Do we have an ETA for tag/release 3.7.10

[ildyria]

Hi,

Our toolings are flagging this ApplicationInsights-Java with at least the 3 following vulnerabilities which are transitive via:

• sonatype-2026-005959 (jackson-databind)
• sonatype-2026-005866 / CVE-2026-75596 (Netty)
• CVE-2026-68497 (jackson-databind)

Those vulnerabilities are classified as High and are breaking our builds.

I also see that:

• Bump the all-dependencies group with 8 updates #4839 resolves the jackson ones.
• Looking at the the code base on master, it seems that we are also on non vulnerable version of Netty.

Is there any timeline so can we expect a new tag/release published on Maven given that the last one was in June?

Thank you for your time. :)

[xiang17]

The Netty package is also on latest since #4828.

Yes, a new release is coming soon within this week or next week. It was blocked earlier because I was waiting on a bug fix in the upstream. The new upstream version was released last Friday and I just incorporated it: #4821.