Skip to content

feat(Dependcies): update jetty & pl4j & jackjson#116

Open
halibobo1205 wants to merge 4 commits intodevelopfrom
dependcies/update
Open

feat(Dependcies): update jetty & pl4j & jackjson#116
halibobo1205 wants to merge 4 commits intodevelopfrom
dependcies/update

Conversation

@halibobo1205
Copy link
Copy Markdown
Owner

@halibobo1205 halibobo1205 commented Apr 2, 2026

User description

What does this PR do?

Why are these changes required?

This PR has been tested by:

  • Unit Tests
  • Manual Testing

Follow up

Extra details


CodeAnt-AI Description

Update bundled libraries to remove known security risks

What Changed

  • Updated several shipped libraries, including Jetty, Netty, Jackson, gRPC, Guava, Gson, PF4J, JUnit, and related support packages.
  • Replaced older vulnerable versions with newer releases so the app no longer depends on the affected builds.
  • Added the new library versions to the verified dependency list so builds can continue to be checked against the updated packages.

Impact

✅ Lower risk from known library vulnerabilities
✅ Safer server and network handling
✅ Fewer security warning alerts during dependency scans

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 2, 2026

CodeAnt AI is reviewing your PR.


Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@chatgpt-codex-connector
Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@codeant-ai codeant-ai bot added the size:L This PR changes 100-499 lines, ignoring generated files label Apr 2, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 2, 2026

CodeAnt AI finished reviewing your PR.

@halibobo1205
Copy link
Copy Markdown
Owner Author

@CodeAnt-AI: review

@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 7, 2026

CodeAnt AI is running the review.


Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@codeant-ai codeant-ai bot added size:L This PR changes 100-499 lines, ignoring generated files and removed size:L This PR changes 100-499 lines, ignoring generated files labels Apr 7, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 7, 2026

Sequence Diagram

This PR updates versions and verification metadata for core third party libraries (Jetty, Netty, Jackson, gRPC, PF4J and others), so builds use patched artifacts and the runtime handles network and serialization operations through these safer dependencies.

sequenceDiagram
    participant Developer
    participant Build
    participant DependencyRepo
    participant Application
    participant CoreLibraries
    participant Client

    Developer->>Build: Trigger build with updated dependency versions
    Build->>DependencyRepo: Fetch updated library artifacts
    DependencyRepo-->>Build: Return artifacts for new versions
    Build->>Build: Verify checksums using verification metadata
    Build->>Application: Assemble application with updated libraries

    Client->>Application: Send request to node
    Application->>CoreLibraries: Handle network and data using updated libs
    CoreLibraries-->>Application: Return processed data for response
Loading

Generated by CodeAnt AI

@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 7, 2026

CodeAnt AI finished running the review.


Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@halibobo1205 halibobo1205 changed the title feat(Dependcies): update jetty & netty & pl4j & jackjson feat(Dependcies): update jetty & pl4j & jackjson Apr 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L This PR changes 100-499 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant