This is an automated email from the ASF dual-hosted git repository.

shoothzj pushed a commit to branch branch-4.16
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git


The following commit(s) were added to refs/heads/branch-4.16 by this push:
     new aff2fb6634 [branch-4.16] cherry-pick #4157 #4204 #4224 #4265 update 
netty and vertx (#4398)
aff2fb6634 is described below

commit aff2fb66349fa96e8b23ec25908f681338cede30
Author: zhiheng123 <903292...@qq.com>
AuthorDate: Tue May 28 19:51:43 2024 +0800

    [branch-4.16] cherry-pick #4157 #4204 #4224 #4265 update netty and vertx 
(#4398)
    
    * Upgrade Netty to 4.1.104.Final and io_uring to 0.0.24.Final (#4157)
    
    (cherry-pick from commit 6f5d75655066537ff51f6bb0b56831242ffe7363)
    
    * Use netty-bom for aligning netty library versions, add epoll for 
linux-aarch_64 (#4204)
    
    (cherry-pick from commit bb9da9b8e1a215f2e7f575af68e867868d2eec88)
    
    * Upgrade Netty to 4.1.107.Final and io_uring to 0.0.25.Final (#4224)
    
    Co-authored-by: ZhangJian He <shoot...@gmail.com>
    
    (cherry-pick from commit 298093553e2617dbd8c6d1dca241913854180bcf)
    Conflicts(mockito version):
        pom.xml
    
    * Upgrade vertx-core to 4.5.7 to address CVE-2024-1300 (#4265)
    
    - Upgrade vertx-core to 4.5.7 to address CVE-2024-1300
    - Depends on merging #4264 before this PR (since Netty 4.1.108.Final is 
required for vertx-core 4.5.7)
    
    (cherry-pick from commit bee9b485e0b86f94fcdf5d96650162a9abbb25df)
    Conflicts(zookeeper version):
        pom.xml
    
    ---------
    
    Co-authored-by: Lari Hotari <lhot...@users.noreply.github.com>
    Co-authored-by: sullis <git...@seansullivan.com>
---
 .../src/main/resources/LICENSE-all.bin.txt         | 119 +++++++++++----------
 .../src/main/resources/LICENSE-bkctl.bin.txt       | 105 +++++++++---------
 .../src/main/resources/LICENSE-server.bin.txt      | 119 +++++++++++----------
 .../src/main/resources/NOTICE-all.bin.txt          |  49 ++++-----
 .../src/main/resources/NOTICE-bkctl.bin.txt        |  45 ++++----
 .../src/main/resources/NOTICE-server.bin.txt       |  49 ++++-----
 bookkeeper-server/pom.xml                          |   7 +-
 pom.xml                                            |  88 ++-------------
 8 files changed, 263 insertions(+), 318 deletions(-)

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt 
b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index ab8ea8bad3..e18cef2e07 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -217,31 +217,32 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar [11]
-- lib/io.netty-netty-common-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.94.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.94.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.21.Final.jar
 [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar [11]
+- lib/io.netty-netty-common-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.108.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.108.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.25.Final.jar
 [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.15.0.jar [12]
@@ -250,11 +251,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.3.8.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.3.8.jar [14]
-- lib/io.vertx-vertx-core-4.3.8.jar [15]
-- lib/io.vertx-vertx-web-4.3.8.jar [16]
-- lib/io.vertx-vertx-web-common-4.3.8.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.7.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.7.jar [14]
+- lib/io.vertx-vertx-core-4.5.7.jar [15]
+- lib/io.vertx-vertx-web-4.5.7.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.7.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.18.0.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.18.0.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j-impl-2.18.0.jar [17]
@@ -331,7 +332,7 @@ Apache Software License, Version 2.
 [8] Source available at 
https://github.com/apache/commons-io/tree/rel/commons-io-2.7
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at 
https://github.com/apache/commons-logging/tree/commons-logging-1.1.1
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.94.Final
+[11] Source available at 
https://github.com/netty/netty/tree/netty-4.1.108.Final
 [12] Source available at 
https://github.com/prometheus/client_java/tree/parent-0.15.0
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/4.3.2
 [14] Source available at 
https://github.com/vert-x3/vertx-bridge-common/tree/4.3.2
@@ -371,9 +372,9 @@ Apache Software License, Version 2.
 [53] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
 
 
------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.94.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.108.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the extensions to Java 
Collections Framework which has
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the extensions to Java 
Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
@@ -382,7 +383,7 @@ been derived from the works by JSR-166 EG, Doug Lea, and 
Jason T. Greene:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * 
http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
@@ -390,7 +391,7 @@ Base64 Encoder and Decoder, which can be obtained at:
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Webbit', an event based
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
@@ -398,7 +399,7 @@ WebSocket and HTTP server, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
@@ -406,7 +407,7 @@ facade for Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
@@ -416,7 +417,7 @@ Java SE, which can be obtained at:
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
@@ -424,7 +425,7 @@ and decompression library written by Matthew J. Francis. It 
can be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input 
string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
@@ -433,7 +434,7 @@ a constant-size alphabet written by Yuta Mori. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
@@ -441,7 +442,7 @@ Java Concurrency Tools for the JVM, which can be obtained 
at:
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
@@ -449,7 +450,7 @@ pure Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
@@ -457,7 +458,7 @@ decoding data in LZF format, written by Tatu Saloranta. It 
can be obtained at:
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
@@ -465,7 +466,7 @@ and decompression library written by Adrien Grand. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lzma-java', a 
LZMA Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lzma-java', 
a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
@@ -473,7 +474,7 @@ and decompression library, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
@@ -481,7 +482,7 @@ and decompression library written by William Kinney. It can 
be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
@@ -489,7 +490,7 @@ Google's data interchange format, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Bouncy Castle 
Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Bouncy 
Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
@@ -498,7 +499,7 @@ equivalent functionality.  It can be obtained at:
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Snappy', a 
compression library produced
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Snappy', a 
compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
@@ -506,7 +507,7 @@ by Google Inc, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
@@ -514,7 +515,7 @@ serialization API, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Caliper', 
Google's micro-
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Caliper', 
Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
@@ -522,7 +523,7 @@ benchmarking framework, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
@@ -530,7 +531,7 @@ framework, which can be obtained at:
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
@@ -538,7 +539,7 @@ can be obtained at:
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
@@ -546,7 +547,7 @@ non-blocking XML processor, which can be obtained at:
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
@@ -554,7 +555,7 @@ the HTTP/2 HPACK algorithm written by Twitter. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
@@ -562,7 +563,7 @@ the HTTP/2 HPACK algorithm written by Cory Benfield. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained 
at:
 
   * LICENSE:
@@ -570,7 +571,7 @@ the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. 
It can be obtained at
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
@@ -579,7 +580,7 @@ provides utilities for the java.lang API, which can be 
obtained at:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the 
Maven build.
 
   * LICENSE:
@@ -587,7 +588,7 @@ that provides an easy way to ensure a user has everything 
necessary to run the M
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt 
b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
index 1e6c1b9518..f330c283f4 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -217,29 +217,30 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar [11]
-- lib/io.netty-netty-common-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.94.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.21.Final.jar
 [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar [11]
+- lib/io.netty-netty-common-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.108.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.25.Final.jar
 [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar [11]
 - lib/org.apache.logging.log4j-log4j-api-2.18.0.jar [16]
 - lib/org.apache.logging.log4j-log4j-core-2.18.0.jar [16]
 - lib/org.apache.logging.log4j-log4j-slf4j-impl-2.18.0.jar [16]
@@ -302,7 +303,7 @@ Apache Software License, Version 2.
 [8] Source available at 
https://github.com/apache/commons-io/tree/rel/commons-io-2.7
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at 
https://github.com/apache/commons-logging/tree/commons-logging-1.1.1
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.94.Final
+[11] Source available at 
https://github.com/netty/netty/tree/netty-4.1.108.Final
 [16] Source available at 
https://github.com/apache/logging-log4j2/tree/rel/2.18.0
 [18] Source available at 
https://github.com/apache/commons-collections/tree/collections-4.1
 [19] Source available at https://github.com/apache/commons-lang/tree/LANG_3_6
@@ -333,9 +334,9 @@ Apache Software License, Version 2.
 [52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
 
 
------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.94.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.108.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the extensions to Java 
Collections Framework which has
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the extensions to Java 
Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
@@ -344,7 +345,7 @@ been derived from the works by JSR-166 EG, Doug Lea, and 
Jason T. Greene:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * 
http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
@@ -352,7 +353,7 @@ Base64 Encoder and Decoder, which can be obtained at:
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Webbit', an event based
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
@@ -360,7 +361,7 @@ WebSocket and HTTP server, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
@@ -368,7 +369,7 @@ facade for Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
@@ -378,7 +379,7 @@ Java SE, which can be obtained at:
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
@@ -386,7 +387,7 @@ and decompression library written by Matthew J. Francis. It 
can be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input 
string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
@@ -395,7 +396,7 @@ a constant-size alphabet written by Yuta Mori. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
@@ -403,7 +404,7 @@ Java Concurrency Tools for the JVM, which can be obtained 
at:
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
@@ -411,7 +412,7 @@ pure Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
@@ -419,7 +420,7 @@ decoding data in LZF format, written by Tatu Saloranta. It 
can be obtained at:
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
@@ -427,7 +428,7 @@ and decompression library written by Adrien Grand. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lzma-java', a 
LZMA Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lzma-java', 
a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
@@ -435,7 +436,7 @@ and decompression library, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
@@ -443,7 +444,7 @@ and decompression library written by William Kinney. It can 
be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
@@ -451,7 +452,7 @@ Google's data interchange format, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Bouncy Castle 
Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Bouncy 
Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
@@ -460,7 +461,7 @@ equivalent functionality.  It can be obtained at:
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Snappy', a 
compression library produced
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Snappy', a 
compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
@@ -468,7 +469,7 @@ by Google Inc, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
@@ -476,7 +477,7 @@ serialization API, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Caliper', 
Google's micro-
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Caliper', 
Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
@@ -484,7 +485,7 @@ benchmarking framework, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
@@ -492,7 +493,7 @@ framework, which can be obtained at:
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
@@ -500,7 +501,7 @@ can be obtained at:
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
@@ -508,7 +509,7 @@ non-blocking XML processor, which can be obtained at:
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
@@ -516,7 +517,7 @@ the HTTP/2 HPACK algorithm written by Twitter. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
@@ -524,7 +525,7 @@ the HTTP/2 HPACK algorithm written by Cory Benfield. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained 
at:
 
   * LICENSE:
@@ -532,7 +533,7 @@ the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. 
It can be obtained at
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
@@ -541,7 +542,7 @@ provides utilities for the java.lang API, which can be 
obtained at:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the 
Maven build.
 
   * LICENSE:
@@ -549,7 +550,7 @@ that provides an easy way to ensure a user has everything 
necessary to run the M
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt 
b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index f6f8d9783d..73cff40678 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -217,31 +217,32 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar [11]
-- lib/io.netty-netty-common-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.94.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.94.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.94.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
 [11]
-- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.21.Final.jar
 [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar [11]
+- lib/io.netty-netty-common-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.108.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.108.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.108.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
 [11]
+- 
lib/io.netty.incubator-netty-incubator-transport-classes-io_uring-0.0.25.Final.jar
 [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.15.0.jar [12]
@@ -250,11 +251,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.3.8.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.3.8.jar [14]
-- lib/io.vertx-vertx-core-4.3.8.jar [15]
-- lib/io.vertx-vertx-web-4.3.8.jar [16]
-- lib/io.vertx-vertx-web-common-4.3.8.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.7.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.7.jar [14]
+- lib/io.vertx-vertx-core-4.5.7.jar [15]
+- lib/io.vertx-vertx-web-4.5.7.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.7.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.18.0.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.18.0.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j-impl-2.18.0.jar [17]
@@ -327,7 +328,7 @@ Apache Software License, Version 2.
 [8] Source available at 
https://github.com/apache/commons-io/tree/rel/commons-io-2.7
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at 
https://github.com/apache/commons-logging/tree/commons-logging-1.1.1
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.94.Final
+[11] Source available at 
https://github.com/netty/netty/tree/netty-4.1.108.Final
 [12] Source available at 
https://github.com/prometheus/client_java/tree/parent-0.15.0
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/4.3.2
 [14] Source available at 
https://github.com/vert-x3/vertx-bridge-common/tree/4.3.2
@@ -366,9 +367,9 @@ Apache Software License, Version 2.
 [52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
 
 
------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.94.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.108.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the extensions to Java 
Collections Framework which has
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the extensions to Java 
Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
@@ -377,7 +378,7 @@ been derived from the works by JSR-166 EG, Doug Lea, and 
Jason T. Greene:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * 
http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
@@ -385,7 +386,7 @@ Base64 Encoder and Decoder, which can be obtained at:
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Webbit', an event based
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
@@ -393,7 +394,7 @@ WebSocket and HTTP server, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
@@ -401,7 +402,7 @@ facade for Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
@@ -411,7 +412,7 @@ Java SE, which can be obtained at:
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
@@ -419,7 +420,7 @@ and decompression library written by Matthew J. Francis. It 
can be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input 
string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
@@ -428,7 +429,7 @@ a constant-size alphabet written by Yuta Mori. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
@@ -436,7 +437,7 @@ Java Concurrency Tools for the JVM, which can be obtained 
at:
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JZlib', a 
re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
@@ -444,7 +445,7 @@ pure Java, which can be obtained at:
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 
'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
@@ -452,7 +453,7 @@ decoding data in LZF format, written by Tatu Saloranta. It 
can be obtained at:
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lz4', a LZ4 
Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
@@ -460,7 +461,7 @@ and decompression library written by Adrien Grand. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'lzma-java', a 
LZMA Java compression
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'lzma-java', 
a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
@@ -468,7 +469,7 @@ and decompression library, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
@@ -476,7 +477,7 @@ and decompression library written by William Kinney. It can 
be obtained at:
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of and 
optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
@@ -484,7 +485,7 @@ Google's data interchange format, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Bouncy Castle 
Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Bouncy 
Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
@@ -493,7 +494,7 @@ equivalent functionality.  It can be obtained at:
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Snappy', a 
compression library produced
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Snappy', a 
compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
@@ -501,7 +502,7 @@ by Google Inc, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'JBoss 
Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
@@ -509,7 +510,7 @@ serialization API, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Caliper', 
Google's micro-
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Caliper', 
Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
@@ -517,7 +518,7 @@ benchmarking framework, which can be obtained at:
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
@@ -525,7 +526,7 @@ framework, which can be obtained at:
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Apache 
Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
@@ -533,7 +534,7 @@ can be obtained at:
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
+lib/io.netty-netty-codec-4.1.108.Final.jar optionally depends on 'Aalto XML', 
an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
@@ -541,7 +542,7 @@ non-blocking XML processor, which can be obtained at:
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
@@ -549,7 +550,7 @@ the HTTP/2 HPACK algorithm written by Twitter. It can be 
obtained at:
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
@@ -557,7 +558,7 @@ the HTTP/2 HPACK algorithm written by Cory Benfield. It can 
be obtained at:
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified version of 
'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified version of 
'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained 
at:
 
   * LICENSE:
@@ -565,7 +566,7 @@ the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. 
It can be obtained at
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.108.Final.jar contains a modified portion of 
'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
@@ -574,7 +575,7 @@ provides utilities for the java.lang API, which can be 
obtained at:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the Maven wrapper scripts 
from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the 
Maven build.
 
   * LICENSE:
@@ -582,7 +583,7 @@ that provides an easy way to ensure a user has everything 
necessary to run the M
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.94.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.108.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt 
b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
index 6019c6e90a..99d54b14c5 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
@@ -23,30 +23,31 @@ LongAdder), which was released with the following comments:
     http://creativecommons.org/publicdomain/zero/1.0/
 
 
------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.94.Final.jar
-- lib/io.netty-netty-codec-4.1.94.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar
-- lib/io.netty-netty-common-4.1.94.Final.jar
-- lib/io.netty-netty-handler-4.1.94.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar
-- lib/io.netty-netty-resolver-4.1.94.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.94.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar
-- lib/io.netty-netty-transport-4.1.94.Final.jar
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar
+- lib/io.netty-netty-buffer-4.1.108.Final.jar
+- lib/io.netty-netty-codec-4.1.108.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar
+- lib/io.netty-netty-common-4.1.108.Final.jar
+- lib/io.netty-netty-handler-4.1.108.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar
+- lib/io.netty-netty-resolver-4.1.108.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.108.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar
+- lib/io.netty-netty-transport-4.1.108.Final.jar
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt 
b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
index 99c563a0ae..e090b812e2 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
@@ -5,28 +5,29 @@ This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).
 
 
------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.94.Final.jar
-- lib/io.netty-netty-codec-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar
-- lib/io.netty-netty-common-4.1.94.Final.jar
-- lib/io.netty-netty-handler-4.1.94.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar
-- lib/io.netty-netty-resolver-4.1.94.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar
-- lib/io.netty-netty-transport-4.1.94.Final.jar
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar
+- lib/io.netty-netty-buffer-4.1.108.Final.jar
+- lib/io.netty-netty-codec-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar
+- lib/io.netty-netty-common-4.1.108.Final.jar
+- lib/io.netty-netty-handler-4.1.108.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar
+- lib/io.netty-netty-resolver-4.1.108.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar
+- lib/io.netty-netty-transport-4.1.108.Final.jar
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt 
b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
index 848bd55ef2..0ae5fc921f 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
@@ -5,30 +5,31 @@ This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).
 
 
------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.94.Final.jar
-- lib/io.netty-netty-codec-4.1.94.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http-4.1.94.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.94.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.94.Final.jar
-- lib/io.netty-netty-common-4.1.94.Final.jar
-- lib/io.netty-netty-handler-4.1.94.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.94.Final.jar
-- lib/io.netty-netty-resolver-4.1.94.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.94.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-linux-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-aarch_64.jar 
[11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.61.Final-windows-x86_64.jar 
[11]
-- lib/io.netty-netty-tcnative-classes-2.0.61.Final.jar
-- lib/io.netty-netty-transport-4.1.94.Final.jar
-- lib/io.netty-netty-transport-classes-epoll-4.1.94.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.94.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
-- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.94.Final.jar
+- lib/io.netty-netty-buffer-4.1.108.Final.jar
+- lib/io.netty-netty-codec-4.1.108.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http-4.1.108.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.108.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.108.Final.jar
+- lib/io.netty-netty-common-4.1.108.Final.jar
+- lib/io.netty-netty-handler-4.1.108.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.108.Final.jar
+- lib/io.netty-netty-resolver-4.1.108.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.108.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar 
[11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar 
[11]
+- lib/io.netty-netty-tcnative-classes-2.0.65.Final.jar
+- lib/io.netty-netty-transport-4.1.108.Final.jar
+- lib/io.netty-netty-transport-classes-epoll-4.1.108.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-x86_64.jar
+- 
lib/io.netty.incubator-netty-incubator-transport-native-io_uring-0.0.25.Final-linux-aarch_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.108.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-server/pom.xml b/bookkeeper-server/pom.xml
index e1d5e7f738..48058ac546 100644
--- a/bookkeeper-server/pom.xml
+++ b/bookkeeper-server/pom.xml
@@ -82,7 +82,12 @@
         <groupId>io.netty</groupId>
         <artifactId>netty-transport-native-epoll</artifactId>
         <classifier>linux-x86_64</classifier>
-      </dependency>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-epoll</artifactId>
+      <classifier>linux-aarch_64</classifier>
+    </dependency>
     <dependency>
       <groupId>io.netty</groupId>
       <artifactId>netty-tcnative-boringssl-static</artifactId>
diff --git a/pom.xml b/pom.xml
index 680d711b6c..ded193856f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -154,9 +154,8 @@
     <log4j.version>2.18.0</log4j.version>
     <lz4.version>1.3.0</lz4.version>
     <mockito.version>3.12.4</mockito.version>
-    <netty.version>4.1.94.Final</netty.version>
-    <netty-boringssl.version>2.0.61.Final</netty-boringssl.version>
-    <netty-iouring.version>0.0.21.Final</netty-iouring.version>
+    <netty.version>4.1.108.Final</netty.version>
+    <netty-iouring.version>0.0.25.Final</netty-iouring.version>
     <ostrich.version>9.1.3</ostrich.version>
     <powermock.version>2.0.9</powermock.version>
     <prometheus.version>0.15.0</prometheus.version>
@@ -174,7 +173,7 @@
     <spotbugs-annotations.version>4.6.0</spotbugs-annotations.version>
     <javax-annotations-api.version>1.3.2</javax-annotations-api.version>
     <testcontainers.version>1.19.4</testcontainers.version>
-    <vertx.version>4.3.8</vertx.version>
+    <vertx.version>4.5.7</vertx.version>
     <zookeeper.version>3.8.3</zookeeper.version>
     <snappy.version>1.1.10.5</snappy.version>
     <jctools.version>2.1.2</jctools.version>
@@ -375,82 +374,12 @@
         </exclusions>
       </dependency>
 
-      <!-- netty dependencies -->
       <dependency>
         <groupId>io.netty</groupId>
-        <artifactId>netty-common</artifactId>
+        <artifactId>netty-bom</artifactId>
         <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-buffer</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-transport</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-handler</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-transport-native-epoll</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-transport-native-epoll</artifactId>
-        <version>${netty.version}</version>
-        <classifier>linux-x86_64</classifier>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-codec-dns</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-codec-http</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-codec-http2</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-codec-socks</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-handler-proxy</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-resolver</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-resolver-dns</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-transport-native-unix-common</artifactId>
-        <version>${netty.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>io.netty</groupId>
-        <artifactId>netty-tcnative-boringssl-static</artifactId>
-        <version>${netty-boringssl.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>io.netty.incubator</groupId>
@@ -469,6 +398,11 @@
         <version>${netty-iouring.version}</version>
         <classifier>linux-aarch_64</classifier>
       </dependency>
+      <dependency>
+        <groupId>io.netty.incubator</groupId>
+        <artifactId>netty-incubator-transport-classes-io_uring</artifactId>
+        <version>${netty-iouring.version}</version>
+      </dependency>
 
       <!-- grpc dependencies -->
       <dependency>

Reply via email to