Upgrade reactor-netty-http to 1.2.8 to address CVE-2025-22227

Upgrade netty version to 4.1.122.Final to resolve upper bound dependencies error

Author: ShahimSharafudeen

pom.xml

@@ -83,7 +83,8 @@
         <dep.commons.compress.version>1.26.2</dep.commons.compress.version>
         <dep.protobuf-java.version>4.29.0</dep.protobuf-java.version>
         <dep.jetty.version>12.0.18</dep.jetty.version>
-        <dep.netty.version>4.1.119.Final</dep.netty.version>
+        <dep.netty.version>4.1.122.Final</dep.netty.version>
+        <dep.reactor-netty.version>1.2.8</dep.reactor-netty.version>
         <dep.snakeyaml.version>2.0</dep.snakeyaml.version>
         <dep.gson.version>2.12.1</dep.gson.version>
         <dep.commons.lang3.version>3.18.0</dep.commons.lang3.version>
@@ -1555,6 +1556,18 @@
                 <version>0.11.5</version>
             </dependency>
 
+            <dependency>
+                <groupId>io.projectreactor.netty</groupId>
+                <artifactId>reactor-netty-core</artifactId>
+                <version>${dep.reactor-netty.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>io.projectreactor.netty</groupId>
+                <artifactId>reactor-netty-http</artifactId>
+                <version>${dep.reactor-netty.version}</version>
+            </dependency>
+
             <dependency>
                 <groupId>org.apache.thrift</groupId>
                 <artifactId>libthrift</artifactId>

presto-main/pom.xml

@@ -267,13 +267,11 @@
         <dependency>
             <groupId>io.projectreactor.netty</groupId>
             <artifactId>reactor-netty-core</artifactId>
-            <version>1.1.29</version>
         </dependency>
 
         <dependency>
             <groupId>io.projectreactor.netty</groupId>
             <artifactId>reactor-netty-http</artifactId>
-            <version>1.1.29</version>
         </dependency>
 
         <dependency>