Release 0.6.3

Author: KingMob

CHANGES.md

@@ -1,3 +1,9 @@
+### 0.6.3
+
+* Bump Netty to 4.1.94.Final for CVE-2023-34462
+
+Contributions by Matthew Davidson and Stefan van den Oord.
+
 ### 0.6.2
 
 * Fix backwards-compatibility for transport options

README.md

@@ -8,11 +8,11 @@ Aleph exposes data from the network as a [Manifold](https://github.com/clj-commo
 
 Leiningen:
 ```clojure
-[aleph "0.6.2"]
+[aleph "0.6.3"]
 ```
 deps.edn:
 ```clojure
-aleph/aleph {:mvn/version "0.6.2"}
+aleph/aleph {:mvn/version "0.6.3"}
 ;; alternatively
 io.github.clj-commons/aleph {:git/sha "..."}
 ```

deps.edn

@@ -9,23 +9,23 @@
   org.clj-commons/dirigiste {:mvn/version "1.0.3"},
   org.clj-commons/primitive-math {:mvn/version "1.0.0"},
   potemkin/potemkin {:mvn/version "0.4.5"},
-  io.netty/netty-transport {:mvn/version "4.1.89.Final"},
+  io.netty/netty-transport {:mvn/version "4.1.94.Final"},
   io.netty/netty-transport-native-epoll$linux-x86_64
-  {:mvn/version "4.1.89.Final"},
+  {:mvn/version "4.1.94.Final"},
   io.netty/netty-transport-native-epoll$linux-aarch_64
-  {:mvn/version "4.1.89.Final"},
+  {:mvn/version "4.1.94.Final"},
   io.netty/netty-transport-native-kqueue$osx-x86_64
-  {:mvn/version "4.1.89.Final"},
+  {:mvn/version "4.1.94.Final"},
   io.netty.incubator/netty-incubator-transport-native-io_uring$linux-x86_64
   {:mvn/version "0.0.18.Final"},
   io.netty.incubator/netty-incubator-transport-native-io_uring$linux-aarch_64
   {:mvn/version "0.0.18.Final"},
-  io.netty/netty-codec {:mvn/version "4.1.89.Final"},
-  io.netty/netty-codec-http {:mvn/version "4.1.89.Final"},
-  io.netty/netty-handler {:mvn/version "4.1.89.Final"},
-  io.netty/netty-handler-proxy {:mvn/version "4.1.89.Final"},
-  io.netty/netty-resolver {:mvn/version "4.1.89.Final"},
-  io.netty/netty-resolver-dns {:mvn/version "4.1.89.Final"},
+  io.netty/netty-codec {:mvn/version "4.1.94.Final"},
+  io.netty/netty-codec-http {:mvn/version "4.1.94.Final"},
+  io.netty/netty-handler {:mvn/version "4.1.94.Final"},
+  io.netty/netty-handler-proxy {:mvn/version "4.1.94.Final"},
+  io.netty/netty-resolver {:mvn/version "4.1.94.Final"},
+  io.netty/netty-resolver-dns {:mvn/version "4.1.94.Final"},
   metosin/malli
   {:mvn/version "0.10.4", :exclusions [org.clojure/clojure]}},
  :aliases

examples/project.clj

@@ -1,5 +1,5 @@
-(defproject aleph.examples "0.6.2"
-  :dependencies [[aleph "0.6.2"]
+(defproject aleph.examples "0.6.3"
+  :dependencies [[aleph "0.6.3"]
                  [gloss "0.2.6"]
                  [metosin/reitit "0.5.18"]
                  [org.clojure/clojure "1.11.1"]

project.clj

@@ -1,7 +1,7 @@
 ;; you'll need to run the script at `deps/lein-to-deps` after changing any dependencies
 (def netty-version "4.1.94.Final")
 
-(defproject aleph (or (System/getenv "PROJECT_VERSION") "0.6.2")
+(defproject aleph (or (System/getenv "PROJECT_VERSION") "0.6.3")
   :description "A framework for asynchronous communication"
   :url "https://github.com/clj-commons/aleph"
   :license {:name "MIT License"}

src/aleph/http/server.clj

@@ -113,7 +113,7 @@
       (map #(HttpHeaders/newEntity %) ["Server" "Connection" "Date" "Content-Type"])
 
       [server-value keep-alive-value close-value]
-      (map #(HttpHeaders/newEntity %) ["Aleph/0.6.2" "Keep-Alive" "Close"])]
+      (map #(HttpHeaders/newEntity %) ["Aleph/0.6.3" "Keep-Alive" "Close"])]
   (defn send-response
     [^ChannelHandlerContext ctx keep-alive? ssl? error-handler rsp]
     (let [[^HttpResponse rsp body]