[Backport] [3.0] Bump reactor-netty from 1.2.4 to 1.2.5 and reactor from 3.5.20 to 3.7.5 (#18243)

CHANGELOG.md

@@ -11,6 +11,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Dependencies
 - Update Apache HttpClient5 and HttpCore5 (CVE-2025-27820) ([#18152](https://github.com/opensearch-project/OpenSearch/pull/18152))
 - Bump `netty` from 4.1.118.Final to 4.1.121.Final ([#18192](https://github.com/opensearch-project/OpenSearch/pull/18192))
+- Bump `reactor-netty` from 1.2.4 to 1.2.5 ([#18243](https://github.com/opensearch-project/OpenSearch/pull/18243))
+- Bump `reactor` from 3.5.20 to 3.7.5 ([#18243](https://github.com/opensearch-project/OpenSearch/pull/18243))
 
 ### Deprecated
 

client/rest/build.gradle

@@ -144,7 +144,8 @@ thirdPartyAudit {
       'reactor.blockhound.integration.BlockHoundIntegration'
    )
    ignoreViolations(
-      'reactor.core.publisher.Traces$SharedSecretsCallSiteSupplierFactory$TracingException'
+      'reactor.core.publisher.CallSiteSupplierFactory$SharedSecretsCallSiteSupplierFactory',
+      'reactor.core.publisher.CallSiteSupplierFactory$SharedSecretsCallSiteSupplierFactory$TracingException'
    )
 }
 

client/rest/licenses/reactor-core-3.7.5.jar.sha1

@@ -0,0 +1 @@
+2ffb9b7043593da9a80b91f14cc30f4914183f3a

gradle/libs.versions.toml

@@ -38,8 +38,8 @@ joda              = "2.12.7"
 roaringbitmap     = "1.3.0"
 
 # project reactor
-reactor_netty     = "1.2.4"
-reactor           = "3.5.20"
+reactor_netty     = "1.2.5"
+reactor           = "3.7.5"
 
 # client dependencies
 httpclient5       = "5.4.4"

plugins/repository-azure/licenses/reactor-netty-core-1.2.5.jar.sha1

@@ -0,0 +1 @@
+42af645f3cfc221f74573103773a9def598d2231

plugins/repository-azure/licenses/reactor-netty-http-1.2.5.jar.sha1

@@ -0,0 +1 @@
+b3f2a54919a1e15ca9543380b045ba54ca4e57cc

plugins/transport-reactor-netty4/licenses/reactor-netty-core-1.2.5.jar.sha1

@@ -0,0 +1 @@
+42af645f3cfc221f74573103773a9def598d2231

plugins/transport-reactor-netty4/licenses/reactor-netty-http-1.2.5.jar.sha1

@@ -0,0 +1 @@
+b3f2a54919a1e15ca9543380b045ba54ca4e57cc

server/build.gradle

@@ -341,7 +341,8 @@ tasks.named("thirdPartyAudit").configure {
             'com.google.protobuf.UnsafeUtil$MemoryAccessor',
             'org.apache.logging.log4j.core.util.internal.UnsafeUtil',
             'org.apache.logging.log4j.core.util.internal.UnsafeUtil$1',
-            'reactor.core.publisher.Traces$SharedSecretsCallSiteSupplierFactory$TracingException'
+            'reactor.core.publisher.CallSiteSupplierFactory$SharedSecretsCallSiteSupplierFactory',
+            'reactor.core.publisher.CallSiteSupplierFactory$SharedSecretsCallSiteSupplierFactory$TracingException'
     )
 }
 

server/licenses/reactor-core-3.7.5.jar.sha1

@@ -0,0 +1 @@
+2ffb9b7043593da9a80b91f14cc30f4914183f3a