netty 4.2.7.Final is flagged by dependabot

[ansf]

see GHSA-84h7-rjj3-6jx4

there already is an open pull request: #1157

• is the firebase-admin SDK actually affected by this issues?
  • at the first glance, it looks like netty is only used to connect to the realtime database via websocket
• are there plans to merge the PR and release a version?

[google-oss-bot]

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

[lahirumaramba]

Hey @ansf thank you for filing this issue. I don't see any usage of HttpRequestEncoder in the codebase so we should be good here. We will still merge #1157 and include the update in the next release.

[jonathanedey]

This is now resolved in Admin Java v9.7.1.