Upgrade grpc-core Java SDK dependency to avoid CWE-404

[t0yv0]

What happened?

https://ossindex.sonatype.org/vulnerability/sonatype-2021-0818?component-type=maven&component-name=io.grpc%2Fgrpc-core&utm_source=ossindex-client&utm_medium=integration&utm_content=1.7.0

CWE-404: Improper Resource Shutdown or Release

Note that previously we noticed some issues with tests not passing after upgrading gRPC deps, so this might need some work.

Steps to reproduce

Expected Behavior

Actual Behavior

Versions used

No response

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

[pawelprazak]

Not sure I understand this one, do I understand correctly it was reverted?
grpc/grpc-java#8361

[t0yv0]

I've reverted it because it made our tests fail. We probably need to try again, this time paying attention to why the tests fail and if there is any way to mitigate the problem and upgrade after all.

[t0yv0]

This is now fixed (dep upgraded) + detailed workaround for the minimal example in #806

[pulumi-bot]

Cannot close issue without required labels: resolution/