Merge pull request #7304 from planetf1/dependabot_20230103a

Dependabot 20230103a
odpi · Jan 3, 2023 · 9ed35f0 · 9ed35f0
2 parents 6011a47 + 6c0e273
commit 9ed35f0
Show file tree

Hide file tree

Showing 5 changed files with 39 additions and 38 deletions.
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # tag=v2.0.6
+        uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # tag=v2.1.2
         with:
           results_file: results.sarif
           results_format: sarif

diff --git a/.gitignore b/.gitignore
@@ -72,6 +72,7 @@ maven-eclipse.xml
 
 # Mac OS
 __MACOSX
+*.dylib
 
 # specific Egeria config files
 omag.server.*.config

diff --git a/build.gradle b/build.gradle
@@ -8,10 +8,10 @@
  * Plugins for this parent module only - so just high level project related
  */
 plugins {
-    id "io.freefair.lombok" version "6.5.1"
-    id "io.freefair.aggregate-javadoc" version "6.5.1"
+    id "io.freefair.aggregate-javadoc" version "6.6.1"
+    id "io.freefair.lombok" version "6.6.1"
     // Checks for unnecessary dependencies
-    id 'com.autonomousapps.dependency-analysis' version "1.17.0"
+    id 'com.autonomousapps.dependency-analysis' version "1.18.0"
     // helps resolve log implementation clashes
     id 'dev.jacomet.logging-capabilities' version "0.10.0"
     // This plugin helps resolve jakarta/javax dev.jacomet.logging-capabilities
@@ -57,7 +57,7 @@ allprojects {
         antlrVersion = '3.5.3'
         ST4Version = '4.3.4'
         avroVersion = '1.11.1'
-        classgraphVersion = '4.8.151'
+        classgraphVersion = '4.8.153'
         classmateVersion = '1.5.1'
         collections4Version = '4.4'
         commonscodecVersion = '1.15'
@@ -67,7 +67,7 @@ allprojects {
         commonsloggingVersion = '1.2'
         commonstextVersion = '1.10.0'
         commonscliVersion = '1.5.0'
-        elasticsearchVersion = '8.5.2'
+        elasticsearchVersion = '8.5.3'
         findbugsVersion = '3.0.2'
         glassfishVersion = '1.1.4'
         gremlinVersion = '3.5.2'
@@ -76,7 +76,7 @@ allprojects {
         hamcrestVersion = '2.2'
         hdrhistogramVersion = '2.1.12'
         hibernatevalidatorVersion = '8.0.0.Final'
-        httpclientVersion = '4.5.13'
+        httpclientVersion = '4.5.14'
         httpcoreVersion = '4.4.16'
         jacksonVersion = '2.14.1'
         jacksonDatabindVersion = '2.14.1'
@@ -88,7 +88,7 @@ allprojects {
         javassistVersion = '3.29.2-GA'
         jaxbVersion = '2.3.1'
         jenaVersion = '4.2.0'
-        jodatimeVersion = '2.12.1'
+        jodatimeVersion = '2.12.2'
         jsonldVersion = '0.13.4'
         junitVersion = '4.13.2'
         junitjupiterVersion = '5.9.1'
@@ -97,14 +97,14 @@ allprojects {
         kafkaVersion = '3.3.1'
         lang3Version = '3.12.0'
         logbackVersion = '1.2.11'
-        lettuceVersion = '6.2.1.RELEASE'
+        lettuceVersion = '6.2.2.RELEASE'
         luceneVersion = '8.11.1'
-        openlineageVersion = '0.17.0'
+        openlineageVersion = '0.18.0'
         ossVersion = '4.15.0'
-        mockitoVersion = '4.9.0'
+        mockitoVersion = '4.11.0'
         plexusVersion = '3.5.0'
         prometheusVersion = '1.10.2'
-        nettyVersion = '4.1.85.Final'
+        nettyVersion = '4.1.86.Final'
         quartzVersion = '2.3.2'
         reflectionsVersion = '0.10.2'
         sanitizerVersion = '1.2.3'
@@ -113,24 +113,24 @@ allprojects {
         snakeyamlVersion = '1.33'
         slf4jVersion = '1.7.36'
         snappyVersion = '1.1.8.4'
-        springbootVersion = '2.7.6'
-        springdocVersion = '1.6.13'
+        springbootVersion = '2.7.7'
+        springdocVersion = '1.6.12'
         spotbugsVersion = '4.7.3'
         springdataVersion = '2.7.6'
         springldapVersion = '2.4.1'
-        springsecurityVersion = '5.8.0'
+        springsecurityVersion = '5.8.1'
         swaggerVersion = '2.2.7'
-        testngVersion = '7.6.1'
+        testngVersion = '7.7.1'
         thriftVersion = '0.17.0'
         springwebVersion = '5.3.24'
         tinkVersion = '1.7.0'
-        tomcatVersion = '9.0.69'
+        tomcatVersion = '9.0.70'
         validationVersion = '2.0.1.Final'
         antVersion = '1.10.12'
         gsonVersion = '2.10'
         jnrVersion = '3.1.16'
-        protobufVersion = '3.21.10'
-        cassandraVersion = '4.0.7'
+        cassandraVersion = '4.1.0'
+        protobufVersion = '3.21.12'
         osgiVersion = '8.0.0'
         log4jVersion = '2.19.0'
         jacksonjdk8Version = '2.14.1'
@@ -301,7 +301,7 @@ allprojects {
             runtimeOnly("org.antlr:antlr4:4.11.1")
             runtimeOnly("org.apache.ivy:ivy:2.5.1")
         }
-        implementation platform('net.openhft:chronicle-bom:2.24ea16')
+        implementation platform('net.openhft:chronicle-bom:2.24ea25')
     }
 
     /*

diff --git a/pom.xml b/pom.xml
@@ -152,23 +152,23 @@
         <hamcrest.version>2.2</hamcrest.version>
         <junit.version>4.13.2</junit.version>
         <surefire.plugin.version>3.0.0-M7</surefire.plugin.version>
-        <mockito.version>4.9.0</mockito.version>
+        <mockito.version>4.11.0</mockito.version>
         <slf4j.version>1.7.36</slf4j.version>
-        <testng.version>7.5</testng.version>
+        <testng.version>7.7.1</testng.version>
         <jackson.version>2.14.1</jackson.version>
         <jackson.databind.version>2.14.1</jackson.databind.version>
         <logback.version>1.2.11</logback.version>
         <kafka.version>3.3.1</kafka.version>
-        <tomcat.version>9.0.69</tomcat.version>
-        <netty.version>4.1.85.Final</netty.version>
+        <netty.version>4.1.86.Final</netty.version>
+        <tomcat.version>9.0.70</tomcat.version>
         <spring.ldap.core>2.4.1</spring.ldap.core>
         <janus.version>0.6.1</janus.version>
-        <spring-boot.version>2.7.6</spring-boot.version>
+        <spring-boot.version>2.7.7</spring-boot.version>
         <gremlin.version>3.5.2</gremlin.version>
         <springdoc.version>1.6.12</springdoc.version>
         <spring-data.version>2.7.6</spring-data.version>
         <spring.version>5.3.24</spring.version>
-        <spring-security.version>5.8.0</spring-security.version>
+        <spring-security.version>5.8.1</spring-security.version>
         <springdoc-plugin.version>1.4</springdoc-plugin.version>
         <commons-io.version>2.11.0</commons-io.version>
         <commons-cli.version>1.5.0</commons-cli.version>
@@ -198,31 +198,31 @@
         <spotbugs-annotations.version>4.7.3</spotbugs-annotations.version>
         <oss.version>4.15.0</oss.version>
         <sleepycat.version>18.3.12</sleepycat.version>
-        <joda.version>2.12.1</joda.version>
+        <joda.version>2.12.2</joda.version>
         <jackson-asl.version>1.9.14-atlassian-6</jackson-asl.version>
         <antlr.version>3.5.3</antlr.version>
         <ST4.version>4.3.4</ST4.version>
         <snappy.version>1.1.8.4</snappy.version>
         <snakeyaml.version>1.33</snakeyaml.version>
         <swagger.version>2.2.6</swagger.version>
-        <classgraph.version>4.8.151</classgraph.version>
+        <classgraph.version>4.8.153</classgraph.version>
         <micrometer-registry-prometheus.version>1.10.2</micrometer-registry-prometheus.version>
         <jcl-over-slf4j.version>1.7.36</jcl-over-slf4j.version>
-        <groovy.version>3.0.13</groovy.version>
+        <groovy.version>3.0.14</groovy.version>
         <reflections.version>0.10.2</reflections.version>
         <HdrHistogram.version>2.1.12</HdrHistogram.version>
         <glassfish.json.version>1.1.4</glassfish.json.version>
         <javassist.version>3.29.2-GA</javassist.version>
         <httpcore.version>4.4.16</httpcore.version>
-        <httpclient.version>4.5.13</httpclient.version>
+        <httpclient.version>4.5.14</httpclient.version>
         <commons-configuration.version>1.10</commons-configuration.version>
         <commons-configuration2.version>2.8.0</commons-configuration2.version>
-        <lettuce.version>6.2.1.RELEASE</lettuce.version>
+        <lettuce.version>6.2.2.RELEASE</lettuce.version>
         <lombok.version>1.18.24</lombok.version>
         <lombok-plugin.version>1.18.20.0</lombok-plugin.version>
         <javax.servlet.version>4.0.1</javax.servlet.version>
         <thrift.version>0.17.0</thrift.version>
-        <elasticsearch.version>8.5.2</elasticsearch.version>
+        <elasticsearch.version>8.5.3</elasticsearch.version>
         <hibernate-validator.version>8.0.0.Final</hibernate-validator.version>
         <!-- Versions of plugins -->
         <enunciate-maven-plugin.version>2.10.1</enunciate-maven-plugin.version>
@@ -234,7 +234,7 @@
         <maven-install.version>3.1.0</maven-install.version>
         <maven-pmd.version>3.19.0</maven-pmd.version>
         <maven-jar-plugin.version>3.3.0</maven-jar-plugin.version>
-        <owasp.version>7.3.2</owasp.version>
+        <owasp.version>7.4.3</owasp.version>
         <maven-compiler.version>3.10.1</maven-compiler.version>
         <maven-download.version>1.6.8</maven-download.version>
         <spotbugs-maven.version>4.7.3</spotbugs-maven.version>
@@ -258,12 +258,12 @@
         <git-commit-plugin.version>4.9.10</git-commit-plugin.version>
         <process-exec-plugin.version>0.9</process-exec-plugin.version>
         <groovy-plugin.version>2.1.1</groovy-plugin.version>
-        <openlineage.version>0.17.0</openlineage.version>
+        <openlineage.version>0.18.0</openlineage.version>
         <properties.plugin.version>1.1.0</properties.plugin.version>
-        <cassandra.version>4.0.7</cassandra.version>
+        <cassandra.version>4.1.0</cassandra.version>
         <ant.version>1.10.12</ant.version>
         <gson.version>2.10</gson.version>
-        <protobuf.version>3.21.10</protobuf.version>
+        <protobuf.version>3.21.12</protobuf.version>
         <jnr.version>3.1.16</jnr.version>
         <osgi.version>8.0.0</osgi.version>
         <jacksonjdk8.version>2.14.1</jacksonjdk8.version>
@@ -3434,7 +3434,7 @@
             <dependency>
                 <groupId>net.openhft</groupId>
                 <artifactId>chronicle-bom</artifactId>
-                <version>2.24ea17</version>
+                <version>2.24ea25</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

diff --git a/settings.gradle b/settings.gradle
@@ -16,7 +16,7 @@ pluginManagement {
     }
     plugins {
         //id 'io.spring.dependency-management' version '1.0.10.RELEASE'
-        id 'org.springframework.boot' version '2.7.5'
+        id 'org.springframework.boot' version '2.7.7'
         id 'gradle-aggregate-javadocs-plugin' version '3.0.1'
         id 'org.siouan.frontend-jdk11' version '6.0.0'
         id 'com.github.johnrengelman.shadow' version '7.1.2'