Merge pull request #109 from Azure/fix-cve-error

fix netty CVE

README.md

@@ -698,6 +698,7 @@ the [Release History](README.md#16-release-history) section of this document.
 | 4.0.2           | 2023-06-28   | <ul><li>Upgrade Kusto Java SDK to 5.0.0</li><li>Fix vulnerabilities in libs</li></ul>
 | 4.0.3           | 2023-07-23   | <ul><li>Upgrade Kusto Java SDK to 5.0.1</li><li>Fix vulnerabilities in libs</li></ul>
 | 4.0.4           | 2023-09-27   | <ul><li>Upgrade Kusto Java SDK to 5.0.2</li><li>Fix vulnerabilities in snappy-java</li></ul>
+| 4.0.5           | 2023-10-27   | <ul><li>Fix vulnerabilities by upgrading io.netty </li></ul>
 
 ## 17. Contributing
 

pom.xml

@@ -8,7 +8,7 @@
     <artifactId>kafka-sink-azure-kusto</artifactId>
     <packaging>jar</packaging>
     <description>A Kafka Connect plugin for Azure Data Explorer (Kusto) Database</description>
-    <version>4.0.4</version>
+    <version>4.0.5</version>
     <properties>
         <avro.random.generator.version>0.4.1</avro.random.generator.version>
         <awaitility.version>4.2.0</awaitility.version>
@@ -32,7 +32,7 @@
         <mvn.surefire.plugin.version>3.0.0</mvn.surefire.plugin.version>
         <mockito.version>4.11.0</mockito.version>
         <!-- Added to override vulnerable deps -->
-        <netty.version>4.1.98.Final</netty.version>
+        <netty.version>4.1.100.Final</netty.version>
         <nimbusjose.jwt.version>9.31</nimbusjose.jwt.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <snappy.version>1.1.10.4</snappy.version>