Bump dependencies to remediaee CVEs

Author: manas-ctds

pom.xml

@@ -43,6 +43,7 @@
     <!-- Must match version in pulsar -->
     <avro.version>1.11.4</avro.version>
     <azure-ai-openai.version>1.0.0-beta.8</azure-ai-openai.version>
+    <reactor-netty-http.version>1.2.8</reactor-netty-http.version>
     <cassandra.driver.version>4.16.0</cassandra.driver.version>
     <nifi-nar-maven-plugin.version>1.5.1</nifi-nar-maven-plugin.version>
     <djl.version>0.35.1</djl.version>
@@ -53,11 +54,11 @@
     <commons-lang3.version>3.18.0</commons-lang3.version>
     <commons-compress.version>1.26.0</commons-compress.version>
     <commons-io.version>2.14.0</commons-io.version>
-    <asynchttpclient.version>2.12.4</asynchttpclient.version>
-    <aircompressor.version>0.27</aircompressor.version>
-    <jackson.version>2.15.4</jackson.version>
+    <asynchttpclient.version>2.14.5</asynchttpclient.version>
+    <aircompressor.version>2.0.3</aircompressor.version>
+    <jackson.version>2.21.2</jackson.version>
     <snakeyaml.version>2.0</snakeyaml.version>
-    <netty.version>4.1.129.Final</netty.version>
+    <netty.version>4.1.132.Final</netty.version>
   </properties>
   <modules>
     <module>streaming-ai</module>
@@ -123,6 +124,12 @@
         <artifactId>azure-ai-openai</artifactId>
         <version>${azure-ai-openai.version}</version>
       </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.projectreactor.netty</groupId>
+        <artifactId>reactor-netty-http</artifactId>
+        <version>${reactor-netty-http.version}</version>
+      </dependency>
       <dependency>
         <groupId>com.samskivert</groupId>
         <artifactId>jmustache</artifactId>