tez/0.10.4-r7: cve remediation

tez.yaml

@@ -1,7 +1,7 @@
 package:
   name: tez
   version: 0.10.4
-  epoch: 7
+  epoch: 8
   description: Apache Tez
   copyright:
     - license: Apache-2.0
@@ -27,7 +27,7 @@ pipeline:
 
   - uses: maven/pombump
     with:
-      patch-file: patches.yaml
+      patch-file: pombump-deps.yaml
       properties-file: pombump-properties.yaml
 
   - runs: |

tez/pombump-deps.yaml

@@ -1,4 +1,7 @@
 patches:
-    - groupId: org.eclipse.jetty
-      artifactId: jetty-server
-      version: 9.4.57.v20241219
+    - groupId: org.apache.avro
+      artifactId: avro
+      version: 1.11.4
+    - groupId: com.google.protobuf
+      artifactId: protobuf-java
+      version: 3.25.5

tez/pombump-properties.yaml

@@ -1,3 +1,5 @@
 properties:
   - property: netty.version
     value: 4.1.118.Final
+  - property: asynchttpclient.version
+    value: 2.12.4