Merge pull request #1789 from ballerina-platform/release-2.7.3

[Automated] Sync master after 2.7.3 release
ballerina-platform · Oct 16, 2023 · 844a3c5 · 844a3c5
2 parents 1cc836c + b8a0af2
commit 844a3c5
Show file tree

Hide file tree

Showing 14 changed files with 21 additions and 16 deletions.
diff --git a/ballerina-tests/http-advanced-tests/Ballerina.toml b/ballerina-tests/http-advanced-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-client-tests/Ballerina.toml b/ballerina-tests/http-client-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-dispatching-tests/Ballerina.toml b/ballerina-tests/http-dispatching-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-interceptor-tests/Ballerina.toml b/ballerina-tests/http-interceptor-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-misc-tests/Ballerina.toml b/ballerina-tests/http-misc-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-resiliency-tests/Ballerina.toml b/ballerina-tests/http-resiliency-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-security-tests/Ballerina.toml b/ballerina-tests/http-security-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http-service-tests/Ballerina.toml b/ballerina-tests/http-service-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina-tests/http2-tests/Ballerina.toml b/ballerina-tests/http2-tests/Ballerina.toml
@@ -11,4 +11,4 @@ version = "2.7.3"
 
 [[platform.java11.dependency]]
 scope = "testOnly"
-path = "../../test-utils/build/libs/http-test-utils-2.7.3-SNAPSHOT.jar"
+path = "../../test-utils/build/libs/http-test-utils-2.7.3.jar"
diff --git a/ballerina/Ballerina.toml b/ballerina/Ballerina.toml
@@ -13,7 +13,7 @@ distribution = "2201.5.0"
 groupId = "io.ballerina.stdlib"
 artifactId = "http-native"
 version = "2.7.3"
-path = "../native/build/libs/http-native-2.7.3-SNAPSHOT.jar"
+path = "../native/build/libs/http-native-2.7.3.jar"
 
 [[platform.java11.dependency]]
 groupId = "io.ballerina.stdlib"

diff --git a/ballerina/CompilerPlugin.toml b/ballerina/CompilerPlugin.toml
@@ -3,4 +3,4 @@ id = "http-compiler-plugin"
 class = "io.ballerina.stdlib.http.compiler.HttpCompilerPlugin"
 
 [[dependency]]
-path = "../compiler-plugin/build/libs/http-compiler-plugin-2.7.3-SNAPSHOT.jar"
+path = "../compiler-plugin/build/libs/http-compiler-plugin-2.7.3.jar"
diff --git a/ballerina/Dependencies.toml b/ballerina/Dependencies.toml
@@ -51,7 +51,7 @@ modules = [
 [[package]]
 org = "ballerina"
 name = "crypto"
-version = "2.3.2"
+version = "2.3.0"
 dependencies = [
  {org = "ballerina", name = "jballerina.java"},
  {org = "ballerina", name = "time"}
@@ -304,7 +304,7 @@ dependencies = [
 [[package]]
 org = "ballerina"
 name = "regex"
-version = "1.4.3"
+version = "1.4.0"
 dependencies = [
  {org = "ballerina", name = "jballerina.java"},
  {org = "ballerina", name = "lang.string"}
@@ -325,7 +325,7 @@ dependencies = [
 [[package]]
 org = "ballerina"
 name = "time"
-version = "2.2.5"
+version = "2.2.4"
 dependencies = [
  {org = "ballerina", name = "jballerina.java"}
 ]
@@ -336,7 +336,7 @@ modules = [
 [[package]]
 org = "ballerina"
 name = "url"
-version = "2.2.4"
+version = "2.2.3"
 dependencies = [
  {org = "ballerina", name = "jballerina.java"}
 ]

diff --git a/changelog.md b/changelog.md
@@ -5,6 +5,11 @@ This file contains all the notable changes done to the Ballerina HTTP package th
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to 
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.7.3] - 2023-10-13
+
+### Fixed
+- [Address CVE-2023-4586 netty Vulnerability](https://github.com/ballerina-platform/ballerina-standard-library/issues/4908)
+
 ## [2.7.1] - 2023-06-27
 
 ### Fixed

diff --git a/gradle.properties b/gradle.properties
@@ -1,6 +1,6 @@
 org.gradle.caching=true
 group=io.ballerina.stdlib
-version=2.7.3-SNAPSHOT
+version=2.7.4-SNAPSHOT
 ballerinaLangVersion=2201.5.0
 ballerinaTomlParserVersion=1.2.2
 commonsLang3Version=3.8.1