Bump grpc.version from 1.59.1 to 1.61.0 for Quarkus 3.8 as well about quarkus

[cescoffier]

Ah didn't see the CVE. I need to investigate.

[chberger]

@chberger FYI, we are not vulnerable.

We offer two gRPC servers:

* the gRPC Java one based on Netty - Netty has an RST Flood protection

* the Vert.x based gRPC server - Vert.x has an RST Flood protection

@cescoffier Thank you for looking at this in detail!

This means their is not need to upgrade the grpc.version within 3.8 stream, as Netty and Vert.x have RST Flood protection in place. It's fine for me! In that case I'll mark the vulnerability to be ignored.

[quarkus-bot]

/cc @alesj (grpc), @cescoffier (grpc)

[cescoffier]

Any reason to update 3.8? We tend to only backport bug fixes and CVE.

[cescoffier]

@chberger FYI, we are not vulnerable.

We offer two gRPC servers:

• the gRPC Java one based on Netty - Netty has an RST Flood protection
• the Vert.x based gRPC server - Vert.x has an RST Flood protection

[cescoffier]

@gsmet WDYT?