Fix missing module dependency on java.net.http

The new vulnerability data source plugins make use of Java's built-in `HttpClient`, which resides in the `java.net.http` module.

It seems `jdeps` is unable to detect this dependency at build time, so it needs to be added manually.

Signed-off-by: Niklas <[email protected]>

Author: nscuro

apiserver/src/main/docker/create-jre.sh

@@ -61,9 +61,10 @@ fi
 work_dir="$(mktemp -d)"
 
 # Module dependencies that jdeps fails to detect.
+#   java.net.http: Required for Java's HttpClient.
 #   jdk.crypto.ec: Required for TLS connections that use elliptic curve cryptography.
 #   jdk.zipfs:     Required by code that reads files from JAR files at runtime.
-static_module_deps='jdk.crypto.ec,jdk.zipfs'
+static_module_deps='java.net.http,jdk.crypto.ec,jdk.zipfs'
 
 echo "[+] extracting $(basename "${input_jar}") to ${work_dir}"
 unzip -qq "${input_jar}" -d "${work_dir}"
@@ -90,4 +91,4 @@ jlink \
   --output "${output_dir}"
 
 echo "[+] removing ${work_dir}"
-rm -rf "${work_dir}"
+rm -rf "${work_dir}"