fix: update graphql java version (#137)

* fix: update graphql java version

* add suppression

Author: SrikarMannepalli

hypertrace-core-graphql-platform/build.gradle.kts

@@ -22,7 +22,7 @@ dependencies {
     api("org.hypertrace.core.attribute.service:attribute-service-api:${attributeServiceVersion}")
 
     api("com.google.inject:guice:5.1.0")
-    api("com.graphql-java:graphql-java:20.4")
+    api("com.graphql-java:graphql-java:19.4")
     api("io.github.graphql-java:graphql-java-annotations:9.1")
     api("org.slf4j:slf4j-api:1.7.36")
     api("io.reactivex.rxjava3:rxjava:3.1.6")

owasp-suppressions.xml

@@ -15,4 +15,11 @@
     <packageUrl regex="true">^pkg:maven/io\.github\.graphql\-java/graphql\-java\-annotations@.*$</packageUrl>
     <cpe>cpe:/a:graphql-java:graphql-java</cpe>
   </suppress>
+  <suppress until="2023-06-29Z">
+    <notes><![CDATA[
+   file name: jackson-databind-2.15.2.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$</packageUrl>
+    <cve>CVE-2023-35116</cve>
+  </suppress>
 </suppressions>