[janjwerner-confluent]

Description

Update dependencies to address CVEs:

• Update netty from 4.1.107.Final to 4.1.108.Final to address: CVE-2024-29025
• Update zookeeper from 3.8.3 to 3.8.4 to address: CVE-2024-23944

Release note

• Update netty from 4.1.107.Final to 4.1.108.Final to address: CVE-2024-29025
• Update zookeeper from 3.8.3 to 3.8.4 to address: CVE-2024-23944

This PR has:

• been self-reviewed.
  • using the concurrency checklist (Remove this item if the PR doesn't have any relation to concurrency.)
• added documentation for new or modified features or behaviors.
• a release note entry in the PR description.
• added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
• added or updated version, license, or notice information in licenses.yaml
• added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
• added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code coverage is met.
• added integration tests.
• been tested in a test Druid cluster.

[findingrish]

Hi @janjwerner-confluent, thanks for the change.

To fix the build failure, I think we will have to update the io.netty:netty-tcnative-boringssl-static version in licenses.yaml.
The netty version upgrade is bringing in a higher version of this dependency in azure-extension module.

[INFO] +- com.azure:azure-identity:jar:1.11.1:compile
[INFO] |  +- com.azure:azure-core-http-netty:jar:1.13.11:compile
[INFO] |  |  +- io.netty:netty-codec-http2:jar:4.1.108.Final:compile
[INFO] |  |  +- io.netty:netty-transport-native-unix-common:jar:4.1.108.Final:compile
[INFO] |  |  +- io.netty:netty-transport-native-kqueue:jar:osx-x86_64:4.1.108.Final:compile
[INFO] |  |  |  \- io.netty:netty-transport-classes-kqueue:jar:4.1.108.Final:compile
[INFO] |  |  +- io.netty:netty-tcnative-boringssl-static:jar:2.0.65.Final:compile
[INFO] |  |  |  +- io.netty:netty-tcnative-classes:jar:2.0.65.Final:compile
[INFO] |  |  |  +- io.netty:netty-tcnative-boringssl-static:jar:linux-x86_64:2.0.65.Final:compile
[INFO] |  |  |  +- io.netty:netty-tcnative-boringssl-static:jar:linux-aarch_64:2.0.65.Final:compile
[INFO] |  |  |  +- io.netty:netty-tcnative-boringssl-static:jar:osx-x86_64:2.0.65.Final:compile
[INFO] |  |  |  +- io.netty:netty-tcnative-boringssl-static:jar:osx-aarch_64:2.0.65.Final:compile
[INFO] |  |  |  \- io.netty:netty-tcnative-boringssl-static:jar:windows-x86_64:2.0.65.Final:compile

[janjwerner-confluent]

Hey @findingrish
I'm on it, just got stuck with other work and could not follow up on this.
Thanks!