fix vulnerabilities #204

Author: irajtaghlidi

commons/src/main/java/com/datastax/oss/cdc/NativeSchemaWrapper.java

@@ -16,6 +16,7 @@
 package com.datastax.oss.cdc;
 
 import org.apache.avro.Schema;
+import org.apache.avro.SchemaFormatter;
 import org.apache.pulsar.client.api.schema.SchemaInfoProvider;
 import org.apache.pulsar.common.schema.SchemaInfo;
 import org.apache.pulsar.common.schema.SchemaType;
@@ -35,7 +36,7 @@ public NativeSchemaWrapper(Schema nativeSchema, SchemaType pulsarSchemaType) {
         this.nativeSchema = nativeSchema;
         this.pulsarSchemaType = pulsarSchemaType;
         this.pulsarSchemaInfo = SchemaInfo.builder()
-                .schema(nativeSchema.toString(false).getBytes(StandardCharsets.UTF_8))
+                .schema(SchemaFormatter.getInstance("json/inline").format(nativeSchema).getBytes(StandardCharsets.UTF_8))
                 .properties(new HashMap<>())
                 .type(pulsarSchemaType)
                 .name(nativeSchema.getName())

gradle.properties

@@ -7,15 +7,15 @@ snapshotsRepoUrl=https://repo.aws.dsinternal.org/artifactory/datastax-snapshots-
 releasesRepoUrl=https://repo.datastax.com/artifactory/datastax-public-releases-local
 
 # deps version
-avroVersion=1.11.4
+avroVersion=1.12.1
 lombokVersion=1.18.20
 ossDriverVersion=4.16.0
 cassandra3Version=3.11.10
 cassandra4Version=4.0.4
 dse4Version=6.8.23
 
 pulsarGroup=org.apache.pulsar
-pulsarVersion=3.0.0
+pulsarVersion=3.0.14
 # Used when running tests locally, CI will override those values
 testPulsarImage=datastax/lunastreaming
 testPulsarImageTag=2.10_3.4