[AMORO-3971] Fix high CVEs in dependencies, including Zookeeper, Jackson-Core, and Snappy-Java.

[zhangwl9]

Why are the changes needed?

Close #3971.

Brief change log

• Bump shade-zookeeper version to 3.9.4
• Bump shade-jackson version to 2.15.0
• Bump snappy-java version to 1.1.10.1
• Bump maven-shade-plugin to 3.4.0 in order to upgrade the Jackson version. For details, see (hofix) Upgrade the maven-shade-plugin version from 3.1.1 to 3.4.0 to resolve Maven compilation exceptions. amoro-shade#16

How was this patch tested?

• Add some test cases that check the changes thoroughly including negative and positive cases if possible

• Add screenshots for manual tests if appropriate

• Run test locally before making a pull request

Documentation

• Does this pull request introduce a new feature? (yes / no)
• If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented)

[xxubai]

releated to amoro-shade: apache/amoro-shade#3

[zhangwl9]

releated to amoro-shade: apache/amoro-shade#3
I need to wait for amoro-shade-zookeeper to be merged first, and then update amoro-shade-jackson to 2.15.0. Only then I can update the relevant reference versions in the amoro project.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 28.94%. Comparing base (99ecf53) to head (909f7ea).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #3976      +/-   ##
============================================
- Coverage     29.14%   28.94%   -0.21%     
+ Complexity     3921     3877      -44     
============================================
  Files           638      632       -6     
  Lines         50937    50676     -261     
  Branches       6545     6464      -81     
============================================
- Hits          14846    14668     -178     
+ Misses        35030    34978      -52     
+ Partials       1061     1030      -31     

Flag	Coverage Δ
core	28.94% <ø> (-0.21%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[turboFei]

could you update the dependencies list.

./dev/dependencies.sh --replace

[zhangwl9]

@xxubai
I noticed you've updated the Shade version in https://github.com/apache/amoro-shade/tree/update-0.9-snapshot, but when Amoro runs the compilation, it can't access these new Shade version JAR files. What else needs to be done? You can upload the new version to the location specified in the error report.

[zhangwl9]

The compilation error is as follows:

We must await the release of the maven-shade 0.9-snapshot version. Only after obtaining the jar file for this version from the following path （https://repository.apache.org/content/groups/snapshots/org/apache/amoro/amoro-shade-zookeeper-3/） can compilation proceed.