Upgrade multiple deps including bc-fips jars and transport-reactor-netty4

[cwperks]

Description

This PR contains the following updates:

• Bump io.projectreactor.netty:reactor_netty from 1.2.5 to 1.2.9
• Bump org.bouncycastle:bouncycastle_jce from 2.0.0 to 2.1.1
• Bump org.bouncycastle:bouncycastle_tls from 2.0.20 to 2.1.20
• Bump org.bouncycastle:bouncycastle_pkix from 2.0.8 to 2.1.9
• Bump org.bouncycastle:bouncycastle_pg from 2.0.11 to 2.1.11
• Bump org.bouncycastle:bouncycastle_util from 2.0.3 to 2.1.4

Related Issues

Resolves CVE-2025-22227 and CVE-2025-8916

Check List

• Functionality includes testing.
• API changes companion pull request created, if applicable.
• Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[github-actions]

❌ Gradle check result for 6f251c6: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for c699e1c: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[reta]

Thanks @cwperks !

[cwperks]

@reta I pushed a new commit because there are tests failing due to thread leak detection: https://build.ci.opensearch.org/job/gradle-check/63211/

The leaked threads are:

1) Thread[id=70, name=BC Disposal Daemon, state=WAITING, group=TGRP-PemUtilsTests]
2) Thread[id=78, name=BC Cleanup Executor, state=WAITING, group=TGRP-PemUtilsTests]

[github-actions]

❌ Gradle check result for 2c9d269: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[reta]

@reta I pushed a new commit because there are tests failing due to thread leak detection: https://build.ci.opensearch.org/job/gradle-check/63211/

@cwperks by setting org.bouncycastle.native.cleanup_delay system property value to 0 we should be able to disable cleanup entirely.

[cwperks]

@cwperks by setting org.bouncycastle.native.cleanup_delay system property value to 0 we should be able to disable cleanup entirely.

TY @reta. Pushed another commit to set this system prop in OpenSearchTestCase.

[github-actions]

❌ Gradle check result for a854320: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[cwperks]

@cwperks by setting org.bouncycastle.native.cleanup_delay system property value to 0 we should be able to disable cleanup entirely.

This didn't seem to work. Did I configure it correctly?

The ThreadFilter worked, but I needed to apply it to some more tests. Lmk which method would be preferable here.

[github-actions]

❌ Gradle check result for 697fb4c: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 1ac363d: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[reta]

❌ Gradle check result for 1ac363d: FAILURE

Hmm... needs more time :(, will take a look tomorrow

[github-actions]

❌ Gradle check result for dc011de: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[reta]

❌ Gradle check result for dc011de: FAILURE

@cwperks my apologies, I derailed you here, the change that actually disables BC cleanup turned out to be very recent and comes with the next release (2.1.2), sorry about that, I was very surprised as well to discover it.

The filter seems to be the only way for 2.1
1 to move forward, we could also stay om 2.0.x (it has all CVE fixes) and migrate to 2.1.x later on, as an option .

[cwperks]

❌ Gradle check result for dc011de: FAILURE

@cwperks my apologies, I derailed you here, the change that actually disables BC cleanup turned out to be very recent and comes with the next release (2.1.2), sorry about that, I was very surprised as well to discover it.

The filter seems to be the only way for 2.1 1 to move forward, we could also stay om 2.0.x (it has all CVE fixes) and migrate to 2.1.x later on, as an option .

Thank you for checking @reta! I'll add the filter back in and create a GH issue to track its removal once 2.1.2 is released.

[github-actions]

❌ Gradle check result for a7faba9: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for a7faba9: null

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for a7faba9: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

✅ Gradle check result for a7faba9: SUCCESS

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.82%. Comparing base (3f86407) to head (a7faba9).
⚠️ Report is 15 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #19222      +/-   ##
============================================
- Coverage     72.87%   72.82%   -0.05%     
+ Complexity    69698    69625      -73     
============================================
  Files          5656     5656              
  Lines        319999   319999              
  Branches      46335    46335              
============================================
- Hits         233207   233052     -155     
- Misses        67946    68083     +137     
- Partials      18846    18864      +18     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[cwperks]

@reta would you mind re-approving?