From 75385c7a79d77bbda401c2f7f037dd89f746cff2 Mon Sep 17 00:00:00 2001
From: Stian Sandvold <stian@dhis2.org>
Date: Sun, 31 May 2026 12:22:16 +0200
Subject: [PATCH] fix(deps): align all io.netty:* to 4.2.13.Final via netty-bom

Bumps netty-all 4.2.1.Final -> 4.2.13.Final and imports netty-bom so that
every io.netty:* module on the classpath resolves to a single, consistent
version. Without the BOM the netty-all uber jar mixes with older individual
netty modules pulled transitively (e.g. via Artemis and reactor-netty),
which causes runtime errors such as AbstractMethodError and
NoClassDefFoundError (e.g. io/netty/util/LeakPresenceDetector).

This mirrors the alignment already on the 2.41 and 2.42 branches and closes
the same gap on 2.43. It also unblocks the reactor-netty-http 1.3.5 upgrade
(#23878), which references netty classes only present in newer 4.2.x.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 dhis-2/pom.xml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/dhis-2/pom.xml b/dhis-2/pom.xml
index 4734a8c41988..051fa173e77d 100644
--- a/dhis-2/pom.xml
+++ b/dhis-2/pom.xml
@@ -175,7 +175,7 @@
 
     <!-- Apache Artemis -->
     <artemis-jakarta.version>2.42.0</artemis-jakarta.version>
-    <netty-all.version>4.2.1.Final</netty-all.version>
+    <netty-all.version>4.2.13.Final</netty-all.version>
     <classgraph.version>4.8.184</classgraph.version>
 
     <!-- SMS/SMPP -->
@@ -1471,6 +1471,17 @@
         <artifactId>netty-all</artifactId>
         <version>${netty-all.version}</version>
       </dependency>
+      <!-- Align every io.netty:* artifact (incl. modules Artemis pulls transitively,
+           e.g. netty-codec-haproxy / netty-transport-classes-*) to the same version as
+           netty-all. Without this, the netty-all uber jar mixes with older individual
+           netty modules on the classpath, causing AbstractMethodError at runtime. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty-all.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>io.github.classgraph</groupId>
         <artifactId>classgraph</artifactId>