[fix][sec] Upgrade scala-library to get rid of CVE-2022-36944

[nicoloboschi]

Motivation

scala-library 2.13.3 is vulnerable to CVE-2022-36944.
This lib is used in debezium sources

Modifications

• Upgrade to 2.13.10

Documentation

• doc
• doc-required
• doc-not-needed
• doc-complete

[github-actions]

The pr had no activity for 30 days, mark with Stale label.

[eolivelli]

LGTM

[codecov-commenter]

Codecov Report

Merging #18021 (42c6536) into master (050b310) will increase coverage by 0.30%.
The diff coverage is 33.33%.

@@             Coverage Diff              @@
##             master   #18021      +/-   ##
============================================
+ Coverage     47.35%   47.65%   +0.30%     
- Complexity     9384     9441      +57     
============================================
  Files           623      623              
  Lines         59104    59106       +2     
  Branches       6146     6147       +1     
============================================
+ Hits          27987    28166     +179     
+ Misses        28100    27910     -190     
- Partials       3017     3030      +13     

Flag	Coverage Δ
unittests	47.65% <33.33%> (+0.30%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
...va/org/apache/pulsar/broker/service/ServerCnx.java	49.88% <0.00%> (+1.34%)	⬆️
.../pulsar/broker/service/persistent/SystemTopic.java	92.30% <100.00%> (+0.64%)	⬆️
...he/pulsar/client/impl/PartitionedProducerImpl.java	30.34% <0.00%> (-5.13%)	⬇️
...g/apache/pulsar/broker/lookup/TopicLookupBase.java	50.83% <0.00%> (-2.80%)	⬇️
...sar/broker/service/schema/SchemaRegistryStats.java	71.25% <0.00%> (-1.25%)	⬇️
...rg/apache/pulsar/broker/web/PulsarWebResource.java	57.51% <0.00%> (-1.25%)	⬇️
...va/org/apache/pulsar/client/impl/ProducerImpl.java	15.66% <0.00%> (-1.17%)	⬇️
...apache/pulsar/broker/namespace/OwnershipCache.java	69.47% <0.00%> (-1.06%)	⬇️
...tent/PersistentDispatcherSingleActiveConsumer.java	58.30% <0.00%> (-0.95%)	⬇️
.../pulsar/client/impl/ProducerStatsRecorderImpl.java	84.04% <0.00%> (-0.62%)	⬇️
... and 32 more

[tisonkun]

@nicoloboschi @eolivelli I'm pretty curious where we have a dependency on scala-library explicitly or transitively, lol.

[nicoloboschi]

@nicoloboschi @eolivelli I'm pretty curious where we have a dependency on scala-library explicitly or transitively, lol.

Kafka uses scala and kafka is used in the debezium connectors. Actually the whole kafka dependency seems useless, only Kafka connect should be used.
Let's see if integration tests pass even without it nicoloboschi#42