Upgrade netty from 4.1.77.Final to 4.1.86.Final

[norrs]

Motivation and Context

Deals with CVE-2022-41915:
GHSA-hh82-3pmq-7frp

Probably deals with CVE-2022-41881 as well:
GHSA-fx2c-96vj-985v

https://nvd.nist.gov/vuln/detail/CVE-2022-41915

This is found in owasp dependency scanner maven plugin in our local build, and according to security advisories it should be fixed in the latest version.

Modifications

Upgrading as instructed in pom.xml . Looks like this is what were done last time netty were upgraded in #3187 and approved by @dagnir

Testing

N/A.

Passed locally.

Screenshots (if appropriate)

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)

Checklist

• [x ] I have read the CONTRIBUTING document
• Local run of mvn install succeeds
• My code follows the code style of this project
• My change requires a change to the Javadoc documentation
• I have updated the Javadoc documentation accordingly
• I have added tests to cover my changes
• All new and existing tests passed
• I have added a changelog entry. Adding a new entry must be accomplished by running the scripts/new-change script and following the instructions. Commit the new file created by the script in .changes/next-release with your changes.
• My change is to implement 1.11 parity feature and I have updated LaunchChangelog

License

• I confirm that this pull request can be released under the Apache 2 license

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication