Bump snappy-java, avro, jackson-databind, and protobuf-java for CVE remediation

Author: sidhdirenge

pom.xml

@@ -237,7 +237,7 @@
     <dependency>
       <groupId>org.apache.avro</groupId>
       <artifactId>avro</artifactId>
-      <version>${avro.version}</version>
+      <version>1.11.4</version>
       <exclusions>
         <exclusion>
           <groupId>com.fasterxml.jackson.core</groupId>
@@ -307,7 +307,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>${guava.version}</version>
+      <version>31.1-jre</version>
     </dependency>
     <dependency>
       <groupId>com.google.cloud.bigdataoss</groupId>
@@ -641,7 +641,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>${google.protobuf.java.version}</version>
+      <version>3.25.5</version>
     </dependency>
     <dependency>
       <groupId>com.google.cloud</groupId>
@@ -666,7 +666,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>${jackson.core.version}</version>
+      <version>2.14.0</version>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>
@@ -806,7 +806,7 @@
     <dependency>
       <groupId>org.xerial.snappy</groupId>
       <artifactId>snappy-java</artifactId>
-      <version>1.1.7.2</version>
+      <version>1.1.10.5</version>
     </dependency>
     <!-- Start: dependency for Google PubSub Streaming Source -->
     <dependency>