feat(Dependcies): update jetty & pl4j & jackjson

[halibobo1205]

User description

What does this PR do?

Why are these changes required?

This PR has been tested by:

• Unit Tests
• Manual Testing

Follow up

Extra details

---

CodeAnt-AI Description

Update dependencies and expose new block and validator data in APIs

What Changed

• Updated bundled libraries to newer versions to remove known security issues.
• Added witness-set change metrics so node dashboards can show when active validators are added or removed.
• Added block transaction count metrics and block timestamp fields in logs and transaction receipts, making block and event data easier to inspect.
• Adjusted JSON-RPC block selection so latest, earliest, and finalized are handled consistently, while unsupported tags like pending and safe return clear errors.
• Fixed block and transaction queries to return the correct head block and avoid invalid results when newer blocks are not yet indexed.

Impact

✅ Lower risk from known library vulnerabilities
✅ Clearer validator rotation monitoring
✅ More complete block and log details in JSON-RPC responses

🔄 Retrigger CodeAnt AI Review

Details

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

[codeant-ai]

CodeAnt AI is reviewing your PR.

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[codeant-ai]

CodeAnt AI finished reviewing your PR.

[halibobo1205]

@CodeAnt-AI: review

[codeant-ai]

CodeAnt AI is running the review.

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[codeant-ai]

Sequence Diagram

This PR updates versions and verification metadata for core third party libraries (Jetty, Netty, Jackson, gRPC, PF4J and others), so builds use patched artifacts and the runtime handles network and serialization operations through these safer dependencies.

sequenceDiagram
    participant Developer
    participant Build
    participant DependencyRepo
    participant Application
    participant CoreLibraries
    participant Client

    Developer->>Build: Trigger build with updated dependency versions
    Build->>DependencyRepo: Fetch updated library artifacts
    DependencyRepo-->>Build: Return artifacts for new versions
    Build->>Build: Verify checksums using verification metadata
    Build->>Application: Assemble application with updated libraries

    Client->>Application: Send request to node
    Application->>CoreLibraries: Handle network and data using updated libs
    CoreLibraries-->>Application: Return processed data for response

Loading

---

Generated by CodeAnt AI

[codeant-ai]

CodeAnt AI finished running the review.

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[halibobo1205]

@codex: review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d1757611b8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[codeant-ai]

CodeAnt AI is running Incremental review

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[codeant-ai]

CodeAnt AI Incremental review completed.

[halibobo1205]

@codex: review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 🚀

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".