refactor: update grpc (#54)

Author: aaron-steinfeld

grpc-client-rx-utils/build.gradle.kts

@@ -6,7 +6,7 @@ plugins {
 }
 
 dependencies {
-  api(platform("io.grpc:grpc-bom:1.59.1"))
+  api(platform("io.grpc:grpc-bom:1.60.0"))
   api("io.reactivex.rxjava3:rxjava:3.1.4")
   api("io.grpc:grpc-stub")
   api(project(":grpc-context-utils"))

grpc-client-utils/build.gradle.kts

@@ -7,7 +7,7 @@ plugins {
 
 dependencies {
 
-  api(platform("io.grpc:grpc-bom:1.59.1"))
+  api(platform("io.grpc:grpc-bom:1.60.0"))
   api("io.grpc:grpc-context")
   api("io.grpc:grpc-api")
   api("io.grpc:grpc-inprocess")

grpc-context-utils/build.gradle.kts

@@ -10,7 +10,7 @@ tasks.test {
 }
 
 dependencies {
-  api(platform("io.grpc:grpc-bom:1.59.1"))
+  api(platform("io.grpc:grpc-bom:1.60.0"))
   api(platform("com.fasterxml.jackson:jackson-bom:2.16.0"))
   implementation("io.grpc:grpc-core")
 

grpc-server-rx-utils/build.gradle.kts

@@ -6,7 +6,7 @@ plugins {
 }
 
 dependencies {
-  api(platform("io.grpc:grpc-bom:1.59.1"))
+  api(platform("io.grpc:grpc-bom:1.60.0"))
   api("io.reactivex.rxjava3:rxjava:3.1.4")
   api("io.grpc:grpc-stub")
 

grpc-server-utils/build.gradle.kts

@@ -10,7 +10,7 @@ tasks.test {
 }
 
 dependencies {
-  api(platform("io.grpc:grpc-bom:1.59.1"))
+  api(platform("io.grpc:grpc-bom:1.60.0"))
   api("io.grpc:grpc-context")
   api("io.grpc:grpc-api")
 

owasp-suppressions.xml

@@ -7,13 +7,4 @@
     <packageUrl regex="true">^pkg:maven/org\.hypertrace\..*@.*$</packageUrl>
     <cpe>cpe:/a:grpc:grpc</cpe>
   </suppress>
-  <suppress until="2023-12-31Z">
-    <notes><![CDATA[
-   This CVE (rapid RST) is already mitigated as our servers aren't directly exposed, but it's also
-   addressed in 1.59.1, which the CVE doesn't reflect (not all grpc impls versions are exactly aligned).
-   Ref: https://github.com/grpc/grpc-java/pull/10675
-   ]]></notes>
-    <packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*@.*$</packageUrl>
-    <cve>CVE-2023-44487</cve>
-  </suppress>
 </suppressions>