Cherry pick branch 'genexuslabs:fix/bump-netty-codec-http' into beta

Author: sgrampone

gxawsserverless/pom.xml

@@ -54,6 +54,12 @@
             <artifactId>lambda</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from lambda due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
             <groupId>com.amazonaws</groupId>

gxazureserverless/pom.xml

@@ -50,6 +50,12 @@
             <artifactId>azure-messaging-eventgrid</artifactId>
             <version>4.31.4</version>
         </dependency>
+        <!-- overwrite from azure-messaging-eventgrid due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
             <groupId>org.mockito</groupId>

gxcloudstorage-awss3-v2/pom.xml

@@ -30,6 +30,12 @@
             <artifactId>s3</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from s3 due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-1.2-api</artifactId>

gxcosmosdb/pom.xml

@@ -28,12 +28,18 @@
             <artifactId>azure-cosmos</artifactId>
         </dependency>
 
-        <!-- overrite from azure-cosmos due to transitive CVEs -->
+        <!-- overwrite from azure-cosmos due to transitive CVEs -->
         <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-core-http-netty</artifactId>
             <version>1.16.2</version>
         </dependency>
+        <!-- overwrite from azure-core-http-netty due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
 
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxdynamodb/pom.xml

@@ -28,6 +28,13 @@
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>dynamodb</artifactId>
+            <version>2.40.8</version>
+        </dependency>
+        <!-- overwrite from dynamodb due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
         </dependency>
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxqueue-awssqs/pom.xml

@@ -28,6 +28,12 @@
             <artifactId>sqs</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.129.Final</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>apache-client</artifactId>

pom.xml

@@ -29,7 +29,7 @@
 		<commons.logging.version>1.2</commons.logging.version>
 		<jackson.version>2.16.2</jackson.version>
 		<junit.version>4.13.2</junit.version>
-		<software.awssdk.version>2.35.6</software.awssdk.version>
+		<software.awssdk.version>2.40.8</software.awssdk.version>
 		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
 		<log4j.version>2.21.1</log4j.version>
 		<io.opentelemetry.version>1.56.0</io.opentelemetry.version>