From a5134f12b8e69b881b3a3021361e86467ef27257 Mon Sep 17 00:00:00 2001
From: Javier Aliaga <javier@diagrid.io>
Date: Mon, 20 Jul 2026 10:25:41 +0200
Subject: [PATCH] fix: pin Netty to the gRPC-supported version in Spring
 modules

Signed-off-by: Javier Aliaga <javier@diagrid.io>
---
 dapr-spring/dapr-spring-boot-autoconfigure/pom.xml       | 9 +++++++++
 .../dapr-spring-boot-starter/pom.xml                     | 9 +++++++++
 dapr-spring/dapr-spring-data/pom.xml                     | 9 +++++++++
 sdk-tests/pom.xml                                        | 9 +++++++++
 spring-boot-examples/pom.xml                             | 9 +++++++++
 spring-boot-sdk-tests/pom.xml                            | 9 +++++++++
 6 files changed, 54 insertions(+)

diff --git a/dapr-spring/dapr-spring-boot-autoconfigure/pom.xml b/dapr-spring/dapr-spring-boot-autoconfigure/pom.xml
index 0bc2f8d513..30ea8c1670 100644
--- a/dapr-spring/dapr-spring-boot-autoconfigure/pom.xml
+++ b/dapr-spring/dapr-spring-boot-autoconfigure/pom.xml
@@ -31,6 +31,15 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>
diff --git a/dapr-spring/dapr-spring-boot-starters/dapr-spring-boot-starter/pom.xml b/dapr-spring/dapr-spring-boot-starters/dapr-spring-boot-starter/pom.xml
index 850d09c0c7..c1f394aded 100644
--- a/dapr-spring/dapr-spring-boot-starters/dapr-spring-boot-starter/pom.xml
+++ b/dapr-spring/dapr-spring-boot-starters/dapr-spring-boot-starter/pom.xml
@@ -23,6 +23,15 @@
 
   <dependencyManagement>
     <dependencies>
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>
diff --git a/dapr-spring/dapr-spring-data/pom.xml b/dapr-spring/dapr-spring-data/pom.xml
index 6873db6267..719f5d8e22 100644
--- a/dapr-spring/dapr-spring-data/pom.xml
+++ b/dapr-spring/dapr-spring-data/pom.xml
@@ -24,6 +24,15 @@
 
   <dependencyManagement>
     <dependencies>
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>
diff --git a/sdk-tests/pom.xml b/sdk-tests/pom.xml
index a9be4113f5..69ecf195a0 100644
--- a/sdk-tests/pom.xml
+++ b/sdk-tests/pom.xml
@@ -35,6 +35,15 @@
     <dependencies>
       <!-- Import the Spring Boot 4 BOM so JUnit (jupiter + platform) resolves consistently to 6.x,
            matching the spring-boot-sdk-tests module and the Spring Boot 4 starter pulled in here. -->
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>
diff --git a/spring-boot-examples/pom.xml b/spring-boot-examples/pom.xml
index f65cdee97a..bdd865a30d 100644
--- a/spring-boot-examples/pom.xml
+++ b/spring-boot-examples/pom.xml
@@ -36,6 +36,15 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>
diff --git a/spring-boot-sdk-tests/pom.xml b/spring-boot-sdk-tests/pom.xml
index 30d2af42af..080c1631b9 100644
--- a/spring-boot-sdk-tests/pom.xml
+++ b/spring-boot-sdk-tests/pom.xml
@@ -29,6 +29,15 @@
 
   <dependencyManagement>
     <dependencies>
+      <!-- Pin Netty to the gRPC-supported 4.1.x line (root netty.version); MUST precede the Spring Boot
+           BOM, which manages Netty 4.2.x - unsupported by the non-shaded grpc-netty this SDK uses. -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-bom</artifactId>
+        <version>${netty.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-dependencies</artifactId>