diff --git a/hypertrace-core-graphql-platform/build.gradle.kts b/hypertrace-core-graphql-platform/build.gradle.kts index 27c2a418..08afb5fc 100644 --- a/hypertrace-core-graphql-platform/build.gradle.kts +++ b/hypertrace-core-graphql-platform/build.gradle.kts @@ -13,10 +13,11 @@ dependencies { api(platform("com.fasterxml.jackson:jackson-bom:2.15.2")) constraints { - api("org.hypertrace.core.grpcutils:grpc-context-utils:0.12.2") - api("org.hypertrace.core.grpcutils:grpc-client-utils:0.12.2") - api("org.hypertrace.core.grpcutils:grpc-client-rx-utils:0.12.2") + api("org.hypertrace.core.grpcutils:grpc-context-utils:0.12.6") + api("org.hypertrace.core.grpcutils:grpc-client-utils:0.12.6") + api("org.hypertrace.core.grpcutils:grpc-client-rx-utils:0.12.6") api("org.hypertrace.gateway.service:gateway-service-api:0.3.2") + api("org.hypertrace.core.serviceframework:platform-http-service-framework:0.1.62") api("org.hypertrace.core.attribute.service:caching-attribute-service-client:${attributeServiceVersion}") api("org.hypertrace.core.attribute.service:attribute-service-api:${attributeServiceVersion}") diff --git a/hypertrace-core-graphql-service/build.gradle.kts b/hypertrace-core-graphql-service/build.gradle.kts index 43e703ba..77bb83fc 100644 --- a/hypertrace-core-graphql-service/build.gradle.kts +++ b/hypertrace-core-graphql-service/build.gradle.kts @@ -8,7 +8,7 @@ plugins { dependencies { implementation(platform(project(":hypertrace-core-graphql-platform"))) - implementation("org.hypertrace.core.serviceframework:platform-http-service-framework:0.1.52") + implementation("org.hypertrace.core.serviceframework:platform-http-service-framework") implementation("org.slf4j:slf4j-api") implementation("com.graphql-java-kickstart:graphql-java-servlet") diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml index 07948e5c..bd273df4 100644 --- a/owasp-suppressions.xml +++ b/owasp-suppressions.xml @@ -15,7 +15,29 @@ ^pkg:maven/io\.github\.graphql\-java/graphql\-java\-annotations@.*$ cpe:/a:graphql-java:graphql-java - + + + ^pkg:maven/io\.netty/netty.*@.*$ + CVE-2023-4586 + + + + ^pkg:maven/org\.eclipse\.jetty/jetty\-servlets@9.4.53\..*$ + CVE-2023-36479 + +