Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

---------

Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

---------

Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

---------

Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

---------

Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

---------

Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

Co-authored-by: Chris Vest <christianvest_hansen@apple.com>
Co-authored-by: Jonas Konrad <me@yawk.at>

Motivation:
The code assumed that oversized bit shifting would result in zeroing out
values due to overflow. However, the Java Language Specification instead
says that shifts effectively only consider the lower six bits of the
shift amount, resulting in modular-arithmetic shifts. The consequence is
that, for instance, shifing by the capital letter 'M' produces the same
bit mask as carriage-return '\r', which is an illegal character in an
HTTP start line. This incorrectly rejected valid URIs.

Modification:
Make the shifting conditional and only use it on character values less
than or equal to 64 (the Long bit size). Also add tests to check that
valid URLs are accepted.

Result:
Fixes #16020

Co-authored-by: Chris Vest <christianvest_hansen@apple.com>
Co-authored-by: Jonas Konrad <me@yawk.at>

### What changes were proposed in this pull request?

This PR aims to upgrade Netty to `4.2.9.Final` by overriding the transitive one from the Apache Spark 4.1.x.

### Why are the changes needed?

To bring the latest bug fixed version in Apache Spark K8s Operator like the Apache Spark 4.2.x.
- https://netty.io/news/2025/12/11/4-2-8.html
  - [CVE-2025-67735](GHSA-84h7-rjj3-6jx4)
- https://netty.io/news/2025/12/15/4-2-9.html
  - netty/netty#16022

### Does this PR introduce _any_ user-facing change?

No.

### How was this patch tested?

Pass the CIs.

**BEFORE**
```
$ gradle spark-operator:dependencyInsight --configuration compileClasspath --dependency io.netty | grep '^io.netty' | awk -F: '{print $NF}' | sort | uniq -c
   2 4.1.119.Final -> 4.2.7.Final
   9 4.1.130.Final -> 4.2.7.Final
  50 4.2.7.Final
```

**AFTER**
```
$ gradle spark-operator:dependencyInsight --configuration compileClasspath --dependency io.netty | grep '^io.netty' | awk -F: '{print $NF}' | sort | uniq -c
   2 4.1.119.Final -> 4.2.9.Final
   9 4.1.130.Final -> 4.2.9.Final
   3 4.2.7.Final -> 4.2.9.Final
  22 4.2.9.Final
  25 4.2.9.Final (selected by rule)
```

### Was this patch authored or co-authored using generative AI tooling?

Yes (`Opus 4.5` on `Claude Code v2.1.5`)

Closes #477 from dongjoon-hyun/SPARK-55288.

Authored-by: Dongjoon Hyun <dongjoon@apache.org>
Signed-off-by: Dongjoon Hyun <dongjoon@apache.org>