[fix][sec] Cherry-pick owasp-dependency-check fixes

[nikhil-ctds]

Motivation

Explain here the context, and why you're making that change. What is the problem you're trying to solve.

Modifications

Describe the modifications you've done.

• 23bf51a - [fix][sec] Bump avro version to 1.11.3 for CVE-2023-39410 ([fix][sec] Bump avro version to 1.11.3 for CVE-2023-39410 apache/pulsar#21341)
• efc4bf3 - [fix][sec] Add OWASP Dependency Check suppressions ([fix][sec] Add OWASP Dependency Check suppressions apache/pulsar#21281)
• a790d7f - [fix][sec] Upgrade Jetty to 9.4.53 to address CVE-2023-44487 ([fix][sec] Upgrade Jetty to 9.4.53 to address CVE-2023-44487 apache/pulsar#21395)
• 8e5f00e - [fix][sec] Upgrade snappy-java to 1.1.10.5 ([fix][sec] Upgrade snappy-java to 1.1.10.5 apache/pulsar#21280)
• a614aad - [improve][build] Upgrade Apache ZooKeeper to 3.9.1 ([improve][build] Upgrade Apache ZooKeeper to 3.9.1 apache/pulsar#20933)
• aae6c71 - [fix][sec] Upgrade Netty to 4.1.100 to address CVE-2023-44487 ([fix][sec] Upgrade Netty to 4.1.100 to address CVE-2023-44487 apache/pulsar#21397)

Verifying this change

• Make sure that the change passes the CI checks.

(Please pick either of the following options)

This change is a trivial rework / code cleanup without any test coverage.

Does this pull request potentially affect one of the following parts:

If yes was chosen, please highlight the changes

• Dependencies (does it add or upgrade a dependency): (yes)
• The public API: (no)
• The schema: (no)
• The default values of configurations: (yes)
• The wire protocol: (no)
• The rest endpoints: (no)
• The admin cli options: (no)
• Anything that affects deployment: (no)

Documentation

Check the box below or label this PR directly (if you have committer privilege).

Need to update docs?

• doc-required

  (If you need help on updating docs, create a doc issue)

• no-need-doc

  (Please explain why)

• doc

  (If this PR contains doc changes)