Skip to content
This repository was archived by the owner on Apr 22, 2025. It is now read-only.

Commit cedd3a7

Browse files
Update opentelemetry-grpc-1.6 dependency (#289)
Also update dependency-check suppressions to remove false positives. Signed-off-by: Mark S. Lewis <[email protected]>
1 parent 5617abc commit cedd3a7

File tree

2 files changed

+16
-2
lines changed

2 files changed

+16
-2
lines changed

dependency-suppressions.xml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,17 @@
11
<?xml version="1.0" encoding="UTF-8"?>
22
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
3+
<suppress>
4+
<notes><![CDATA[
5+
Vulnerability in C++ gRPC implementation
6+
]]></notes>
7+
<packageUrl regex="true">^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl>
8+
<cve>CVE-2023-33953</cve>
9+
</suppress>
10+
<suppress>
11+
<notes><![CDATA[
12+
Vulnerability in C++ gRPC implementation
13+
]]></notes>
14+
<packageUrl regex="true">^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl>
15+
<cve>CVE-2023-32732</cve>
16+
</suppress>
317
</suppressions>

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@
2828
<url>http://github.com/hyperledger/fabric-sdk-java</url>
2929
</scm>
3030
<properties>
31-
<grpc.version>1.57.1</grpc.version>
31+
<grpc.version>1.57.2</grpc.version>
3232
<protobuf.version>3.22.5</protobuf.version> <!-- Must match version used by grpc-protobuf -->
3333
<bouncycastle.version>1.76</bouncycastle.version>
3434
<httpclient.version>4.5.14</httpclient.version>
@@ -222,7 +222,7 @@
222222
<dependency>
223223
<groupId>io.opentelemetry.instrumentation</groupId>
224224
<artifactId>opentelemetry-grpc-1.6</artifactId>
225-
<version>1.28.0-alpha</version>
225+
<version>1.29.0-alpha</version>
226226
</dependency>
227227
<dependency>
228228
<groupId>io.opentelemetry.proto</groupId>

0 commit comments

Comments
 (0)