From da92ba35ada9305bd72d51af64c00e870fac5f1c Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Tue, 16 Dec 2025 17:20:48 -0300
Subject: [PATCH 1/2] Update direct dependncies and overwrite nett-codec-http
 to version 4.1.129.Final

---
 gxawsserverless/pom.xml         | 6 ++++++
 gxazureserverless/pom.xml       | 6 ++++++
 gxcloudstorage-awss3-v2/pom.xml | 6 ++++++
 gxcosmosdb/pom.xml              | 8 +++++++-
 gxdynamodb/pom.xml              | 7 +++++++
 gxqueue-awssqs/pom.xml          | 6 ++++++
 pom.xml                         | 2 +-
 7 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/gxawsserverless/pom.xml b/gxawsserverless/pom.xml
index 0dc52856d..32efbdcaa 100644
--- a/gxawsserverless/pom.xml
+++ b/gxawsserverless/pom.xml
@@ -54,6 +54,12 @@
             <artifactId>lambda</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from lambda due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
             <groupId>com.amazonaws</groupId>
diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index 1bc735fc9..8d1ffd53b 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -50,6 +50,12 @@
             <artifactId>azure-messaging-eventgrid</artifactId>
             <version>4.31.4</version>
         </dependency>
+        <!-- overwrite from azure-messaging-eventgrid due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
             <groupId>org.mockito</groupId>
diff --git a/gxcloudstorage-awss3-v2/pom.xml b/gxcloudstorage-awss3-v2/pom.xml
index 2cf8236c8..aa2b244ee 100644
--- a/gxcloudstorage-awss3-v2/pom.xml
+++ b/gxcloudstorage-awss3-v2/pom.xml
@@ -30,6 +30,12 @@
             <artifactId>s3</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from s3 due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-1.2-api</artifactId>
diff --git a/gxcosmosdb/pom.xml b/gxcosmosdb/pom.xml
index cfec42ac0..c34d35eaf 100644
--- a/gxcosmosdb/pom.xml
+++ b/gxcosmosdb/pom.xml
@@ -28,12 +28,18 @@
             <artifactId>azure-cosmos</artifactId>
         </dependency>
 
-        <!-- overrite from azure-cosmos due to transitive CVEs -->
+        <!-- overwrite from azure-cosmos due to transitive CVEs -->
         <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-core-http-netty</artifactId>
             <version>1.16.2</version>
         </dependency>
+        <!-- overwrite from azure-core-http-netty due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
 			<groupId>${project.groupId}</groupId>
diff --git a/gxdynamodb/pom.xml b/gxdynamodb/pom.xml
index 0e649547f..270878359 100644
--- a/gxdynamodb/pom.xml
+++ b/gxdynamodb/pom.xml
@@ -28,6 +28,13 @@
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>dynamodb</artifactId>
+            <version>2.40.8</version>
+        </dependency>
+        <!-- overwrite from dynamodb due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
         </dependency>
         <dependency>
 			<groupId>${project.groupId}</groupId>
diff --git a/gxqueue-awssqs/pom.xml b/gxqueue-awssqs/pom.xml
index df01a0aeb..d24a591fc 100644
--- a/gxqueue-awssqs/pom.xml
+++ b/gxqueue-awssqs/pom.xml
@@ -28,6 +28,12 @@
             <artifactId>sqs</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>apache-client</artifactId>
diff --git a/pom.xml b/pom.xml
index bb34f2097..f6e3c5483 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,7 +24,7 @@
 		<poi.version>5.4.1</poi.version>
 		<jackson.version>2.16.2</jackson.version>
 		<junit.version>4.13.2</junit.version>
-		<software.awssdk.version>2.35.6</software.awssdk.version>
+		<software.awssdk.version>2.40.8</software.awssdk.version>
 		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
 		<log4j.version>2.21.1</log4j.version>
         <io.opentelemetry.version>1.56.0</io.opentelemetry.version>

From b7d0509fd7744ea37424f8ce8836bdab2cdebe7a Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Thu, 18 Dec 2025 10:21:01 -0300
Subject: [PATCH 2/2] Add netty.version variable to pom parent

---
 gxawsserverless/pom.xml         | 2 +-
 gxazureserverless/pom.xml       | 2 +-
 gxcloudstorage-awss3-v2/pom.xml | 2 +-
 gxcosmosdb/pom.xml              | 2 +-
 gxdynamodb/pom.xml              | 2 +-
 gxqueue-awssqs/pom.xml          | 2 +-
 pom.xml                         | 1 +
 7 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/gxawsserverless/pom.xml b/gxawsserverless/pom.xml
index 32efbdcaa..4298e902c 100644
--- a/gxawsserverless/pom.xml
+++ b/gxawsserverless/pom.xml
@@ -58,7 +58,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
 
         <dependency>
diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index 8d1ffd53b..a0bd43ab9 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -54,7 +54,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
 
         <dependency>
diff --git a/gxcloudstorage-awss3-v2/pom.xml b/gxcloudstorage-awss3-v2/pom.xml
index aa2b244ee..f0cc2b36f 100644
--- a/gxcloudstorage-awss3-v2/pom.xml
+++ b/gxcloudstorage-awss3-v2/pom.xml
@@ -34,7 +34,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
diff --git a/gxcosmosdb/pom.xml b/gxcosmosdb/pom.xml
index c34d35eaf..3f8a26ff4 100644
--- a/gxcosmosdb/pom.xml
+++ b/gxcosmosdb/pom.xml
@@ -38,7 +38,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
 
         <dependency>
diff --git a/gxdynamodb/pom.xml b/gxdynamodb/pom.xml
index 270878359..f4575b7cd 100644
--- a/gxdynamodb/pom.xml
+++ b/gxdynamodb/pom.xml
@@ -34,7 +34,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
         <dependency>
 			<groupId>${project.groupId}</groupId>
diff --git a/gxqueue-awssqs/pom.xml b/gxqueue-awssqs/pom.xml
index d24a591fc..2d498bcb6 100644
--- a/gxqueue-awssqs/pom.xml
+++ b/gxqueue-awssqs/pom.xml
@@ -32,7 +32,7 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
-            <version>4.1.129.Final</version>
+            <version>${netty.version}</version>
         </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
diff --git a/pom.xml b/pom.xml
index f6e3c5483..6c73e49fa 100644
--- a/pom.xml
+++ b/pom.xml
@@ -34,6 +34,7 @@
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
         <commons.lang3.version>3.18.0</commons.lang3.version>
+        <netty.version>4.1.129.Final</netty.version>
 
 	</properties>