[CVE-2023-34462] - Upgrade netty from 4.1.86 to 4.1.94

[raphaelmatori]

Deals with CVE-2023-34462

This is found in owasp dependency scanner maven plugin in our local build, and according to security advisories it should be fixed in the latest version (4.1.94).

Motivation and Context

Modifications

Upgrading as instructed in pom.xml . Looks like this is what was done last time netty was upgraded in #3628 and approved by @davidh44

Testing

N/A

Screenshots (if appropriate)

N/A

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)

Checklist

• I have read the CONTRIBUTING document
• Local run of mvn install succeeds
• My code follows the code style of this project
• My change requires a change to the Javadoc documentation
• I have updated the Javadoc documentation accordingly
• I have added tests to cover my changes
• All new and existing tests passed
• I have added a changelog entry. Adding a new entry must be accomplished by running the scripts/new-change script and following the instructions. Commit the new file created by the script in .changes/next-release with your changes.
• My change is to implement 1.11 parity feature and I have updated LaunchChangelog

License

• I confirm that this pull request can be released under the Apache 2 license

[debora-ito]

@raphaelmatori thank you for the PR. I'll start the test builds.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication