diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0acc664..236d23a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,10 @@ updates:
         - "org.jboss.da:*"
         - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
         - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz
+    ignore:
+      # stay on the netty 4.1.x line
+      - dependency-name: "io.netty:*"
+        versions: [">= 4.2.0"]
   - package-ecosystem: "github-actions" # Also update Github actions
     directory: "/"
     schedule:
diff --git a/pom.xml b/pom.xml
index f799792..3344865 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,7 +65,7 @@
             <dependency>
                 <groupId>io.netty</groupId>
                 <artifactId>netty-bom</artifactId>
-                <version>4.1.118.Final</version>
+                <version>4.1.138.Final</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>