From d5e422974515ef9a073944000934847cfbb3290a Mon Sep 17 00:00:00 2001
From: solosky <solosky772@qq.com>
Date: Fri, 23 Jan 2026 15:20:06 +0800
Subject: [PATCH] bump netty and logback version to resolve cve netty-bom:
 4.1.128.Final -> 4.1.130.Final logback: 1.2.13 -> 1.5.25

---
 pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index fbf2268327..6af1855d95 100644
--- a/pom.xml
+++ b/pom.xml
@@ -91,7 +91,7 @@
         <maven-invoker-plugin.version>3.0.0</maven-invoker-plugin.version>
         <project.build.outputTimestamp>2020-09-27T15:10:43Z</project.build.outputTimestamp>
         <lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
-        <netty-bom.version>4.1.128.Final</netty-bom.version>
+        <netty-bom.version>4.1.130.Final</netty-bom.version>
     </properties>
 
     <dependencyManagement>
@@ -124,12 +124,12 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.2.13</version>
+                <version>1.5.25</version>
             </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.2.13</version>
+                <version>1.5.25</version>
             </dependency>
             <dependency>
                 <groupId>com.alibaba.arthas</groupId>