tree 900ca8a9afcb5a36d0e801b6ad7c700c51de7978
parent 67277675100d26b734e2c8b90a4d6f5176d09ff5
author 吴晟 Wu Sheng <wu.sheng@foxmail.com> 1793671439 +0800
committer GitHub <noreply@github.com> 1793671439 +0800
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJq6UEPCRC1aQ7uu5UhlAAAy5wQAB6JJ1Pc2uPIDkp+V5xz/ce6
 6Nz4RwX10YqWB+QJrdkLlX5YSitPRhOXxq2KO5lNsrWxBswfW47ZTnqBU8iPCshe
 qikq/9nepXTZOCTExJIL2G+MpekaoNr+cHn/g04hfNMnv9asRwKWnqqXmUpkbl2E
 kOlwPxfDWEHxst2GeF1WkJm/pXacyf5ibG29HdXUS5g9vYI/xTHSusXRfTM7VCBr
 ZxU8pE8cky/Vg1zLjB16PS739s2dLW0lGCNllb4UHM2GoQDGzPbk2EjlTJwy+C9v
 rJNhhX4nd1QAX8k3rv0qceVsI3gC6GJG2R5aMbzx2+Oexnw4huRrbzf8JdzNBaPK
 fZZ+qP4B587GBc9782WyD9a0MjbHYQ6cnCDiIqj0pez4XtF7AyEzwhP7aR02Pz+F
 dAPsLT0p0etRgp+TOSm4UqWsHXXpVBJdjXabY1AkWVgk8XE3s8O5kbR9fvotnC/K
 Crd+Ar4y3ESiXLnHBr+svwpE20x1N79P/prXjrLQFAcoLgN5G/LFTL++x3TfdX6L
 cY6lEYXtVArzbr0zQ27FySd1WQZWtsfIXonP3+ObWyF7CR9+C6G9JgipZ4V0WeOF
 dfR3yTyjnXusamQN/wSjYFkIApzvhmMMU7M4Z6Azb76VUtQvgCwKlv7b3RW7Nik+
 5wKqJ8E8Y191IPoLptWV
 =dPA6
 -----END PGP SIGNATURE-----
 

Bump dependencies to fix security alerts (#849)

Shipped in skywalking-agent.jar (shaded):
- netty 4.1.124.Final -> 4.1.139.Final (root pom netty.version, through
  netty-bom). OSV lists 4.1.124.Final for netty-codec (GHSA-3p8m-j85q-pgmj,
  GHSA-558v-64gr-wgg4, GHSA-mj4r-2hfc-f8p6), netty-codec-http (18
  advisories, e.g. GHSA-4mp9-239f-g9hg, GHSA-8c42-7qj2-3j46), netty-codec-http2
  (7, e.g. GHSA-93wv-jw9v-4972), netty-handler (5, e.g. GHSA-c4c3-7fpv-j4q5)
  and netty-handler-proxy (GHSA-45q3-82m4-75jr); 4.1.139.Final has none.
- netty-tcnative-boringssl-static 2.0.70.Final -> 2.0.84.Final, the
  version netty 4.1.139.Final is built with.
- dist-material/LICENSE names netty 4.1.139. CHANGES.md updated.

guava stays on 32.1.3-jre (see the pom comment on Java 8).