[YUNIKORN-1854] Sync grpc and protobuf dependency

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Component/s: CVE, release
• Labels: pull-request-available
• Assignee: PoAn Yang
• Reporter: Wilfred Spiegelenburg
• Created: 06/Jul/23 05:12
• Updated: 20/Nov/23 16:42
• Resolved: 07/Jul/23 02:41

Description

The release repo contains an older dependency of the grpc and protobuf dependencies than what we currently have in the other repositories.

Although the code is not used in any production cases we should keep them in sync with the rest of the repos. The version currently used has a open CVE against it.

YUNIKORN-1786 is already updating some dependencies but that change still pushes a vulnerable version.

Issue Links

• split from: YUNIKORN-1786 perf-tools build and dependency updates
• links to: GitHub Pull Request #154