Merge pull request #1694 from DependencyTrack/dependabot/maven/quarkus.platform.version-3.19.2

Bump quarkus.platform.version from 3.18.3 to 3.19.2

Author: nscuro

.github/workflows/_build-native-meta.yml

@@ -78,7 +78,7 @@ jobs:
         echo "Including resources: ${RESOURCES_INCLUDES:-None}"
         echo "Excluding resources: ${RESOURCES_EXCLUDES:-None}"
         mvn -B --no-transfer-progress -pl ${{ inputs.module }} package -Dnative -DskipTests \
-          -Dquarkus.native.builder-image=quay.io/quarkus/ubi-quarkus-mandrel-builder-image:23.1-java21 \
+          -Dquarkus.native.builder-image=quay.io/quarkus/ubi9-quarkus-mandrel-builder-image:23.1-java21 \
           -Dquarkus.native.container-build=true \
           -Dquarkus.native.resources.includes="$RESOURCES_INCLUDES" \
           -Dquarkus.native.resources.excludes="$RESOURCES_EXCLUDES"

mirror-service/src/main/docker/Dockerfile.native

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

mirror-service/src/main/docker/Dockerfile.native-multiarch

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 ARG TARGETARCH
 WORKDIR /work/
 RUN chown 1001 /work \

notification-publisher/src/main/docker/Dockerfile.native

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

notification-publisher/src/main/docker/Dockerfile.native-multiarch

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 ARG TARGETARCH
 WORKDIR /work/
 RUN chown 1001 /work \

notification-publisher/src/main/java/org/dependencytrack/notification/config/ParallelConsumerConfiguration.java

@@ -26,19 +26,19 @@
 import io.quarkus.runtime.ShutdownEvent;
 import io.quarkus.runtime.annotations.RegisterForReflection;
 import io.smallrye.common.annotation.Identifier;
-import jakarta.enterprise.context.ApplicationScoped;
-import jakarta.enterprise.event.Observes;
-import jakarta.enterprise.inject.Produces;
 import org.apache.kafka.clients.consumer.ConsumerConfig;
 import org.apache.kafka.clients.consumer.KafkaConsumer;
 import org.apache.kafka.clients.consumer.internals.AsyncKafkaConsumer;
+import org.apache.kafka.clients.consumer.internals.ClassicKafkaConsumer;
 import org.apache.kafka.clients.consumer.internals.ConsumerCoordinator;
-import org.apache.kafka.clients.consumer.internals.LegacyKafkaConsumer;
 import org.apache.kafka.common.serialization.StringDeserializer;
 import org.dependencytrack.notification.serialization.NotificationKafkaProtobufDeserializer;
 import org.dependencytrack.proto.notification.v1.Notification;
 import org.eclipse.microprofile.config.ConfigProvider;
 
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.enterprise.event.Observes;
+import jakarta.enterprise.inject.Produces;
 import java.time.Duration;
 import java.util.HashMap;
 import java.util.Map;
@@ -52,7 +52,7 @@
         // https://github.com/confluentinc/parallel-consumer/pull/762
         KafkaConsumer.class,
         AsyncKafkaConsumer.class,
-        LegacyKafkaConsumer.class,
+        ClassicKafkaConsumer.class,
         ConsumerCoordinator.class
 })
 class ParallelConsumerConfiguration {
@@ -91,6 +91,7 @@ private static ParallelStreamProcessor<String, Notification> createParallelConsu
         final var parallelConsumerOptions = ParallelConsumerOptions.<String, Notification>builder()
                 .consumer(consumer)
                 .maxConcurrency(parallelConsumerConfig.maxConcurrency())
+                .ignoreReflectiveAccessExceptionsForAutoCommitDisabledCheck(true)
                 .ordering(ProcessingOrder.KEY)
                 .retryDelayProvider(recordCtx -> {
                     final long delayMillis = RetryConfig

pom.xml

@@ -75,7 +75,7 @@
     <lib.httpclient5.version>5.4.2</lib.httpclient5.version>
     <lib.java-uuid-generator.version>5.1.0</lib.java-uuid-generator.version>
     <lib.json-unit.version>4.1.0</lib.json-unit.version>
-    <lib.kafka.version>3.7.1</lib.kafka.version>
+    <lib.kafka.version>3.9.0</lib.kafka.version>
     <lib.maven-artifact.version>4.0.0-rc-2</lib.maven-artifact.version>
     <lib.micrometer-jvm-extras.version>0.2.2</lib.micrometer-jvm-extras.version>
     <lib.minio.version>8.5.17</lib.minio.version>
@@ -91,7 +91,7 @@
     <lib.snappy-java.version>1.1.10.7</lib.snappy-java.version>
     <lib.testcontainers-minio.version>1.20.5</lib.testcontainers-minio.version>
     <lib.wiremock.version>2.35.2</lib.wiremock.version>
-    <quarkus.platform.version>3.18.3</quarkus.platform.version>
+    <quarkus.platform.version>3.19.2</quarkus.platform.version>
     <quarkus.wiremock.version>1.3.3</quarkus.wiremock.version>
     <lib.brotli.version>0.1.2</lib.brotli.version>
     <lib.versatile.version>0.7.0</lib.versatile.version>

repository-meta-analyzer/src/main/docker/Dockerfile.native

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

repository-meta-analyzer/src/main/docker/Dockerfile.native-multiarch

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 ARG TARGETARCH
 WORKDIR /work/
 RUN chown 1001 /work \

vulnerability-analyzer/src/main/docker/Dockerfile.native

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

vulnerability-analyzer/src/main/docker/Dockerfile.native-multiarch

@@ -1,4 +1,4 @@
-FROM quay.io/quarkus/quarkus-micro-image:2.0
+FROM quay.io/quarkus/ubi9-quarkus-micro-image:2.0
 ARG TARGETARCH
 WORKDIR /work/
 RUN chown 1001 /work \