Bump com.exactpro.th2.gradle.component from 0.2.1 to 0.2.2 (#400)

* Bump com.exactpro.th2.gradle.component from 0.2.1 to 0.2.2

Bumps [com.exactpro.th2.gradle.component](https://github.com/th2-net/th2-gradle-plugin) from 0.2.1 to 0.2.2.
- [Release notes](https://github.com/th2-net/th2-gradle-plugin/releases)
- [Changelog](https://github.com/th2-net/th2-gradle-plugin/blob/master/changelog_config.json)
- [Commits](th2-net/th2-gradle-plugin@0.2.1...0.2.2)

---
updated-dependencies:
- dependency-name: com.exactpro.th2.gradle.component
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Added CISA into workflows

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: nikita.smirnov <[email protected]>

.github/workflows/build-dev-release.yml

@@ -12,4 +12,7 @@ jobs:
       docker-username: ${{ github.actor }}
     secrets:
       docker-password: ${{ secrets.GITHUB_TOKEN }}
-      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      cisa-domain: ${{ secrets.CISA_DOMAIN }}
+      cisa-user: ${{ secrets.CISA_USER }}
+      cisa-password: ${{ secrets.CISA_PWD }}

.github/workflows/build-release.yml

@@ -12,4 +12,7 @@ jobs:
       docker-username: ${{ github.actor }}
     secrets:
       docker-password: ${{ secrets.GITHUB_TOKEN }}
-      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      cisa-domain: ${{ secrets.CISA_DOMAIN }}
+      cisa-user: ${{ secrets.CISA_USER }}
+      cisa-password: ${{ secrets.CISA_PWD }}

.github/workflows/build-sanpshot.yml

@@ -17,4 +17,7 @@ jobs:
       docker-username: ${{ github.actor }}
     secrets:
       docker-password: ${{ secrets.GITHUB_TOKEN }}
-      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      nvd-api-key: ${{ secrets.NVD_APIKEY }}
+      cisa-domain: ${{ secrets.CISA_DOMAIN }}
+      cisa-user: ${{ secrets.CISA_USER }}
+      cisa-password: ${{ secrets.CISA_PWD }}

build.gradle

@@ -2,7 +2,7 @@ import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
 
 plugins {
     id 'org.jetbrains.kotlin.jvm' version '1.8.22'
-    id "com.exactpro.th2.gradle.component" version "0.2.1"
+    id "com.exactpro.th2.gradle.component" version "0.2.2"
     id 'application'
 }
 
@@ -14,7 +14,9 @@ ext {
 group 'com.exactpro.th2'
 version release_version
 
-kotlin.jvmToolchain(11)
+th2JavaRelease {
+    targetJavaVersion.set(JavaVersion.VERSION_11)
+}
 
 repositories {
     mavenCentral()

suppressions.xml

@@ -1,16 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- FIXME: find out approach to solve problem when any artifact with grpc word in name is marked as cpe:/a:grpc:grpc -->
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-    <suppress base="true">
-        <notes><![CDATA[FP per issue https://github.com/jeremylong/DependencyCheck/issues/2995]]>
-        </notes>
-        <packageUrl regex="true">^pkg:maven/com\.exactpro\.th2/grpc-.*@.*$</packageUrl>
-        <cpe>cpe:/a:grpc:grpc</cpe>
+    <suppress>
+        <notes><![CDATA[file name: netty-common-4.1.117.Final.jar]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.netty/netty-common@.*$</packageUrl>
+        <vulnerabilityName>CVE-2025-25193</vulnerabilityName>
     </suppress>
     <suppress>
-        <notes><![CDATA[FP per issue https://github.com/jeremylong/DependencyCheck/issues/5829]]>
-        </notes>
-        <packageUrl regex="true">^pkg:maven/com\.exactpro\.th2/task-utils@.*$</packageUrl>
-        <cpe>cpe:/a:utils_project:utils</cpe>
+        <notes><![CDATA[file name: netty-handler-4.1.117.Final.jar]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.netty/netty-handler@.*$</packageUrl>
+        <vulnerabilityName>CVE-2025-24970</vulnerabilityName>
     </suppress>
 </suppressions>