chore(deps): bump dubbo from 2.6.7 to 2.6.9 in /bom

[dependabot[bot]]

Bumps dubbo from 2.6.7 to 2.6.9.

Release notes

Sourced from dubbo's releases.

dubbo-2.6.9

• Support hessian 3.2.8/3.2.9 whitelist and blacklist
• Upgrade Fastjson dependency to 1.2.70
• Enhanced consumer side thread pool strategy

apache-dubbo-2.6.8

Please upgrade to the latest version to avoid potential security issues.

Vulnerability

CVE-2019-17564, Apache Dubbo deserialization vulnerability.

Commits

• d895bf1 prepare for 2.6.9 release
• 5e2c07c Hessian whitelist2 (#6486)
• 4a8abfd hessian whitelist (#6388)
• a9f0762 fix #6369, Consumer cant set correct retries via generic invocation (#6370)
• 59320a9 upgrade fastjson to 1.2.70 (#6255)
• 280d54c fix override when interfaces is not null(#5860)
• e778d5a upgrade fastjson to 1.2.67 (#5915)
• 585bb11 add new thread pool strategy for Consumer, allow all service calls to share t...
• bada690 ignore empty blacklist pattern
• 5a6a069 copyright 2018-2020
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sofastack/sofa-rpc/network/alerts).

[codecov[bot]]

Codecov Report

Merging #1184 (443dbef) into master (ed9314b) will increase coverage by 0.05%. The diff coverage is n/a.

@@             Coverage Diff              @@
##             master    #1184      +/-   ##
============================================
+ Coverage     71.18%   71.24%   +0.05%     
  Complexity      829      829              
============================================
  Files           407      407              
  Lines         17201    17201              
  Branches       2680     2680              
============================================
+ Hits          12245    12255      +10     
+ Misses         3581     3574       -7     
+ Partials       1375     1372       -3     

Impacted Files	Coverage Δ
...lipay/sofa/rpc/message/AbstractResponseFuture.java	56.14% <0.00%> (-0.88%)	:arrow_down:
...ay/sofa/rpc/client/AllConnectConnectionHolder.java	60.51% <0.00%> (-0.26%)	:arrow_down:
...ipay/sofa/rpc/tracer/sofatracer/RpcSofaTracer.java	91.06% <0.00%> (+0.74%)	:arrow_up:
.../com/alipay/sofa/rpc/context/RpcInvokeContext.java	82.40% <0.00%> (+0.92%)	:arrow_up:
...ofa/rpc/registry/zk/ZookeeperProviderObserver.java	75.00% <0.00%> (+2.50%)	:arrow_up:
...ipay/sofa/rpc/server/bolt/BoltServerProcessor.java	69.59% <0.00%> (+4.72%)	:arrow_up:

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update ed9314b...443dbef. Read the comment docs.