CVE-2025-24970, CVE-2025-25193: Upgrading netty to version 4.1.119.Final

Author: davidrabinowitz

CHANGES.md

@@ -1,6 +1,7 @@
 # Release Notes
 
 ## Next
+* CVE-2025-24970, CVE-2025-25193: Upgrading netty to version 4.1.119.Final
 * PR #1284: Making BigQueryClientFactory Kryo serializable. Thanks @tom-s-powell !
 
 ## 0.42.0 - 2025-02-06

spark-bigquery-parent/pom.xml

@@ -65,7 +65,7 @@
         <grpc.version>1.70.0</grpc.version>
         <guava.version>33.4.0-jre</guava.version>
         <jackson.version>2.18.2</jackson.version>
-        <netty.version>4.1.117.Final</netty.version>
+        <netty.version>4.1.119.Final</netty.version>
         <openlineage-spark.version>1.27.0</openlineage-spark.version>
         <paranamer.version>2.8</paranamer.version>
         <!-- Don't upgrade protobuf until bigquerystorage is compatible with 4.x version of proto.