Bump netty-codec-http to version 4.1.129.Final

Author: sgrampone

gxawsserverless/pom.xml

@@ -54,6 +54,12 @@
             <artifactId>lambda</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from lambda due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>com.amazonaws</groupId>

gxazureserverless/pom.xml

@@ -48,7 +48,13 @@
         <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-messaging-eventgrid</artifactId>
-            <version>4.22.3</version>
+            <version>4.31.4</version>
+        </dependency>
+        <!-- overwrite from azure-messaging-eventgrid due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
         </dependency>
 
         <dependency>

gxcloudstorage-awss3-v2/pom.xml

@@ -30,6 +30,12 @@
             <artifactId>s3</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from s3 due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>sts</artifactId>

gxcloudstorage-azureblob-latest/pom.xml

@@ -30,6 +30,12 @@
 			<artifactId>azure-storage-blob</artifactId>
             <version>12.32.0</version>
 		</dependency>
+        <!-- overwrite from azure-storage-blob due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 		<dependency>
 			<groupId>com.azure</groupId>
 			<artifactId>azure-identity</artifactId>

gxcosmosdb/pom.xml

@@ -33,6 +33,12 @@
             <artifactId>azure-core-http-netty</artifactId>
             <version>1.16.2</version>
         </dependency>
+        <!-- overwrite from azure-core-http-netty due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxdynamodb/pom.xml

@@ -28,7 +28,15 @@
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>dynamodb</artifactId>
+            <version>2.40.8</version>
         </dependency>
+        <!-- overwrite from dynamodb due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
+
         <dependency>
 			<groupId>${project.groupId}</groupId>
 			<artifactId>gxclassR</artifactId>

gxqueue-awssqs/pom.xml

@@ -28,6 +28,12 @@
             <artifactId>sqs</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>apache-client</artifactId>

pom.xml

@@ -24,7 +24,7 @@
 		<poi.version>5.4.1</poi.version>
 		<jackson.version>2.14.1</jackson.version>
 		<junit.version>4.13.2</junit.version>
-		<software.awssdk.version>2.35.6</software.awssdk.version>
+		<software.awssdk.version>2.40.8</software.awssdk.version>
 		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
 		<log4j.version>2.25.3</log4j.version>
         <io.opentelemetry.version>1.56.0</io.opentelemetry.version>
@@ -33,6 +33,7 @@
         <commons-codec.version>1.15</commons-codec.version>
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
+        <netty.version>4.1.129.Final</netty.version>
 
 	</properties>