HCD-258: Upgrade Netty to 4.1.130 and BoringSSL to 2.0.74

[szymon-miezal]

The rationale behind this upgrade is to remediate CVE-2025-67735.

Some fallout test results:

(http://fallout.aws.dsinternal.org/performance/szymon.miezal@datastax.com/report/42b314cf-dcc5-4e5c-9254-706c5594e7ff) (http://fallout.aws.dsinternal.org/performance/szymon.miezal@datastax.com/report/5b9a5813-f59f-4ba9-af8f-0afd18e9b477) (http://fallout.aws.dsinternal.org/performance/szymon.miezal@datastax.com/report/dedd9a0c-e84a-4ae4-8083-eb6ba0189f86)

CNDB PR: https://github.com/riptano/cndb/pull/16481

[github-actions]

Checklist before you submit for review

• This PR adheres to the Definition of Done
• Make sure there is a PR in the CNDB project updating the Converged Cassandra version
• Use NoSpamLogger for log lines that may appear frequently in the logs
• Verify test results on Butler
• Test coverage for new/modified code is > 80%
• Proper code formatting
• Proper title for each commit staring with the project-issue number, like CNDB-1234
• Each commit has a meaningful description
• Each commit is not very long and contains related changes
• Renames, moves and reformatting are in distinct commits
• All new files should contain the DataStax copyright header instead of the Apache License one

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cassci-bot]

❌ Build ds-cassandra-pr-gate/PR-2200 rejected by Butler

---

4 regressions found
See build details here

---

Found 4 new test failures

Test	Explanation	Runs	Upstream
o.a.c.distributed.test.AbortedQueryLoggerTest.testLogsReadMetrics	REGRESSION	🔵🔴	0 / 20
o.a.c.index.sai.QueryContextTest.testWideTableScoreOrdered[db] (compression)	REGRESSION	🔵🔴	0 / 20
o.a.c.index.sai.cql.VectorCompaction100dTest.testOneToManyCompaction[dc false]	REGRESSION	🔴⚪	0 / 20
o.a.c.index.sai.cql.VectorSiftSmallTest.testRerankKZeroOrderMatchesFullPrecisionSimilarity[ca false]	REGRESSION	🔴⚪	0 / 20

---

Found 2 known test failures

[jkni]

LGTM. I reviewed the changelogs and didn't see anything obviously concerning. Basic performance testing matches how we evaluated previous Netty upgrades. boringssl version matches the BOM for this netty version.

[bereng]

CI is good and we have the usual perf tests we have done in other Netty upgrades.