Merge pull request #24 from MoshPe/chore/java17-compat

chore: lower Java requirement from 25 to 17

Author: MoshPe

.github/workflows/ci.yml

@@ -14,10 +14,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Java 25
+      - name: Set up Java 17
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '17'
           distribution: 'temurin'
 
       - name: Build and test

.github/workflows/codeql.yml

@@ -21,10 +21,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Java 25
+      - name: Set up Java 17
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '17'
           distribution: 'temurin'
 
       - name: Initialize CodeQL

.github/workflows/dependency-check.yml

@@ -19,10 +19,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Java 25
+      - name: Set up Java 17
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '17'
           distribution: 'temurin'
 
       - name: Run OWASP Dependency Check

.github/workflows/release.yml

@@ -17,10 +17,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Java 25
+      - name: Set up Java 17
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '17'
           distribution: 'temurin'
           server-id: central
           server-username: OSSRH_USERNAME
@@ -64,13 +64,13 @@ jobs:
           git config user.email "github-actions[bot]@users.noreply.github.com"
           git fetch origin main
           git checkout -b ${BRANCH} origin/main
-          mvn versions:set -DnewVersion=${NEXT} -DgenerateBackupPoms=false -N
-          git add pom.xml
+          mvn versions:set -DnewVersion=${NEXT} -DgenerateBackupPoms=false
+          git add pom.xml streamfence-core/pom.xml streamfence-demo/pom.xml
           git commit -m "chore: bump version to ${NEXT} [skip ci]"
           git push origin ${BRANCH}
           gh pr create \
             --title "chore: bump version to ${NEXT}" \
             --body "Automated version bump after release \`${GITHUB_REF_NAME}\`." \
             --base main \
             --head ${BRANCH} \
-            --label "dependencies"
+            

.github/workflows/snapshot.yml

@@ -15,10 +15,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Java 25
+      - name: Set up Java 17
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '17'
           distribution: 'temurin'
           server-id: github
           server-username: GITHUB_ACTOR

README.md

@@ -10,7 +10,7 @@
   <a href="https://codecov.io/gh/MoshPe/StreamFence"><img src="https://codecov.io/gh/MoshPe/StreamFence/branch/main/graph/badge.svg" alt="codecov"></a>
   <a href="https://central.sonatype.com/artifact/io.github.moshpe/streamfence-core"><img src="https://img.shields.io/maven-central/v/io.github.moshpe/streamfence-core.svg" alt="Maven Central"></a>
   <a href="https://github.com/MoshPe/StreamFence/releases/latest"><img src="https://img.shields.io/github/v/release/MoshPe/StreamFence" alt="GitHub Release"></a>
-  <a href="https://openjdk.org/projects/jdk/25/"><img src="https://img.shields.io/badge/Java-25-blue?logo=openjdk" alt="Java 25"></a>
+  <a href="https://openjdk.org/projects/jdk/17/"><img src="https://img.shields.io/badge/Java-17-blue?logo=openjdk" alt="Java 17"></a>
   <a href="https://www.apache.org/licenses/LICENSE-2.0"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="License"></a>
 </p>
 
@@ -81,11 +81,11 @@ Add `streamfence-core` to your Maven project:
 <dependency>
     <groupId>io.github.moshpe</groupId>
     <artifactId>streamfence-core</artifactId>
-    <version>1.0.1</version>
+    <version>1.0.7</version>
 </dependency>
 ```
 
-Requires Java 25.
+Requires Java 17.
 
 ---
 

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>io.github.moshpe</groupId>
     <artifactId>streamfence</artifactId>
-    <version>1.0.8-SNAPSHOT</version>
+    <version>1.0.8</version>
     <packaging>pom</packaging>
 
     <name>streamfence-parent</name>
@@ -36,11 +36,12 @@
     </modules>
 
     <properties>
-        <maven.compiler.release>25</maven.compiler.release>
+        <maven.compiler.release>17</maven.compiler.release>
         <flatten-maven-plugin.version>1.6.0</flatten-maven-plugin.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <netty-socketio.version>2.0.14</netty-socketio.version>
+        <netty.version>4.1.132.Final</netty.version>
         <jackson.version>2.21.2</jackson.version>
         <bouncycastle.version>1.84</bouncycastle.version>
         <slf4j.version>2.0.9</slf4j.version>
@@ -67,6 +68,14 @@
 
     <dependencyManagement>
         <dependencies>
+            <!-- Pin Netty to satisfy CVE fixes; overrides the version pulled in by netty-socketio -->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-bom</artifactId>
+                <version>${netty.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
             <dependency>
                 <groupId>com.corundumstudio.socketio</groupId>
                 <artifactId>netty-socketio</artifactId>

streamfence-core/pom.xml

@@ -7,7 +7,7 @@
     <parent>
         <groupId>io.github.moshpe</groupId>
         <artifactId>streamfence</artifactId>
-        <version>1.0.1</version>
+        <version>1.0.8</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 

streamfence-core/src/test/java/io/streamfence/internal/config/ServerConfigLoaderTest.java

@@ -82,7 +82,7 @@ void loadsValidYamlConfiguration() throws IOException {
             assertThat(config.origin()).isEqualTo("https://app.example.com");
             assertThat(config.namespaces()).containsKeys("/non-reliable", "/reliable", "/bulk");
             assertThat(config.topicPolicies()).hasSize(2);
-            assertThat(config.topicPolicies().getFirst().deliveryMode()).isEqualTo(DeliveryMode.BEST_EFFORT);
+            assertThat(config.topicPolicies().get(0).deliveryMode()).isEqualTo(DeliveryMode.BEST_EFFORT);
         } finally {
             deleteRecursively(tempDir);
         }

streamfence-core/src/test/java/io/streamfence/internal/delivery/AckTrackerTest.java

@@ -37,8 +37,8 @@ void expiredMessageProducesRetryDecision() {
         var decisions = ackTracker.collectExpired(now.plusSeconds(3));
 
         assertThat(decisions).hasSize(1);
-        assertThat(decisions.getFirst().action()).isEqualTo(RetryAction.RETRY);
-        assertThat(decisions.getFirst().pendingMessage().retryCount()).isEqualTo(1);
+        assertThat(decisions.get(0).action()).isEqualTo(RetryAction.RETRY);
+        assertThat(decisions.get(0).pendingMessage().retryCount()).isEqualTo(1);
         assertThat(ackTracker.pendingCount()).isEqualTo(1);
     }
 
@@ -54,7 +54,7 @@ void exhaustedMessageIsReportedAndRemoved() {
         var decisions = ackTracker.collectExpired(now.plusSeconds(6));
 
         assertThat(decisions).hasSize(1);
-        assertThat(decisions.getFirst().action()).isEqualTo(RetryAction.EXHAUSTED);
+        assertThat(decisions.get(0).action()).isEqualTo(RetryAction.EXHAUSTED);
         assertThat(ackTracker.pendingCount()).isZero();
     }