Comparing Keith-wright:master...pusher:master · Keith-wright/pusher-http-java · GitHub
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Keith-wright/pusher-http-java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: pusher/pusher-http-java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 9 commits
  • 6 files changed
  • 5 contributors

Commits on Jan 28, 2026

  1. Update github actions ubuntu and checkout action

    @aonemd
    aonemd committed Jan 28, 2026
    Configuration menu
    Copy the full SHA
    eebdc21 View commit details
    Browse the repository at this point in the history

  2. Merge pull request pusher#82 from pusher/update-cicd 

    Update github actions ubuntu and checkout action
    @aonemd
    aonemd authored Jan 28, 2026
    Configuration menu
    Copy the full SHA
    85a89c0 View commit details
    Browse the repository at this point in the history

  3. fix: upgrade Netty to 4.1.129.Final to address security vulnerabilities 

    Force transitive Netty dependency upgrade to resolve:
- CVE-2025-24970 (HIGH 7.5): SslHandler validation flaw causing native crash
- CVE-2025-25193 (MEDIUM 5.5): DoS via null-byte in BoundedInputStream
- CVE-2025-55163 (HIGH 7.5): HTTP/2 "MadeYouReset" DDoS attack
- CVE-2025-58056 (HIGH 7.5): HTTP request smuggling via LF parsing
- CVE-2025-58057 (HIGH 7.5): BrotliDecoder DoS (zip bomb)
- CVE-2025-67735 (MEDIUM 6.5): CRLF injection / request smuggling

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
    @git-wright @claude
    git-wright and claude committed Jan 28, 2026
    Configuration menu
    Copy the full SHA
    39f3444 View commit details
    Browse the repository at this point in the history

  4. fix: update async-http-client to 3.0.6 and change dependency scopes t… 

    …o api

- Update async-http-client from 3.0.1 to 3.0.6 (addresses Issue pusher#79)
- Change httpclient, async-http-client, and gson from 'implementation'
  to 'api' scope since they appear in public method signatures (Issue pusher#78)

Closes pusher#78
Closes pusher#79

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
    @git-wright @claude
    git-wright and claude committed Jan 28, 2026
    Configuration menu
    Copy the full SHA
    afc042a View commit details
    Browse the repository at this point in the history

  5. Merge pull request pusher#80 from Keith-wright/fix/netty-cve-vulnerab… 

    …ilities

fix: upgrade Netty to 4.1.129.Final to address security vulnerabilities
    @Keith-wright
    Keith-wright authored Jan 28, 2026
    Configuration menu
    Copy the full SHA
    dc21d7e View commit details
    Browse the repository at this point in the history

  6. Merge pull request pusher#81 from Keith-wright/fix/dependency-scope-a… 

    …nd-version

fix: update async-http-client to 3.0.6 and change dependency scopes to api
    @Keith-wright
    Keith-wright authored Jan 28, 2026
    Configuration menu
    Copy the full SHA
    824ea3b View commit details
    Browse the repository at this point in the history

  7. chore: prepare release PR

    @aonemd
    aonemd committed Jan 28, 2026
    Configuration menu
    Copy the full SHA
    e81facb View commit details
    Browse the repository at this point in the history

  8. Bump to version 1.3.5

    @pusher-ci
    pusher-ci committed Jan 28, 2026
    Configuration menu
    Copy the full SHA
    fede5e7 View commit details
    Browse the repository at this point in the history

  9. Merge pull request pusher#83 from pusher/release 

    chore: prepare release PR
    @aonemd
    aonemd authored Jan 28, 2026
    Configuration menu
    Copy the full SHA
    94f25a2 View commit details
    Browse the repository at this point in the history
Loading