plugin-2.6.1-SNAPSHOT.jar" diff --git a/changelog.md b/changelog.md index bb0d7ad34..af9474315 100644 --- a/changelog.md +++ b/changelog.md @@ -5,6 +5,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), ## [Unreleased] +### Fixed +- [Address netty vulnerability: CVE-2023-4586](https://github.com/ballerina-platform/ballerina-standard-library/issues/4908) + +## [2.6.0] - 2023-01-20 + ### Added - [Implement dispatching to custom remote functions](https://github.com/ballerina-platform/ballerina-standard-library/issues/3670) diff --git a/gradle.properties b/gradle.properties index 720b005ac..8052aa746 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,9 +1,9 @@ org.gradle.caching=true group=io.ballerina.stdlib -version=2.6.0 +version=2.6.1-SNAPSHOT ballerinaLangVersion=2201.4.0 ballerinaTomlParserVersion=1.2.2 -nettyVersion=4.1.86.Final +nettyVersion=4.1.100.Final slf4jVersion=1.7.30 puppycrawlCheckstyleVersion=8.18 unirestVersion=1.4.9 @@ -12,7 +12,7 @@ ballerinaGradlePluginVersion=1.0.0 gsonVersion=2.8.8 stdlibIoVersion=1.4.0 -stdlibHttpVersion=2.6.0 +stdlibHttpVersion=2.6.2 stdlibRegexVersion=1.3.2 stdlibOsVersion=1.6.0 stdlibTimeVersion=2.2.3 @@ -24,7 +24,7 @@ stdlibMimeVersion=2.6.0 stdlibCacheVersion=3.4.0 stdlibAuthVersion=2.6.0 stdlibJwtVersion=2.6.0 -stdlibOAuth2Version=2.6.0 +stdlibOAuth2Version=2.6.1 stdlibConstraintVersion=1.1.0 stdlibUuidVersion=1.4.0 stdlibUrlVersion=2.2.3