Bump mockito from 5.14.1 to 5.14.2, objenesis from 3.2 to 3.3 and byt…

…ebuddy from 1.15.4 to 1.15.10 (opensearch-project#16655) * Bump mockito from 5.14.1 to 5.14.2 Signed-off-by: Craig Perkins <[email protected]> * Update objenesis from 3.2 to 3.3 Signed-off-by: Craig Perkins <[email protected]> * Add to CHANGELOG Signed-off-by: Craig Perkins <[email protected]> * Update bytebuddy from 1.15.4 to 1.15.10 Signed-off-by: Craig Perkins <[email protected]> * Update README Signed-off-by: Craig Perkins <[email protected]> * Add grant to mockito-core Signed-off-by: Craig Perkins <[email protected]> * Add perms Signed-off-by: Craig Perkins <[email protected]> --------- Signed-off-by: Craig Perkins <[email protected]>
mgodwan · Nov 15, 2024 · 3b4fa0e · 3b4fa0e
1 parent efef676
commit 3b4fa0e
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -32,6 +32,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.nimbusds:nimbus-jose-jwt` from 9.41.1 to 9.46 ([#16611](https://github.com/opensearch-project/OpenSearch/pull/16611))
 - Bump `lycheeverse/lychee-action` from 2.0.2 to 2.1.0 ([#16610](https://github.com/opensearch-project/OpenSearch/pull/16610))
 - Bump `me.champeau.gradle.japicmp` from 0.4.4 to 0.4.5 ([#16614](https://github.com/opensearch-project/OpenSearch/pull/16614))
+- Bump `mockito` from 5.14.1 to 5.14.2, `objenesis` from 3.2 to 3.3 and `bytebuddy` from 1.15.4 to 1.15.10 ([#16655](https://github.com/opensearch-project/OpenSearch/pull/16655))
 
 ### Changed
 

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -62,9 +62,9 @@ bouncycastle="1.78"
 randomizedrunner  = "2.7.1"
 junit             = "4.13.2"
 hamcrest          = "2.1"
-mockito           = "5.14.1"
-objenesis         = "3.2"
-bytebuddy         = "1.15.4"
+mockito           = "5.14.2"
+objenesis         = "3.3"
+bytebuddy         = "1.15.10"
 
 # benchmark dependencies
 jmh               = "1.35"

diff --git a/server/src/main/resources/org/opensearch/bootstrap/test-framework.policy b/server/src/main/resources/org/opensearch/bootstrap/test-framework.policy
@@ -45,6 +45,13 @@ grant codeBase "${codebase.mockito-core}" {
   permission java.lang.RuntimePermission "accessDeclaredMembers";
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
   permission java.lang.RuntimePermission "getClassLoader";
+
+  permission java.lang.RuntimePermission "createClassLoader";
+  permission java.lang.RuntimePermission "net.bytebuddy.createJavaDispatcher";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.utility";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.dynamic.loading";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.description.type";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.description.method";
 };
 
 grant codeBase "${codebase.objenesis}" {

diff --git a/test/framework/build.gradle b/test/framework/build.gradle
@@ -80,7 +80,8 @@ thirdPartyAudit.ignoreMissingClasses(
   'org.apache.log4j.Priority',
   'org.mockito.internal.creation.bytebuddy.inject.MockMethodDispatcher',
   'org.opentest4j.AssertionFailedError',
-  'net.bytebuddy.agent.ByteBuddyAgent'
+  'net.bytebuddy.agent.ByteBuddyAgent',
+  'net.bytebuddy.agent.Installer'
 )
 // TODO - OpenSearch remove this violation. Issue: https://github.com/opensearch-project/OpenSearch/issues/420
 thirdPartyAudit.ignoreViolations(