[fix][sec] Bump org.apache.avro:avro from 1.8.2 to 1.11.3 in /pulsar-…

…io/flume (apache#21283)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matteo Merli <mmerli@apache.org>

pulsar-io/flume/pom.xml

@@ -31,10 +31,6 @@
     <artifactId>pulsar-io-flume</artifactId>
     <name>Pulsar IO :: Flume</name>
 
-    <properties>
-        <avro.version>1.8.2</avro.version>
-    </properties>
-
     <dependencies>
         <dependency>
             <groupId>${project.groupId}</groupId>
@@ -54,7 +50,7 @@
         <dependency>
             <groupId>org.apache.flume</groupId>
             <artifactId>flume-ng-node</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <type>pom</type>
             <exclusions>
                 <exclusion>