chore: update ci workflows and deps

[SrikarMannepalli]

No description provided.

[github-actions]

Test Results

113 tests   113 ✔️  1m 13s ⏱️
  28 suites      0 💤
  28 files        0 ❌

Results for commit 3398fd4.

♻️ This comment has been updated with latest results.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov]

Codecov Report

Merging #170 (3398fd4) into main (53a8290) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##               main     #170   +/-   ##
=========================================
  Coverage     79.76%   79.76%           
  Complexity      465      465           
=========================================
  Files            54       54           
  Lines          2333     2333           
  Branches         92       92           
=========================================
  Hits           1861     1861           
  Misses          419      419           
  Partials         53       53           

Flag	Coverage Δ
integration	79.76% <ø> (ø)
unit	78.11% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[SrikarMannepalli]

Waiting for hypertrace/event-store#7

[aaron-steinfeld]

lgtm code wise, looks like some vulns remaining though

[SrikarMannepalli]

lgtm code wise, looks like some vulns remaining though

netty-handler-4.1.87.Final.jar (pkg:maven/io.netty/netty-handler@4.1.87.Final, cpe:2.3:a:netty:netty:4.1.87:*:*:*:*:*:*:*) : CVE-2023-34462 is coming up after the latest commit(kafka bom introduction commit). Doesn't come up on local dependency check run though.

[aaron-steinfeld]

Brand new, bad luck. Let me go update upstream. Looks like you've also got

guava-31.1-android.jar (pkg:maven/com.google.guava/guava@31.1-android, cpe:2.3:a:google:guava:31.1:*:*:*:*:*:*:*) : CVE-2023-2976, CVE-2020-8908

which can be fixed in the meantime.

[aaron-steinfeld]

hypertrace/java-grpc-utils#47

[aaron-steinfeld]

We should consolidate the workflows and add scheduling too, but can happen in separate PR. Example: hypertrace/attribute-service#170