From 4b8dd82b0fc63e10b4ed3abd11d07409b0131c74 Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <aaron@traceable.ai>
Date: Tue, 24 Sep 2024 12:06:54 -0400
Subject: [PATCH] chore: update protobuf via grpc utils

---
 owasp-suppressions.xml                         | 18 ------------------
 .../build.gradle.kts                           |  4 ++--
 .../build.gradle.kts                           |  2 +-
 3 files changed, 3 insertions(+), 21 deletions(-)

diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml
index 9c3da7e..3c51e4c 100644
--- a/owasp-suppressions.xml
+++ b/owasp-suppressions.xml
@@ -1,21 +1,3 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-  <suppress>
-    <notes><![CDATA[
-   Any hypertrace dep
-   ]]></notes>
-    <packageUrl regex="true">^pkg:maven/org\.hypertrace\..*@.*$</packageUrl>
-    <cpe>cpe:/a:grpc:grpc</cpe>
-    <cpe>cpe:/a:utils_project:utils</cpe>
-  </suppress>
-  <suppress until="2024-07-31Z">
-    <notes><![CDATA[
-   This CVE is declared fixed from 9.4.52, but the vuln db is not reflecting that. Suppress that specific version until
-   db is updated.
-   Ref:
-   https://github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
-   ]]></notes>
-    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-servlets@9.4.53\..*$</packageUrl>
-    <vulnerabilityName>CVE-2023-36479</vulnerabilityName>
-  </suppress>
 </suppressions> 
diff --git a/platform-grpc-service-framework/build.gradle.kts b/platform-grpc-service-framework/build.gradle.kts
index c5554ab..7a6101c 100644
--- a/platform-grpc-service-framework/build.gradle.kts
+++ b/platform-grpc-service-framework/build.gradle.kts
@@ -10,7 +10,7 @@ dependencies {
   api(platform("io.grpc:grpc-bom:1.60.0"))
   api("io.grpc:grpc-api")
   api("io.grpc:grpc-services")
-  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.4")
+  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.6")
   api("com.typesafe:config:1.4.2")
   api(project(":service-framework-spi"))
 
@@ -21,5 +21,5 @@ dependencies {
   implementation("io.grpc:grpc-inprocess")
   implementation("io.grpc:grpc-netty")
   implementation("org.slf4j:slf4j-api:1.7.36")
-  implementation("org.hypertrace.core.grpcutils:grpc-server-utils:0.13.4")
+  implementation("org.hypertrace.core.grpcutils:grpc-server-utils:0.13.6")
 }
diff --git a/platform-http-service-framework/build.gradle.kts b/platform-http-service-framework/build.gradle.kts
index 6de765c..393c826 100644
--- a/platform-http-service-framework/build.gradle.kts
+++ b/platform-http-service-framework/build.gradle.kts
@@ -5,7 +5,7 @@ plugins {
 
 dependencies {
   api(project(":platform-service-framework"))
-  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.4")
+  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.6")
   api("com.typesafe:config:1.4.2")
   api("javax.servlet:javax.servlet-api:4.0.1")
   api("com.google.inject:guice:5.1.0")