From 22e42f4d88dec7c873320bc37a0660dfde017384 Mon Sep 17 00:00:00 2001
From: Reid McKenzie <reid@divebell.com>
Date: Tue, 4 Jan 2022 13:24:19 -0700
Subject: [PATCH] [#589] Experiment with upgrading netty to JDK11+

---
 pom.xml | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index e31de89ba..9868fdf68 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,6 +42,7 @@
     <jsoup.version>1.14.2</jsoup.version>
     <tika.version>1.22</tika.version>
     <jackson.version>2.12.1</jackson.version>
+    <netty.version>4.1.72.Final</netty.version>
     <jacksondatabind.version>2.12.1</jacksondatabind.version>
     <!-- Caution: version 4.5.12 and onward of apache httpclient causes a regression in recognizing S3 certificates (SNOW-259063) -->
     <httpclient.version>4.5.11</httpclient.version>
@@ -78,6 +79,22 @@
       <groupId>com.nimbusds</groupId>
       <artifactId>nimbus-jose-jwt</artifactId>
       <version>8.0</version>
+      <exclusions>
+        <exclusion>  <!-- exclude earlier versions of json-smart due to multiple vulnerabilities -->
+          <groupId>net.minidev</groupId>
+          <artifactId>json-smart</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-buffer</artifactId>
+      <version>${netty.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-common</artifactId>
+      <version>${netty.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven.plugins</groupId>
@@ -189,7 +206,7 @@
     <dependency>
       <groupId>net.minidev</groupId>
       <artifactId>json-smart</artifactId>
-      <version>2.4.5</version>
+      <version>2.4.7</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
@@ -290,6 +307,14 @@
           <groupId>commons-codec</groupId>
           <artifactId>commons-codec</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>io.netty</groupId>
+          <artifactId>netty-buffer</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>io.netty</groupId>
+          <artifactId>netty-common</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>