Merge pull request #7612 from planetf1/dependabot_20230414a

.github/workflows/scorecards.yml

@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86  # tag=v2.1.2
+        uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af  # tag=v2.1.3
         with:
           results_file: results.sarif
           results_format: sarif

.github/workflows/stale.yml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: check stale issues and prs
         if: startsWith(github.repository,'odpi/')
-        uses: actions/stale@v7
+        uses: actions/stale@v8
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: >

bom/build.gradle

@@ -28,13 +28,13 @@ ext {
     classmateVersion = '1.5.1'
     collections4Version = '4.4'
     commonscodecVersion = '1.15'
-    commonsconfiguration2Version = '2.8.0'
+    commonsconfiguration2Version = '2.9.0'
     commonsconfigurationVersion = '1.10'
     commonsioVersion = '2.11.0'
     commonsloggingVersion = '1.2'
     commonstextVersion = '1.10.0'
     commonscliVersion = '1.5.0'
-    elasticsearchVersion = '8.6.2'
+    elasticsearchVersion = '8.7.0'
     findbugsVersion = '3.0.2'
     glassfishVersion = '1.1.4'
     // TODO: Held back for compatability
@@ -58,7 +58,7 @@ ext {
     javassistVersion = '3.29.2-GA'
     jaxbVersion = '2.3.1'
     jenaVersion = '4.7.0'
-    jodatimeVersion = '2.12.2'
+    jodatimeVersion = '2.12.5'
     jsonldVersion = '0.13.4'
     junitVersion = '4.13.2'
     junitjupiterVersion = '5.9.2'
@@ -78,8 +78,8 @@ ext {
     // TODO: Held as data engine breaks
     mockitoVersion = '4.11.0'
     plexusVersion = '3.5.1'
-    prometheusVersion = '1.10.4'
-    nettyVersion = '4.1.89.Final'
+    prometheusVersion = '1.10.5'
+    nettyVersion = '4.1.90.Final'
     quartzVersion = '2.3.2'
     reflectionsVersion = '0.10.2'
     sanitizerVersion = '1.2.3'
@@ -90,13 +90,13 @@ ext {
     snakeyamlVersion = '2.0'
     slf4jVersion = '2.0.6'
     snappyVersion = '1.1.9.1'
-    springbootVersion = '3.0.4'
+    springbootVersion = '3.0.5'
     spotbugsVersion = '4.7.3'
     springdataVersion = '3.0.3'
     springldapVersion = '3.0.1'
     springsecurityVersion = '6.0.2'
     springsecurityJwtVersion = '1.1.1.RELEASE'
-    swaggerVersion = '2.2.8'
+    swaggerVersion = '2.2.9'
     testngVersion = '7.7.1'
     thriftVersion = '0.18.1'
     springwebVersion = '6.0.6'
@@ -106,7 +106,7 @@ ext {
     gsonVersion = '2.10.1'
     antVersion = '1.10.13'
     jnrVersion = '3.1.16'
-    cassandraVersion = '4.1.0'
+    cassandraVersion = '4.1.1'
     protobufVersion = '3.22.2'
     osgiVersion = '8.0.0'
     log4jVersion = '2.20.0'
@@ -119,7 +119,7 @@ ext {
 dependencies {
     // Only use this to bring in platforms, which are *constraints*
     dependencies {
-        api(platform('net.openhft:chronicle-bom:2.24ea45'))
+        api(platform('net.openhft:chronicle-bom:2.24ea46'))
     }
     constraints {
         api("ch.qos.logback:logback-classic:${logbackVersion}")

open-metadata-resources/open-metadata-deployment/docker/configure/Dockerfile

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright Contributors to the Egeria project
 
-FROM docker.io/library/alpine:3.17.1
+FROM docker.io/library/alpine:3.17.3
 ARG version=4.1-SNAPSHOT
 ARG VCS_REF=unknown
 ARG VCS_ORIGIN=unknown

settings.gradle

@@ -16,7 +16,7 @@ pluginManagement {
     }
     plugins {
         id "io.freefair.aggregate-javadoc" version "6.6.3"
-        id "io.freefair.lombok" version "6.6.3"
+        id "io.freefair.lombok" version "8.0.1"
         // Checks for unnecessary dependencies
         id("com.autonomousapps.dependency-analysis") version "1.19.0"
         // helps resolve log implementation clashes
@@ -25,8 +25,8 @@ pluginManagement {
         id 'org.gradlex.java-ecosystem-capabilities' version "1.1"
         // Docs don't recommend specifying a version for checkstyle
         id 'checkstyle'
-        id 'org.springframework.boot' version '2.7.9'
-        id 'com.github.johnrengelman.shadow' version '7.1.2'
+        id 'org.springframework.boot' version '2.7.10'
+        id 'com.github.johnrengelman.shadow' version '8.1.1'
         id 'com.github.psxpaul.execfork' version '0.2.2'
     }
 }