Bug 37322409 - [37321957->25.03] Update Helidon version to 4.1.5 (main -> ce/main @112984)

Job: job.9.20241217010046.29426

[git-p4: depot-paths = "//dev/coherence-ce/main/": change = 112985]

Author: dhirupandey

prj/coherence-dependencies/pom.xml

@@ -154,7 +154,7 @@
     <eclipse.mp.health.version>4.0.1</eclipse.mp.health.version>
     <eclipselink.version>3.0.4</eclipselink.version>
     <!-- NOTE: this version should ideally be in sync' with that used by Helidon microprofile -->
-    <eclipse.mp.metrics.version>5.1.1</eclipse.mp.metrics.version>
+    <eclipse.mp.metrics.version>5.1.2</eclipse.mp.metrics.version>
     <fastutil.version>8.5.14</fastutil.version>
     <felix.version>6.0.4</felix.version>
     <glassfish.el.version>4.0.2</glassfish.el.version>
@@ -171,7 +171,7 @@
     typically matching the patch component of the GraalVM image tag above (ie. 21.0.4 => 23.1.4)
     -->
     <graalvm.version>23.1.4</graalvm.version>
-    <grpc.version>1.66.0</grpc.version>
+    <grpc.version>1.65.1</grpc.version>
     <!--
     This is a workaround for the fact that newer versions of the gRPC ProtoBuf compiler do not work on
     Oracle Linux 7 so the builds fail in RQ and Jenkins.
@@ -190,9 +190,9 @@
     This is not always possible if we need to bump versions for CVE's
     -->
     <!-- When running tests with Java 21 we will use Helidon 4 -->
-    <helidon.version.4>4.1.2</helidon.version.4>
+    <helidon.version.4>4.1.5</helidon.version.4>
     <!-- When running tests with Java 17 we will use Helidon 3 (this will be set using the helidon3 profile) -->
-    <helidon.version.3>3.2.10</helidon.version.3>
+    <helidon.version.3>3.2.11</helidon.version.3>
     <!-- This is the property that sets the version used by other modules (we default to Helidon 4) -->
     <helidon.version>${helidon.version.4}</helidon.version>
 
@@ -230,7 +230,7 @@
     <jaxb-impl.version>4.0.3</jaxb-impl.version>
     <!-- NOTE: this version should ideally be in sync' with that used by Helidon
          This is not always possible if we need to bump versions for CVE's -->
-    <jersey.version>3.1.8</jersey.version>
+    <jersey.version>3.1.9</jersey.version>
     <jettison.version>1.5.4</jettison.version>
     <jhdf.version>0.7.0-alpha</jhdf.version>
     <jline.version>3.25.0</jline.version>
@@ -239,7 +239,7 @@
     <micrometer.version>1.11.3</micrometer.version>
     <!-- NOTE: this version should ideally be in sync' with that used by Helidon
          This is not always possible if we need to bump versions for CVE's -->
-    <netty.version>4.1.108.Final</netty.version>
+    <netty.version>4.1.115.Final</netty.version>
     <opentelemetry.version>1.29.0</opentelemetry.version>
     <opentelemetry.proto.version>1.0.0-alpha</opentelemetry.proto.version>
     <opentracing.grpc.version>0.2.3</opentracing.grpc.version>

prj/etc/dependency-check-suppression.xml

@@ -485,14 +485,4 @@
     <cve>CVE-2023-5763</cve>
   </suppress>
 
-  <!-- Remove when this is resolved: COH-31345 - Update Netty version to 4.1.115.Final -->
-  <suppress>
-    <notes><![CDATA[
-    file name: netty-common-4.1.108.Final.jar
-    ]]></notes>
-    <packageUrl regex="true">^pkg:maven/io\.netty/netty\-common@.*$</packageUrl>
-    <cpe>cpe:2.3:a:netty:netty</cpe>
-    <cve>CVE-2024-47535</cve>
-  </suppress>
-
 </suppressions>

prj/examples/guides/600-response-caching/gradle.properties

@@ -10,4 +10,4 @@ coherenceGroupId=com.oracle.coherence.ce
 
 junitVersion=5.8.2
 jandexPluginVersion=1.86
-helidonVersion=4.1.2
+helidonVersion=4.1.5

prj/examples/guides/600-response-caching/pom.xml

@@ -14,7 +14,7 @@
   <parent>
     <groupId>io.helidon.applications</groupId>
     <artifactId>helidon-mp</artifactId>
-    <version>4.1.2</version>
+    <version>4.1.5</version>
     <relativePath/>
   </parent>
 

prj/examples/tutorials/500-graphql/complete/gradle.properties

@@ -8,6 +8,6 @@
 coherenceVersion=24.09-SNAPSHOT
 coherenceGroupId=com.oracle.coherence.ce
 
-helidonVersion=4.1.2
+helidonVersion=4.1.5
 
 junitVersion=5.9.0

prj/examples/tutorials/500-graphql/complete/pom.xml

@@ -21,7 +21,7 @@
 
     <coherence.group.id>com.oracle.coherence.ce</coherence.group.id>
     <coherence.version>${project.version}</coherence.version>
-    <helidon.version>4.1.2</helidon.version>
+    <helidon.version>4.1.5</helidon.version>
     <!-- make sure this version of parsson-media is in sync with Helidon -->
     <parsson-media.version>1.1.6</parsson-media.version>
 

prj/examples/tutorials/500-graphql/initial/gradle.properties

@@ -8,6 +8,6 @@
 coherenceVersion=24.09-SNAPSHOT
 coherenceGroupId=com.oracle.coherence.ce
 
-helidonVersion=4.1.2
+helidonVersion=4.1.5
 
 junitVersion=5.8.2

prj/examples/tutorials/500-graphql/initial/pom.xml

@@ -21,7 +21,7 @@
 
     <coherence.group.id>com.oracle.coherence.ce</coherence.group.id>
     <coherence.version>${project.version}</coherence.version>
-    <helidon.version>4.1.2</helidon.version>
+    <helidon.version>4.1.5</helidon.version>
     <!-- make sure this version of parsson-media is in sync with Helidon -->
     <parsson-media.version>1.1.6</parsson-media.version>