build: bump to JDK 17 and upgrade service-framework to 0.1.94 for Jetty 12 (CVE-2026-2332)

The current build pulls service-framework 0.1.89 (Jetty 11.0.24, vulnerable to
CVE-2026-2332 / CVE-2025-5115). service-framework 0.1.94 migrates to
Jetty 12.1.9 (ee10), which requires JDK 17+.

- Bump source/target compatibility to Java 17 across all subprojects
- Bump CI workflows to Java 17
- Bump platform-metrics + platform-service-framework 0.1.89 -> 0.1.94
- Bump grpc-client-utils 0.13.16 -> 0.13.23 (resolution conflict version)
- Bump junit-pioneer 2.0.0 -> 2.3.0 and mockito-core 5.2.0 -> 5.15.2 for JDK 17+ reflection compat
- Add --add-opens to test task for junit-pioneer @SetEnvironmentVariable on JDK 17+

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: suresh-prakash

.github/workflows/pr-build.yml

@@ -22,7 +22,7 @@ jobs:
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: '11'
+          java-version: '17'
 
       - name: Build with Gradle
         uses: hypertrace/github-actions/gradle@main

.github/workflows/pr-test.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: '11'
+          java-version: '17'
 
       - name: Unit test
         uses: hypertrace/github-actions/gradle@main
@@ -56,7 +56,7 @@ jobs:
       - uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: '11'
+          java-version: '17'
       - name: Dependency Check
         uses: hypertrace/github-actions/dependency-check@main
         with:

build.gradle.kts

@@ -21,8 +21,8 @@ subprojects {
 
   pluginManager.withPlugin("java") {
     configure<JavaPluginExtension> {
-      sourceCompatibility = JavaVersion.VERSION_11
-      targetCompatibility = JavaVersion.VERSION_11
+      sourceCompatibility = JavaVersion.VERSION_17
+      targetCompatibility = JavaVersion.VERSION_17
 
       apply(plugin = "org.hypertrace.code-style-plugin")
     }

kafka-streams-framework/build.gradle.kts

@@ -8,6 +8,10 @@ plugins {
 
 tasks.test {
   useJUnitPlatform()
+  jvmArgs(
+    "--add-opens=java.base/java.util=ALL-UNNAMED",
+    "--add-opens=java.base/java.lang=ALL-UNNAMED",
+  )
 }
 
 dependencies {
@@ -18,20 +22,20 @@ dependencies {
   api(platform(project(":kafka-bom")))
   api("org.apache.kafka:kafka-streams")
   api("io.confluent:kafka-streams-avro-serde")
-  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.16")
+  api("org.hypertrace.core.grpcutils:grpc-client-utils:0.13.23")
 
   implementation("org.apache.avro:avro")
   implementation("org.apache.kafka:kafka-clients")
-  implementation("org.hypertrace.core.serviceframework:platform-metrics:0.1.89")
-  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.89")
+  implementation("org.hypertrace.core.serviceframework:platform-metrics:0.1.94")
+  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.94")
   implementation("org.apache.commons:commons-lang3:3.18.0")
 
   testCompileOnly("org.projectlombok:lombok:1.18.38")
   testAnnotationProcessor("org.projectlombok:lombok:1.18.38")
   testImplementation("org.apache.kafka:kafka-streams-test-utils")
   testImplementation("org.junit.jupiter:junit-jupiter:5.9.2")
-  testImplementation("org.junit-pioneer:junit-pioneer:2.0.0")
-  testImplementation("org.mockito:mockito-core:5.2.0")
+  testImplementation("org.junit-pioneer:junit-pioneer:2.3.0")
+  testImplementation("org.mockito:mockito-core:5.15.2")
   testImplementation("org.hamcrest:hamcrest-core:2.2")
   testRuntimeOnly("org.apache.logging.log4j:log4j-slf4j-impl:2.20.0")
 }