Bump netty-codec-http to version 4.1.129.Final (#1071)

* Update direct dependncies and overwrite nett-codec-http to version 4.1.129.Final

* Add netty.version variable to pom parent

Author: sgrampone

gxawsserverless/pom.xml

@@ -54,6 +54,12 @@
             <artifactId>lambda</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from lambda due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>com.amazonaws</groupId>

gxazureserverless/pom.xml

@@ -50,6 +50,12 @@
             <artifactId>azure-messaging-eventgrid</artifactId>
             <version>4.31.4</version>
         </dependency>
+        <!-- overwrite from azure-messaging-eventgrid due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>org.mockito</groupId>

gxcloudstorage-awss3-v2/pom.xml

@@ -30,6 +30,12 @@
             <artifactId>s3</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from s3 due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-1.2-api</artifactId>

gxcosmosdb/pom.xml

@@ -28,12 +28,18 @@
             <artifactId>azure-cosmos</artifactId>
         </dependency>
 
-        <!-- overrite from azure-cosmos due to transitive CVEs -->
+        <!-- overwrite from azure-cosmos due to transitive CVEs -->
         <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-core-http-netty</artifactId>
             <version>1.16.2</version>
         </dependency>
+        <!-- overwrite from azure-core-http-netty due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxdynamodb/pom.xml

@@ -28,6 +28,13 @@
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>dynamodb</artifactId>
+            <version>2.40.8</version>
+        </dependency>
+        <!-- overwrite from dynamodb due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
         </dependency>
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxqueue-awssqs/pom.xml

@@ -28,6 +28,12 @@
             <artifactId>sqs</artifactId>
             <version>${software.awssdk.version}</version>
         </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>apache-client</artifactId>

pom.xml

@@ -24,7 +24,7 @@
 		<poi.version>5.4.1</poi.version>
 		<jackson.version>2.16.2</jackson.version>
 		<junit.version>4.13.2</junit.version>
-		<software.awssdk.version>2.35.6</software.awssdk.version>
+		<software.awssdk.version>2.40.8</software.awssdk.version>
 		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
 		<log4j.version>2.21.1</log4j.version>
         <io.opentelemetry.version>1.56.0</io.opentelemetry.version>
@@ -34,6 +34,7 @@
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
         <commons.lang3.version>3.18.0</commons.lang3.version>
+        <netty.version>4.1.129.Final</netty.version>
 
 	</properties>