io.netty:netty-handler:4.1.116.Final is flagged by dependabot

[ansf]

firebase-admin-java has a dependency to io.netty:netty-handler:4.1.116.Final.
This version of netty-handler is flagged by dependabot, see GHSA-4g8c-wm8x-jfhw

For the fixed version 4.1.118 there is already a pull request: #1074

This might not be a critical issue to firebase-admin-java, but it would be nice if you could publish a release after merging the PR.

[google-oss-bot]

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.