fix: bump netty from 4.1.127 to 4.1.135 to remediate CVE-2026-44249 and CVE-2026-45416

Bumps netty.version to 4.1.135.Final to fix:
- CVE-2026-44249 (CVSS 8.1): IPv6 subnet ACL bypass
- CVE-2026-45416 (CVSS 7.5): TLS ClientHello memory exhaustion DoS

This also covers CVE-2026-42583 (CVSS 7.5, fixed in 4.1.131.Final).

Author: nikagra

pom.xml

@@ -56,7 +56,7 @@
         <slf4j.version>1.7.36</slf4j.version>
         <slf4j-log4j12.version>1.7.36</slf4j-log4j12.version>
         <guava.version>33.3.1-jre</guava.version>
-        <netty.version>4.1.127.Final</netty.version>
+        <netty.version>4.1.135.Final</netty.version>
         <netty-tcnative.artifact>netty-tcnative-boringssl-static</netty-tcnative.artifact>
         <netty-tcnative.version>2.0.70.Final</netty-tcnative.version>
         <metrics.version>3.2.6</metrics.version>