chore: fix vulnerabilities in attribute service (#160)

Author: saxenakshitiz

attribute-service-api/build.gradle.kts

@@ -15,7 +15,7 @@ val generateLocalGoGrpcFiles = false
 
 protobuf {
   protoc {
-    artifact = "com.google.protobuf:protoc:3.15.6"
+    artifact = "com.google.protobuf:protoc:3.21.12"
   }
   plugins {
     id("grpc_java") {
@@ -57,7 +57,7 @@ sourceSets {
 }
 
 dependencies {
-  api(platform("io.grpc:grpc-bom:1.44.0"))
+  api(platform("io.grpc:grpc-bom:1.50.0"))
   api("io.grpc:grpc-stub")
   api("io.grpc:grpc-protobuf")
 

attribute-service-factory/build.gradle.kts

@@ -3,7 +3,7 @@ plugins {
 }
 
 dependencies {
-  api("org.hypertrace.core.serviceframework:platform-grpc-service-framework:0.1.37")
+  api("org.hypertrace.core.serviceframework:platform-grpc-service-framework:0.1.49")
 
   // Only required because AttributeService constructor test overload uses a doc store API
   compileOnly("org.hypertrace.core.documentstore:document-store:0.7.20")

attribute-service-impl/build.gradle.kts

@@ -11,10 +11,10 @@ dependencies {
   implementation("org.hypertrace.core.documentstore:document-store:0.7.20")
   implementation("org.hypertrace.core.grpcutils:grpc-context-utils:0.9.0")
 
-  implementation("com.fasterxml.jackson.core:jackson-databind:2.13.2.2")
+  implementation("com.fasterxml.jackson.core:jackson-databind:2.14.2")
   implementation("com.typesafe:config:1.4.1")
   implementation("org.slf4j:slf4j-api:1.7.32")
-  implementation("com.google.protobuf:protobuf-java-util:3.19.2")
+  implementation("com.google.protobuf:protobuf-java-util:3.21.12")
   implementation("com.google.guava:guava:31.1-jre")
 
   testImplementation("org.mockito:mockito-core:4.2.0")

attribute-service/build.gradle.kts

@@ -55,15 +55,15 @@ tasks.integrationTest {
 
 dependencies {
   implementation(project(":attribute-service-factory"))
-  implementation("org.hypertrace.core.serviceframework:platform-grpc-service-framework:0.1.37")
+  implementation("org.hypertrace.core.serviceframework:platform-grpc-service-framework:0.1.49")
   runtimeOnly("org.apache.logging.log4j:log4j-slf4j-impl:2.17.1")
   runtimeOnly("io.grpc:grpc-netty")
 
   // Integration test dependencies
   integrationTestImplementation("org.junit.jupiter:junit-jupiter:5.8.2")
   integrationTestImplementation("com.google.guava:guava:31.1-jre")
   integrationTestImplementation(project(":attribute-service-client"))
-  integrationTestImplementation("org.hypertrace.core.serviceframework:integrationtest-service-framework:0.1.37")
+  integrationTestImplementation("org.hypertrace.core.serviceframework:integrationtest-service-framework:0.1.49")
   integrationTestImplementation("org.hypertrace.core.grpcutils:grpc-context-utils:0.9.0")
 }