ENT-13028,ENT-13876,ENT-13950,ENT-13951,ENT-14039,ENT-14195,ENT-14196 - Security dependency updates (#8032)

chriscochrane · adelel1 · web-flow · commit 07e9ed69be92 · 2025-11-19T17:39:01.000Z
Dependency updates to address security vulnerabilities.

---------

Co-authored-by: Adel El-Beik &lt;adel.el-beik@r3.com&gt;
diff --git a/constants.properties b/constants.properties
@@ -39,7 +39,7 @@ openSourceBranch=https://github.com/corda/corda/blob/release/os/4.4
 openSourceSamplesBranch=https://github.com/corda/samples/blob/release-V4
 jolokiaAgentVersion=1.6.1
 detektVersion=1.0.1
-tcnativeVersion=2.0.48.Final
+tcnativeVersion=2.0.74.Final
 commonsConfiguration2Version=2.11.0
 commonsTextVersion=1.10.0
 jsonSmartVersion=2.5.2
@@ -61,7 +61,7 @@ assertjVersion=3.12.2
 slf4JVersion=1.7.30
 log4JVersion=2.17.1
 okhttpVersion=3.14.9
-nettyVersion=4.1.77.Final
+nettyVersion=4.1.128.Final
 fileuploadVersion=1.6.0
 kryoVersion=4.0.2
 kryoSerializerVersion=0.43
@@ -99,7 +99,7 @@ protonjVersion=0.33.0
 snappyVersion=0.5
 jcabiManifestsVersion=1.1
 picocliVersion=3.9.6
-commonsLangVersion=3.9
+commonsLangVersion=3.19.0
 commonsIoVersion=2.17.0
 controlsfxVersion=8.40.15
 # FontAwesomeFX for Java8
@@ -110,4 +110,4 @@ fontawesomefxCommonsVersion=11.0
 fontawesomefxFontawesomeVersion=4.7.0-11
 azureVersion=1.41.4
 azureResourceManagerVersion=2.52.0
-azureIdentityVersion=1.2.0
+azureIdentityVersion=1.18.1
diff --git a/node/build.gradle b/node/build.gradle
@@ -230,7 +230,18 @@ dependencies {
     compile "com.palominolabs.metrics:metrics-new-relic:${metrics_new_relic_version}"
 
     // Adding native SSL library to allow using native SSL with Artemis and AMQP
-    compile "io.netty:netty-tcnative-boringssl-static:$tcnative_version"
+    runtimeOnly "io.netty:netty-tcnative-boringssl-static:$tcnative_version:linux-x86_64"
+    runtimeOnly "io.netty:netty-tcnative-boringssl-static:$tcnative_version:linux-aarch_64"
+    runtimeOnly "io.netty:netty-tcnative-boringssl-static:$tcnative_version:osx-x86_64"
+    runtimeOnly "io.netty:netty-tcnative-boringssl-static:$tcnative_version:osx-aarch_64"
+
+    runtimeOnly "io.netty:netty-transport-native-epoll:$netty_version:linux-x86_64"
+    runtimeOnly "io.netty:netty-transport-native-epoll:$netty_version:linux-aarch_64"
+    runtimeOnly "io.netty:netty-transport-native-kqueue:$netty_version:osx-x86_64"
+    runtimeOnly "io.netty:netty-transport-native-kqueue:$netty_version:osx-aarch_64"
+    runtimeOnly "io.netty:netty-transport-native-unix-common:$netty_version"
+    runtimeOnly "io.netty:netty-transport-classes-epoll:$netty_version"
+    runtimeOnly "io.netty:netty-transport-classes-kqueue:$netty_version"
 
     // Byteman for runtime (termination) rules injection on the running node
     // Submission tool allowing to install rules on running nodes
