fix CVE-2023-4586 (#632)

Co-authored-by: za-liuyonghua <[email protected]>

Author: alanlvle

CHANGES.md

@@ -16,6 +16,7 @@ Release Notes.
 * To compatible upper and lower case Oracle TNS url parse.
 * Fix config length limitation.
 * Support collecting ZGC memory pool metrics. Require OAP 9.7.0 to support these new metrics.
+* Upgrade netty-codec-http2 to 4.1.100.Final
 
 
 #### Documentation

dist-material/LICENSE

@@ -221,7 +221,7 @@ The text of each license is the standard Apache 2.0 license.
     Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0
     Google: jsr305 3.0.2: http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom , Apache 2.0
     Google: guava 32.0.1: https://github.com/google/guava , Apache 2.0
-    netty 4.1.94: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
+    netty 4.1.100: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
 
 ========================================================================
 BSD licenses

pom.xml

@@ -88,7 +88,7 @@
         <!-- core lib dependency -->
         <bytebuddy.version>1.14.4</bytebuddy.version>
         <grpc.version>1.50.0</grpc.version>
-        <netty.version>4.1.94.Final</netty.version>
+        <netty.version>4.1.100.Final</netty.version>
         <gson.version>2.8.9</gson.version>
         <os-maven-plugin.version>1.6.2</os-maven-plugin.version>
         <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>