Upgrade netty dependencies to resolve the remaining vulnerabilities

Author: manas-ctds

pom.xml

@@ -57,6 +57,7 @@
     <aircompressor.version>0.27</aircompressor.version>
     <jackson.version>2.15.4</jackson.version>
     <snakeyaml.version>2.0</snakeyaml.version>
+    <netty.version>4.1.129.Final</netty.version>
   </properties>
   <modules>
     <module>streaming-ai</module>
@@ -192,6 +193,34 @@
         <version>${commons-io.version}</version>
         <scope>runtime</scope>
       </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-codec-http2</artifactId>
+        <version>${netty.version}</version>
+        <scope>runtime</scope>
+      </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-codec-http</artifactId>
+        <version>${netty.version}</version>
+        <scope>runtime</scope>
+      </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-common</artifactId>
+        <version>${netty.version}</version>
+        <scope>runtime</scope>
+      </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.netty</groupId>
+        <artifactId>netty-handler</artifactId>
+        <version>${netty.version}</version>
+        <scope>runtime</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>
   <build>

pulsar-ai-tools/pom.xml

@@ -80,6 +80,13 @@
       <groupId>org.mockito</groupId>
       <artifactId>mockito-inline</artifactId>
     </dependency>
+    <!-- Resolve java.lang.ClassNotFoundException: io.netty.handler.codec.DefaultHeaders$ValueValidator -->
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec</artifactId>
+      <version>${netty.version}</version>
+      <scope>test</scope>
+    </dependency>
   </dependencies>
   <build>
     <plugins>

tests/pom.xml

@@ -50,6 +50,7 @@
       <artifactId>testng</artifactId>
       <scope>test</scope>
     </dependency>
+    <!-- Resolve java.lang.ClassNotFoundException: org.apache.commons.codec.Charsets -->
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>