bump netty version and make netty dependencies explicit