Merge pull request #4 from hypertrace/upgrade-grpc

fix: grpc vulnerability fixed in 1.31.0

Author: tim-mwangi

.snyk

@@ -1,9 +1,3 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
 version: v1.14.1
-# ignores vulnerabilities until expiry date; change duration by modifying expiry date
-ignore:
-  SNYK-JAVA-IOGRPC-571957:
-    - '*':
-        reason: No replacement available
-        expires: 2020-08-31T00:00:00.000Z
 patch: {}

grpc-client-utils/build.gradle.kts

@@ -17,9 +17,9 @@ dependencies {
   // End Logging
 
   // grpc
-  implementation("io.grpc:grpc-core:1.30.2")
+  implementation("io.grpc:grpc-core:1.31.0")
 
   testImplementation("org.junit.jupiter:junit-jupiter:5.6.2")
-  testImplementation("org.mockito:mockito-core:3.3.3")
+  testImplementation("org.mockito:mockito-core:3.4.4")
 }
 

grpc-context-utils/build.gradle.kts

@@ -11,7 +11,7 @@ tasks.test {
 
 dependencies {
   // grpc
-  implementation("io.grpc:grpc-core:1.30.2")
+  implementation("io.grpc:grpc-core:1.31.0")
 
   // Logging
   implementation("org.slf4j:slf4j-api:1.7.30")

grpc-server-utils/build.gradle.kts

@@ -17,7 +17,7 @@ dependencies {
   // End Logging
 
   // grpc
-  implementation("io.grpc:grpc-core:1.30.2")
+  implementation("io.grpc:grpc-core:1.31.0")
 
   testImplementation("org.junit.jupiter:junit-jupiter:5.6.2")
 }