Bump Netty to 4.1.137.Final, Reactor Netty to 1.2.18, and Thrift to 0.24.0

[HTHou]

Description

• Upgrade the managed Netty BOM from 4.1.136.Final to 4.1.137.Final.
• Upgrade Reactor Netty from 1.2.9 to 1.2.18 to address CVE-2026-41715, and align Reactor Core from 3.7.9 to 3.7.19 with the same 2024.0.18 release train.
• Upgrade the Java Thrift runtime (org.apache.thrift:libthrift) from 0.23.0 to 0.24.0.
• Keep iotdb-tools-thrift at 0.23.0.0 intentionally. In the upstream v0.23.0...v0.24.0 compiler diff, the standard Java generator and compiler entry point are unchanged. The compiler changes are primarily in other language generators, so adopting those can remain a separate decision.
• Update the corresponding entries in LICENSE-binary and the JDBC feature descriptor.

Verification

• mvn -nsu -am -pl iotdb-core/datanode,external-service-impl/mqtt,iotdb-core/metrics/interface dependency:tree -Dincludes=io.netty:* -Dverbose -DskipTests
• mvn -nsu compile -pl iotdb-core/datanode,external-service-impl/mqtt,iotdb-core/metrics/interface -am -DskipTests
• mvn -nsu test -pl external-service-impl/mqtt -am -Dtest=JSONPayloadFormatterTest,LinePayloadFormatterTest -DfailIfNoTests=false -Dsurefire.failIfNoSpecifiedTests=false
• mvn -nsu -pl iotdb-core/metrics/interface -am dependency:tree '-Dincludes=io.projectreactor:*,io.projectreactor.netty:*,io.netty:*' -Dverbose -DskipTests
• mvn -nsu test -pl iotdb-core/metrics/interface -am -Dtest=MetricConfigTest,WindowsDiskMetricsManagerTest -DfailIfNoTests=false -Dsurefire.failIfNoSpecifiedTests=false
• Reactor Netty HTTP server bind/dispose smoke test with Reactor Netty 1.2.18, Reactor Core 3.7.19, and Netty 4.1.137.Final.
• mvn -nsu -am -pl distribution dependency:tree -Dincludes=org.apache.thrift:libthrift -Dverbose -DoutputFile=/tmp/iotdb-thrift-024-dependency-tree.txt -DappendOutput=true -DskipTests
• mvn -nsu test-compile -pl iotdb-core/confignode,iotdb-core/datanode,iotdb-client/jdbc,iotdb-client/service-rpc -am -DskipTests
• mvn -nsu test-compile -pl iotdb-core/confignode,iotdb-core/datanode,iotdb-client/jdbc,iotdb-client/service-rpc -am -DskipTests -P with-zh-locale
• mvn -nsu test -pl iotdb-client/service-rpc,iotdb-core/node-commons -am -Dtest=AutoResizingBufferTest,TElasticFramedTransportTest,DeepCopyRpcTransportFactoryTest,NoopServerContextTest -DfailIfNoTests=false -Dsurefire.failIfNoSpecifiedTests=false

---

This PR has:

• been self-reviewed.
• added or updated version, license, or notice information.

---

Key changed files

• pom.xml
• LICENSE-binary
• iotdb-client/jdbc/src/main/feature/feature.xml