Fix CVE-2025-58057: override transitive Netty to patched netty-bom 4.1.125....

copilot-swe-agent[bot]

16.31.2026 a3374d7f3fe6831fd640ed4fe589e0ab4e6fe920

Fix CVE-2025-58057: override transitive Netty to patched netty-bom 4.1.125.Final

Agent-Logs-Url: https://github.com/OpenIdentityPlatform/OpenDJ/sessions/c03fb27d-b3be-4bcc-8220-a491f941ef15

Co-authored-by: vharseko <6818498+vharseko@users.noreply.github.com>

 pom.xml

@@ -154,6 +154,15 @@
                <scope>import</scope>
            </dependency>

            <!-- Fix CVE-2025-58057: Override transitive Netty to patched version -->
            <dependency>
                <groupId>io.netty</groupId>
                <artifactId>netty-bom</artifactId>
                <version>4.1.125.Final</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>

            <dependency>
                <groupId>com.io7m.jcip</groupId>
                <artifactId>com.io7m.jcip.annotations</artifactId>