[fix][broker] Fix NPE causing dispatching to stop when using Key_Shared mode and allowOutOfOrderDelivery=true[improve][build] Upgrade OWASP Dependency check version to 9.1.0[improve][broker] Optimize gzip compression for /metrics endpoint by sharing/caching compressed resultece1684113 [fix][client][branch-2.11] Fix cherry-picking issue in #22393, address SpotBugs failure[fix][io] Kafka Source connector maybe stuck[fix][io] Config autoCommitEnabled when it disabled[fix][broker] Optimize /metrics, fix unbounded request queue issue and fix race conditions in metricsBufferResponse modeef20f2bdcd Remove unused import in PendingAckHandleImpl[improve][broker] Improve Gzip compression, allow excluding specific paths or disabling it[improve][test] Replace usage of curl in Java test and fix stream leaks[improve] [broker] Servlet support response compression[fix] [broker] Prevent long deduplication cursor backlog so that topic loading wouldn’t timeout[fix][txn]Handle exceptions in the transaction pending ack init[fix][client] Fix client side memory leak when call MessageImpl.create and fix imprecise client-side metrics: pendingMessagesUpDownCounter, pendingBytesUpDownCounter, latencyHistogram[fix][broker] Fix invalid condition in logging exceptions
cve: upgrade depend versionBump org.apache.commons:commons-compress from 1.21 to 1.26.0Bump jackson-databind from 2.13.4.1 to 2.13.4.2Bump json-smart from 2.4.7 to 2.4.9Use the Apache images to run tests, in order to avoid permission issues.