BFD-4773: update io.netty to 4.1.135.Final + CODE_OF_CONDUCT Rewrite! (#3171)

Author: sb-benohe

CODE_OF_CONDUCT.md

@@ -1,108 +1,17 @@
-# The Technology Transformation Service Code of Conduct
+# Contributor Code of Conduct
 
-## Table of Contents
+As contributors and maintainers of this project, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities.
 
-[Introduction](#introduction)
+We are committed to making participation in this project a harassment-free experience for everyone, regardless of the level of experience, gender, gender identity, expression, sexual orientation, disability, personal appearance, body size, race, ethnicity, age, or religion.
 
-[What We Strive For](#what-we-strive-for)
+Examples of unacceptable behavior by participants include the use of sexual language or imagery, derogatory comments or personal attacks, trolling, public or private harassment, insults, or other unprofessional conduct.
 
-[Unacceptable Behavior](#unacceptable-behavior)
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned with this Code of Conduct.
 
-[Reporting](#reporting-violations)
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by opening an issue or contacting one or more of the project maintainers at opensource@cms.hhs.gov.
 
-[Credits](#credits)
+This Code of Conduct is adapted from the [Contributor Covenant](http://contributor-covenant.org), version 1.0.0, available at [http://contributor-covenant.org/version/1/0/0/](http://contributor-covenant.org/version/1/0/0/)
 
-[Version](#version)
+## Acknowledgements
 
-## Introduction
-
-TTS is committed to building a safe, welcoming, harassment-free culture for everyone. We do not merely want a work environment that is free from hostility; we want one that is actively welcoming and inclusive. We want our team and our workplace culture to reflect and celebrate the diversity of the communities we serve.
-
-This Code of Conduct summarizes federal anti-harassment law and General Services Administration policy. We intend the plain-language approach to promote a culture of inclusion and respect.
-
-We expect everyone on the TTS team to exhibit these behaviors and abide by applicable federal laws and GSA policies. In addition, we expect everyone within TTS spaces to exhibit these behaviors and refrain from behavior prohibited by anti-harassment laws and GSA policies on harassment. These spaces include:
-
-- TTS's physical offices,
-- TTS events and meetings,
-- All of our online forums and virtual collaboration tools, including:
-  - Office chat rooms, like Slack
-  - Mailing lists and email
-  - Code repositories, like GitHub
-
-## What We Strive For
-
-We strive to create a welcoming and inclusive culture that empowers people to provide outstanding public service. That kind of atmosphere requires an open exchange of ideas balanced by thoughtful guidelines. If we have only openness, colleagues who are on the receiving end of thoughtless or intentionally hurtful comments and behavior may reasonably withdraw. If we have overly intrusive guidelines, people may feel unwelcome.
-
-It would be impossible to list everything staff can do to create a more welcoming space, and we know this team will find ways to include their colleagues that we haven't even thought of. But when in doubt, we encourage you to look to these principles for guidance:
-
-- Practice empathy and humility.
-- Assume competence in your colleagues, clients and the public.
-- Assume that everyone we work with is doing their best work for the public.
-- Listen carefully and actively.
-- Ask questions, and seek to understand your partners' context.
-- Encourage other people to listen as much as they speak.
-- Treat other people's identities and cultures with respect. Make an effort to say people's names correctly and refer to them by their chosen pronouns.
-
-## Unacceptable Behavior
-
-To help colleagues understand the kinds of behaviors that are illegal or run counter to the culture we seek to foster, we've listed below actions that violate federal law and GSA policy. We've also included steps to take if you encounter behavior that runs contrary to this policy.
-
-### Sexual and Non-Sexual Harassment
-
-The [GSA Policy](https://www.gsa.gov/portal/directive/d0/content/512516) Statement on Sexual and Non-Sexual Harassment forbids:
-
-- Sexual and non-sexual harassment and misconduct, as defined in [GSA Order ADM 2325.8 Section 3(a), (b) and (c)](https://www.gsa.gov/portal/directive/d0/content/512516).
-- Unwelcome verbal or written comment or physical conduct based on:
-  - race,
-  - religion,
-  - color,
-  - sex (with or without sexual conduct, including pregnancy, and stereotyping),
-  - national origin,
-  - age,
-  - disability,
-  - genetic information,
-  - sexual orientation,
-  - parental status,
-  - marital status,
-  - or political affiliation.
-- Retaliating against anyone who files a formal complaint that someone has violated GSA anti-harassment policies.
-
-### Conduct Unbecoming a Federal Employee
-
-Federal employees can be subject to appropriate discipline, up to and including removal, for conduct unbecoming a federal employee, which is conduct which is unattractive; unsuitable; detracting from one's character or reputation; or creates an unfavorable impression.  Abusive and demeaning remarks to and about others in the workplace, and sexual remarks, which do not rise to the level of sexual harassment under the employment discrimination laws, nonetheless can be considered conduct unbecoming a federal employee.
-
-### Other Unacceptable Behavior
-
-In addition, the following behaviors violate applicable laws and policies, or otherwise undermine the culture of respect and inclusion we seek to build within TTS:
-
-- Touching people without their affirmative consent.
-- Sustained disruption of meetings, talks, or discussions, including chat rooms.
-- Mocking someone's real or perceived accent or first language.
-- Repeatedly interrupting or talking over other people in meetings and discussions.
-- Negative or offensive remarks based on sex, mental illness, socioeconomic status or background, neuro(a)typicality, physical appearance, or body size.
-
-## Reporting violations
-
-The process for reporting violations of GSA's Policy Statement on sexual and non-sexual harassment can be found in [GSA Order ADM 2325.8 Section 3(d)](https://www.gsa.gov/portal/directive/d0/content/512516) and GSA Order HRM 9700.6. Depending on your complaint, you may have a 45-day window from the date of the incident to report it to the GSA. Please read the GSA Order carefully.
-
-The behaviors listed in this section undermine the culture of inclusion and respect that we are trying to build within TTS. We encourage you to report violations to your supervisor, any management official, a Human Resources official, and/or the Office of Civil Rights, so that TTS can take any necessary steps to ensure that we have a safe and welcoming team.
-
-## Credits
-
-TTS is greatly appreciative of the multiple sources that we drew from to build this Code of Conduct, including:
-
-- [Code for America Code of Conduct](https://github.com/codeforamerica/codeofconduct)
-- [Ada Initiative: HOWTO design a code of conduct for your community](https://adainitiative.org/2014/02/howto-design-a-code-of-conduct-for-your-community/)
-- [Geek Feminism Code of Conduct](https://geekfeminism.org/about/code-of-conduct/)
-
-Laws and Policies Concerning Workplace Harassment:
-
-- [GSA's Policy Statement on sexual and non-sexual harassment](https://www.gsa.gov/portal/directive/d0/content/512516)
-- [Laws enforced by the Equal Employment Opportunity Commission](https://www.eeoc.gov/laws/statutes/index.cfm)
-- [Types of Discrimination prohibited by law](https://www.eeoc.gov/laws/types/)
-- [New and proposed regulations](https://www.eeoc.gov/laws/regulations/index.cfm)
-
-## Version
-
-Approved May 1, 2018
-Published May 7, 2018
+This CODE_OF_CONDUCT.md was originally forked from the [United States Digital Service](https://usds.gov) [Justice40](https://thejustice40.com) open source [repository](https://github.com/usds/justice40-tool), and we would like to acknowledge and thank the community for their contributions.

apps/pom.xml

@@ -181,7 +181,7 @@
         <jakarta.el.version>4.0.2</jakarta.el.version>
         <poi.version>5.4.0</poi.version>
         <javapoet.version>1.13.0</javapoet.version>
-        <netty.version>4.1.133.Final</netty.version>
+        <netty.version>4.1.135.Final</netty.version>
         <jetty.version>12.1.7</jetty.version>
         <org.apache.httpcomponents.httpclient.version>4.5.14</org.apache.httpcomponents.httpclient.version>
         <datasource-proxy.version>1.10</datasource-proxy.version>
@@ -329,6 +329,43 @@
                 <artifactId>netty-codec</artifactId>
                 <version>${netty.version}</version>
             </dependency>
+            <!-- Fix for Snyk vulnerability in netty-handler -->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-handler</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <!-- Pin remaining transitive netty artifacts to ${netty.version} for consistency -->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-transport</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-common</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-buffer</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-resolver</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-transport-native-unix-common</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-transport-classes-epoll</artifactId>
+                <version>${netty.version}</version>
+            </dependency>
             <!-- Fix for Snyk vulnerability (CWE-835 and CWE-770)-->
             <dependency>
                 <groupId>org.apache.commons</groupId>