From 59f8b7dc1ed6ab73456a2b6228cba0a181a910e3 Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <45047841+aaron-steinfeld@users.noreply.github.com>
Date: Thu, 22 Jul 2021 12:33:50 -0700
Subject: [PATCH] chore: update dependencies for vulnerabilities (#82)

---
 .snyk                               | 10 +++++++---
 query-service-impl/build.gradle.kts |  4 ++--
 query-service/build.gradle.kts      |  4 ++--
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/.snyk b/.snyk
index c5d9e954..15edc394 100644
--- a/.snyk
+++ b/.snyk
@@ -5,13 +5,17 @@ ignore:
   SNYK-JAVA-LOG4J-572732:
     - '*':
         reason: no available replacement
-        expires: 2021-04-31T00:00:00.000Z
+        expires: 2021-10-31T00:00:00.000Z
   SNYK-JAVA-IONETTY-473694:
     - '*':
         reason: no available replacement
-        expires: 2021-04-31T00:00:00.000Z
+        expires: 2021-10-31T00:00:00.000Z
   SNYK-JAVA-IONETTY-1042268:
     - '*':
         reason: No replacement available
-        expires: 2021-04-31T00:00:00.000Z
+        expires: 2021-10-31T00:00:00.000Z
+  SNYK-JAVA-LOG4J-1300176:
+    - '*':
+        reason: None Given
+        expires: 2021-10-31T00:00:00.000Z
 patch: {}
diff --git a/query-service-impl/build.gradle.kts b/query-service-impl/build.gradle.kts
index c6a5226e..53b35757 100644
--- a/query-service-impl/build.gradle.kts
+++ b/query-service-impl/build.gradle.kts
@@ -34,7 +34,7 @@ dependencies {
   implementation("org.hypertrace.core.attribute.service:attribute-service-api:0.12.3")
   implementation("org.hypertrace.core.attribute.service:attribute-projection-registry:0.12.3")
   implementation("org.hypertrace.core.attribute.service:caching-attribute-service-client:0.12.3")
-  implementation("org.hypertrace.core.serviceframework:service-framework-spi:0.1.23")
+  implementation("org.hypertrace.core.serviceframework:service-framework-spi:0.1.28")
   implementation("com.google.inject:guice:5.0.1")
   implementation("org.apache.pinot:pinot-java-client:0.6.0") {
     // We want to use log4j2 impl so exclude the log4j binding of slf4j
@@ -42,7 +42,7 @@ dependencies {
   }
   implementation("org.slf4j:slf4j-api:1.7.30")
   implementation("commons-codec:commons-codec:1.15")
-  implementation("org.hypertrace.core.serviceframework:platform-metrics:0.1.23")
+  implementation("org.hypertrace.core.serviceframework:platform-metrics:0.1.28")
   implementation("com.google.protobuf:protobuf-java-util:3.15.6")
   implementation("com.google.guava:guava:30.1.1-jre")
   implementation("io.reactivex.rxjava3:rxjava:3.0.11")
diff --git a/query-service/build.gradle.kts b/query-service/build.gradle.kts
index 1d88cba6..04b9d400 100644
--- a/query-service/build.gradle.kts
+++ b/query-service/build.gradle.kts
@@ -11,7 +11,7 @@ plugins {
 dependencies {
   implementation(project(":query-service-impl"))
   implementation("org.hypertrace.core.grpcutils:grpc-server-utils:0.4.0")
-  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.23")
+  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.28")
   implementation("org.slf4j:slf4j-api:1.7.30")
   implementation("com.typesafe:config:1.4.1")
 
@@ -32,7 +32,7 @@ dependencies {
   integrationTestImplementation("org.testcontainers:testcontainers:1.15.2")
   integrationTestImplementation("org.testcontainers:junit-jupiter:1.15.2")
   integrationTestImplementation("org.testcontainers:kafka:1.15.2")
-  integrationTestImplementation("org.hypertrace.core.serviceframework:integrationtest-service-framework:0.1.23")
+  integrationTestImplementation("org.hypertrace.core.serviceframework:integrationtest-service-framework:0.1.28")
   integrationTestImplementation("com.github.stefanbirkner:system-lambda:1.2.0")
 
   integrationTestImplementation("org.apache.kafka:kafka-clients:5.5.1-ccs")