From e0322b84f50c405a500431a46f586ea728622c19 Mon Sep 17 00:00:00 2001
From: Jason Frame <jason.frame@consensys.net>
Date: Tue, 12 Dec 2023 11:17:46 +1000
Subject: [PATCH] Update vertx to 4.4.6 and suppress unrelated CVE (#537)

---
 gradle/owasp-suppression.xml | 7 +++++++
 gradle/versions.gradle       | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/gradle/owasp-suppression.xml b/gradle/owasp-suppression.xml
index 3c02bf5e..42beb909 100644
--- a/gradle/owasp-suppression.xml
+++ b/gradle/owasp-suppression.xml
@@ -51,4 +51,11 @@
         <packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*$</packageUrl>
         <cve>CVE-2023-44487</cve>
     </suppress>
+    <suppress until="2024-01-16">
+        <notes><![CDATA[
+        CVE relates to usage hostname verification when using TLS and doesn't apply as we use Tuweni for this
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.vertx/vertx\-core@.*$</packageUrl>
+        <cve>CVE-2023-4586</cve>
+    </suppress>
 </suppressions>
diff --git a/gradle/versions.gradle b/gradle/versions.gradle
index 83d18abd..98bc9f7e 100644
--- a/gradle/versions.gradle
+++ b/gradle/versions.gradle
@@ -35,7 +35,7 @@ dependencyManagement {
 
     dependency 'io.rest-assured:rest-assured:4.4.0'
 
-    dependencySet(group: 'io.vertx', version: '4.3.8') {
+    dependencySet(group: 'io.vertx', version: '4.4.6') {
        entry 'vertx-codegen'
        entry 'vertx-core'
        entry 'vertx-unit'