Dependency updates and changes to dependency check suppression file

Author: rjeberhard

build-helper-mojo/pom.xml

@@ -33,7 +33,7 @@
         <dependency>
             <groupId>org.apache.maven.plugin-tools</groupId>
             <artifactId>maven-plugin-annotations</artifactId>
-            <version>3.9.0</version>
+            <version>3.10.1</version>
         </dependency>
         <dependency>
             <groupId>org.junit.jupiter</groupId>

dependency-check-suppression.xml

@@ -18,7 +18,18 @@
         <notes><![CDATA[
         This CVE does not apply because this CVE refers to an unrelated project.
         ]]></notes>
-        <packageUrl regex="true">^pkg:maven/io\.netty/netty-handler@.*$</packageUrl>
         <vulnerabilityName>CVE-2023-4586</vulnerabilityName>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        This CVE does not apply because this CVE refers to an unrelated project.
+        ]]></notes>
+        <vulnerabilityName>CVE-2022-4244</vulnerabilityName>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        This CVE does not apply because this CVE refers to an unrelated project.
+        ]]></notes>
+        <vulnerabilityName>CVE-2022-4245</vulnerabilityName>
+    </suppress>
 </suppressions>

pom.xml

@@ -54,13 +54,13 @@
         <maven-install-plugin-version>3.1.1</maven-install-plugin-version>
         <maven-deploy-plugin-version>3.1.1</maven-deploy-plugin-version>
         <maven-deploy-plugin-version>3.0.0</maven-deploy-plugin-version>
-        <maven-plugin-plugin-version>3.9.0</maven-plugin-plugin-version>
+        <maven-plugin-plugin-version>3.10.1</maven-plugin-plugin-version>
         <maven-site-plugin-version>3.12.1</maven-site-plugin-version>
         <maven-jar-plugin-version>3.3.0</maven-jar-plugin-version>
         <maven-war-plugin-version>3.4.0</maven-war-plugin-version>
         <maven-resources-plugin-version>3.3.1</maven-resources-plugin-version>
         <maven-dependency-plugin-version>3.6.0</maven-dependency-plugin-version>
-        <dependency-check-version>8.4.0</dependency-check-version>
+        <dependency-check-version>8.4.2</dependency-check-version>
 
         <skip.dependency-check>false</skip.dependency-check>
 

wls-exporter-sidecar/pom.xml

@@ -33,6 +33,41 @@
     </dependencyManagement>
 
     <dependencies>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-transport</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-transport-native-unix-common</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-common</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-buffer</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-resolver</artifactId>
+            <version>4.1.100.Final</version>
+        </dependency>
         <dependency>
             <groupId>io.helidon.webserver</groupId>
             <artifactId>helidon-webserver</artifactId>