[kevinherron]

Update Netty and the Maven build tools to the available stable releases compatible with Milo's Java 17 baseline. The shared root POM properties keep all Netty modules aligned and preserve the existing version exclusions.

Artifact coordinates	Before	After
io.netty:netty-codec io.netty:netty-handler io.netty:netty-codec-http	4.1.138.Final	4.1.139.Final
com.diffplug.spotless:spotless-maven-plugin	3.10.3	3.10.4
org.codehaus.mojo:versions-maven-plugin	2.22.0	2.23.0

The Netty release notes, Spotless 3.10.4 changelog, and Versions 2.23.0 release notes were checked for compatibility. No source or configuration migration was needed.

Compatibility and deferred upgrades

• Preserve the POM's exclusion of Netty 4.2+ and Checkstyle 13+.
• Preserve the stable-release filter. Maven Site Plugin remains at the existing 4.0.0-M9 version; newer milestones are excluded.
• No overlapping open Maven update PR existed at the start of this run.

Validation

All checks passed on Temurin 17.0.19+10 and Maven 3.9.16 through mise:

• Non-quiet versions:display-dependency-updates and versions:display-plugin-updates reports passed before and after the update. The final reports, using Versions 2.23.0, show no remaining applicable updates.
• mise exec -- mvn -q -pl opc-ua-sdk/integration-tests -am verify: 2,264 tests, 0 failures, 0 errors, 3 skipped.
• mise exec -- mvn -q spotless:apply: passed; no formatting changes.
• mise exec -- mvn -q clean compile: passed.
• mise exec -- mvn -q clean verify: 2,411 tests, 0 failures, 0 errors, 3 skipped (2,388 Surefire tests and 23 Failsafe tests).
• General-purpose review by Codex GPT 6.1 Sol with xhigh reasoning: APPROVED, no findings.
• git diff --check: passed.

No unresolved build failures. Publication goals were not executed.

Run date: 2026-10-12 (America/Los_Angeles). Worktree: /home/kevin/.t3/worktrees/milo/t3-aa041003. Base: main at 45e08a066c0aedef10e05fca960548da8b442189.

[greptile-apps]

Confidence Score: 5/5

[High impact] The PR appears safe to merge, with no actionable issues found.

Summary

Updates three shared version properties in pom.xml:

• Milo’s transport modules use Netty 4.1.139.Final.
• Maven formatting and version reports use newer plugin releases.

Direct Netty dependencies still share one version. The stable-release filter and exclusions for Netty 4.2+ and Checkstyle 13+ remain unchanged. No actionable issues were found. Build and test results were supplied by the author; they were not independently rerun.

_{Reviews (1) · Last reviewed commit: "Maven dependency updates 2026-10-12" · Reviewed by Greptile}