Build(deps): Bump io.netty:netty-bom from 4.1.135.Final to 4.2.16.Final

[dependabot]

Bumps io.netty:netty-bom from 4.1.135.Final to 4.2.16.Final.

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

• Document Java 9 requirement for io_uring by @​jchambers in netty/netty#16904
• Add BlockHound exception for DnsQueryIdSpace by @​violetagg in netty/netty#16896
• Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @​skyguard1 in netty/netty#16901
• Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @​franz1981 in netty/netty#16766
• Use Splittable/ThreadLocalRandom to generate bulk data in tests by @​chrisvest in netty/netty#16808
• Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @​netty-project-bot in netty/netty#16909
• Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @​netty-project-bot in netty/netty#16910
• Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @​netty-project-bot in netty/netty#16919
• IoUring: fix io_uring datagram writes with non-zero readerIndex by @​dreamlike-ocean in netty/netty#16905
• Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @​franz1981 in netty/netty#16848
• IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @​wineway in netty/netty#16739
• Avoid logging exceptions that tests ignore by @​chrisvest in netty/netty#16891
• Reject control characters at the boundary of HTTP method names by @​daguimu in netty/netty#16723
• IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @​dreamlike-ocean in netty/netty#16929
• Try to fix/stabilize a number of flaky tests by @​chrisvest in netty/netty#16934
• Fix propagation of startTls for client SslContext handlers by @​skyguard1 in netty/netty#16931
• Update to latest tcnative release by @​normanmaurer in netty/netty#16936
• Move test to shared testsuite by @​normanmaurer in netty/netty#16928
• [Refactor] Useful helper method getOrDefault & cleaner abstraction by @​sanjomo in netty/netty#16927
• Make permessage-deflate server window size and memLevel configurable by @​fru1tworld in netty/netty#16809
• Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @​HwangRock in netty/netty#16950
• Fix HTTP 2 PUSH_PROMISE stream association validation by @​skyguard1 in netty/netty#16952
• Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @​daguimu in netty/netty#16951
• Http3FrameCodec handle fragmented payloads when skipping unknown frames by @​skyguard1 in netty/netty#16960
• Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @​hyperxpro in netty/netty#16932
• Strictly validate MQTT UTF-8 Encoded String by @​skyguard1 in netty/netty#16939
• Stop DateFormatter trailing token from running past the parse end by @​daguimu in netty/netty#16958
• IpFilter: Deprecate constructor which use accept by default by @​normanmaurer in netty/netty#16961
• Add RFC 10008 QUERY Method support by @​desiderantes in netty/netty#16966
• Correctly release and fail queued traffic-shaping writes on close by @​skyguard1 in netty/netty#16959
• Reject control characters at the boundary of the HTTP version token by @​HwangRock in netty/netty#16971
• FlowControlHandler: respect auto-read when toggled while dequeueing by @​schiemon in netty/netty#16949
• Fix leak in ReferenceCountedOpenSslEngine.addCredential by @​jmcrawford45 in netty/netty#16979
• IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @​husseinvr97 in netty/netty#16982
• Fix typo in AbstractSniHandler Javadoc by @​coderbruis in netty/netty#16988
• Fix client/server inconsistency in SslCredential support matrix by @​jmcrawford45 in netty/netty#16990
• Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @​gavinbunney in netty/netty#16947
• Use Ticker in Http2MaxRstFrameListener for testability by @​skyguard1 in netty/netty#16993
• Reset UTF-8 decode state on CR in StompSubframeDecoder by @​vasiliy-mikhailov in netty/netty#16991
• FastLz: Guard decompression against truncated input by @​yawkat in netty/netty#17000
• Reject non-token characters in HTTP/2 header names by @​daguimu in netty/netty#16762
• Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @​netty-project-bot in netty/netty#17029
• Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @​sanjomo in netty/netty#17027
• Implement Adaptive Cumulator by @​shivaspeaks in netty/netty#16731
• Allow WebSocket extension negotiation to be disabled per response by @​mkurz in netty/netty#17030
• Support QPACK sensitivity detector for Never Indexed header fields by @​skyguard1 in netty/netty#17026
• Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @​skyguard1 in netty/netty#17037
• Pin github actions to reduce risk by @​normanmaurer in netty/netty#17043

... (truncated)

Commits

• 3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
• 63bbb2c Update rust toolchain - add required parameters
• ac06c1b Update rust toolchain
• 5b68c61 Merge branches from forks (#17063)
• de5d276 Update lz4-java to 1.11.1 (#17061)
• da22048 Pin github actions to reduce risk (#17043)
• 0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
• 7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
• 06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
• bc4b983 Implement Adaptive Cumulator (#16731)
• Additional commits viewable in compare view

[velo]

@dependabot rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.