Java Client Thrift Deprecation

[shijiesheng]

We are using an old version of Thrift and that has vulnerability issues. Upgrading the version is a breaking change and that leads to discussions on deprecating Thrift in the new V4 version

Reasons to move away from Thrift:

• GRPC has gained popularity over time and Uber internally is no longer using thrift for new usages
• Upgrading Thrift is a non-trivial breaking change; internally Uber used a forked thrift based on an old version
• Supporting both thrift and grpc leads to extra maintenance cost

[thle40]

I'd like to list the libthrift vulnerability, we tried override libthrift in out system but cadence-client is broken when bumping libthrift version larger than 0.14.0
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13949
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0205
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1320
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11798