fix: security alerts and align pom dependency properties

[sheyanjie-qq]

Description

fix security alerts and align pom dependency properties

Issue(s)

• Close: https://project.feishu.cn/taosdata_td/defect/detail/6604269742

Checklist

Please check the items in the checklist if applicable.

• Is the user manual updated?
• Are the test cases passed and automated?
• Is there no significant decrease in test coverage?

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[Copilot]

Pull request overview

Updates dependency versions/properties and GitHub Actions permissions to address security alerts and standardize dependency management across build and deploy POMs.

Changes:

• Bump Jackson version and centralize Log4j/LZ4 versions via Maven properties in both pom.xml and deploy-pom.xml.
• Replace/standardize LZ4 usage by excluding org.lz4:lz4-java from Flink deps and adding at.yawk.lz4:lz4-java.
• Add explicit permissions blocks to GitHub Actions workflows.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
pom.xml	Updates dependency properties (Jackson/Log4j/LZ4) and adjusts LZ4 dependency/exclusions to mitigate CVEs.
deploy-pom.xml	Mirrors pom.xml dependency property alignment and LZ4 dependency/exclusions.
.github/workflows/release.yml	Adds workflow token permissions and fixes YAML indentation for the dependency submission step.
.github/workflows/build.yml	Adds explicit read-only workflow token permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.35%. Comparing base (ec9846c) to head (e1eb937).

Additional details and impacted files

@@            Coverage Diff            @@
##               main      #28   +/-   ##
=========================================
  Coverage     80.35%   80.35%           
  Complexity      468      468           
=========================================
  Files            56       56           
  Lines          2016     2016           
  Branches        233      233           
=========================================
  Hits           1620     1620           
  Misses          285      285           
  Partials        111      111           

Flag	Coverage Δ
unittests	80.35% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[zyyang90]

LGTM