Dependabot 20220401a

.github/workflows/pr-gradle.yml

@@ -18,7 +18,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Gradle packages
-        uses: actions/cache@v2.1.7
+        uses: actions/cache@v3.0.1
         with:
           path: ~/.gradle/caches
           key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}

.github/workflows/pr-maven-latest.yml

@@ -19,7 +19,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
       - name: Cache Maven packages
-        uses: actions/cache@v2.1.7
+        uses: actions/cache@v3.0.1
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

.github/workflows/pr-maven-prod.yml

@@ -19,7 +19,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Maven packages
-        uses: actions/cache@v2.1.7
+        uses: actions/cache@v3.0.1
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

build.gradle

@@ -56,7 +56,7 @@ allprojects {
     ext {
         antlrVersion = '3.5.2'
         avroVersion = '1.11.0'
-        classgraphVersion = '4.8.141'
+        classgraphVersion = '4.8.143'
         classmateVersion = '1.5.1'
         collections4Version='4.4'
         commonscodecVersion = '1.15'
@@ -85,23 +85,23 @@ allprojects {
         javassistVersion = '3.28.0-GA'
         jaxbVersion = '2.3.1'
         jenaVersion = '4.2.0'
-        jodatimeVersion = '2.10.13'
+        jodatimeVersion = '2.10.14'
         jsonldVersion = '0.13.4'
         junitVersion = '4.13.2'
         junitjupiterVersion = '5.8.2'
         junitplatformVersion = '1.8.2'
         jwtVersion = '0.9.1'
         kafkaVersion = '3.1.0'
         lang3Version='3.8.1'
-        lettuceVersion = '6.1.6.RELEASE'
-        logbackVersion = '1.2.10'
+        logbackVersion = '1.2.11'
+        lettuceVersion = '6.1.8.RELEASE'
         luceneVersion = '8.11.1'
-        nettyVersion = '4.1.74.Final'
-        openlineageVersion = '0.5.2'
-        mockitoVersion = '4.3.1'
+        nettyVersion = '4.1.75.Final'
+        mockitoVersion = '4.4.0'
+        openlineageVersion = '0.6.2'
         ossVersion = '4.14.0'
         plexusVersion = '3.4.1'
-        prometheusVersion = '1.8.3'
+        prometheusVersion = '1.8.4'
         quartzVersion = '2.3.2'
         reflectionsVersion = '0.10.2'
         sanitizerVersion = '1.2.3'
@@ -110,18 +110,18 @@ allprojects {
         slf4jVersion = '1.7.36'
         snakeyamlVersion = '1.30'
         snappyVersion = '1.1.8.4'
-        springdataVersion = '2.6.2'
-        springbootVersion = '2.6.4'
-        spotbugsVersion = '4.5.3'
+        springbootVersion = '2.6.6'
+        springdataVersion = '2.6.3'
+        spotbugsVersion = '4.6.0'
         springdocVersion = '1.6.6'
         springldapVersion = '2.3.5.RELEASE'
         springsecurityVersion = '5.6.2'
         swaggerVersion = '2.1.13'
-        springwebVersion = '5.3.16'
+        springwebVersion = '5.3.18'
         testngVersion = '7.5'
         thriftVersion = '0.16.0'
         tinkVersion = '1.6.1'
-        tomcatVersion = '9.0.59'
+        tomcatVersion = '9.0.60'
         validationVersion = '2.0.1.Final'
     }
 

gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +1,5 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-7.4.2-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

open-metadata-resources/open-metadata-deployment/docker/configure/Dockerfile

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright Contributors to the Egeria project
 
-FROM docker.io/library/alpine:3.15.0
+FROM docker.io/library/alpine:3.15.3
 ARG version=3.8-SNAPSHOT
 ARG VCS_REF=unknown
 ARG VCS_ORIGIN=unknown

pom.xml

@@ -153,24 +153,24 @@
         <hamcrest.version>2.2</hamcrest.version>
         <junit.version>4.13.2</junit.version>
         <surefire.plugin.version>3.0.0-M5</surefire.plugin.version>
-        <mockito.version>4.3.1</mockito.version>
+        <mockito.version>4.4.0</mockito.version>
         <slf4j.version>1.7.36</slf4j.version>
         <testng.version>7.5</testng.version>
-        <jackson.version>2.13.1</jackson.version>
-        <logback.version>1.2.10</logback.version>
-        <jackson.databind.version>2.10.0</jackson.databind.version>
-        <netty.version>4.1.74.Final</netty.version>
-        <spring-boot.version>2.6.4</spring-boot.version>
+        <jackson.version>2.13.2</jackson.version>
+        <jackson.databind.version>2.13.2.2</jackson.databind.version>
+        <logback.version>1.2.11</logback.version>
+        <spring-boot.version>2.6.6</spring-boot.version>
+        <netty.version>4.1.75.Final</netty.version>
         <kafka.version>3.1.0</kafka.version>
         <janus.version>0.6.1</janus.version>
-        <tomcat.version>9.0.59</tomcat.version>
+        <tomcat.version>9.0.60</tomcat.version>
         <spring.ldap.core>2.3.6.RELEASE</spring.ldap.core>
         <gremlin.version>3.5.1</gremlin.version>
-        <spring-data.version>2.6.2</spring-data.version>
+        <spring-data.version>2.6.3</spring-data.version>
         <springdoc.version>1.6.6</springdoc.version>
-        <spring.version>5.3.16</spring.version>
+        <spring.version>5.3.18</spring.version>
         <spring-security.version>5.6.2</spring-security.version>
-        <springdoc-plugin.version>1.3</springdoc-plugin.version>
+        <springdoc-plugin.version>1.4</springdoc-plugin.version>
         <commons-io.version>2.11.0</commons-io.version>
 	    <commons-text.version>1.9</commons-text.version>
         <commons-collections4.version>4.4</commons-collections4.version>
@@ -196,17 +196,17 @@
         <json-sanitizer.version>1.2.3</json-sanitizer.version>
         <googlefindbugs.version>3.0.2</googlefindbugs.version>
         <oss.version>4.14.0</oss.version>
-        <spotbugs-annotations.version>4.5.3</spotbugs-annotations.version>
+        <spotbugs-annotations.version>4.6.0</spotbugs-annotations.version>
         <sleepycat.version>18.3.12</sleepycat.version>
-        <joda.version>2.10.13</joda.version>
+        <joda.version>2.10.14</joda.version>
         <jackson-asl.version>1.9.14-atlassian-6</jackson-asl.version>
         <antlr.version>3.5.2</antlr.version>
         <snappy.version>1.1.8.4</snappy.version>
         <swagger.version>2.1.13</swagger.version>
         <snakeyaml.version>1.30</snakeyaml.version>
-        <classgraph.version>4.8.141</classgraph.version>
-        <groovy.version>3.0.9</groovy.version>
-        <micrometer-registry-prometheus.version>1.8.3</micrometer-registry-prometheus.version>
+        <micrometer-registry-prometheus.version>1.8.4</micrometer-registry-prometheus.version>
+        <groovy.version>3.0.10</groovy.version>
+        <classgraph.version>4.8.143</classgraph.version>
         <jcl-over-slf4j.version>1.7.36</jcl-over-slf4j.version>
         <reflections.version>0.10.2</reflections.version>
         <HdrHistogram.version>2.1.12</HdrHistogram.version>
@@ -216,7 +216,7 @@
         <httpclient.version>4.5.13</httpclient.version>
         <commons-configuration.version>1.10</commons-configuration.version>
         <commons-configuration2.version>2.7</commons-configuration2.version>
-        <lettuce.version>6.1.6.RELEASE</lettuce.version>
+        <lettuce.version>6.1.8.RELEASE</lettuce.version>
         <lombok.version>1.18.22</lombok.version>
         <lombok-plugin.version>1.18.20.0</lombok-plugin.version>
         <javax.servlet.version>4.0.1</javax.servlet.version>
@@ -229,14 +229,14 @@
         <maven-site-plugin.version>3.11.0</maven-site-plugin.version>
         <maven-reports-plugin.version>3.2.2</maven-reports-plugin.version>
         <maven-clean-plugin.version>3.1.0</maven-clean-plugin.version>
-        <maven-shade.version>3.2.4</maven-shade.version>
+        <maven-shade.version>3.3.0</maven-shade.version>
         <maven-install.version>3.0.0-M1</maven-install.version>
-        <owasp.version>7.0.0</owasp.version>
+        <owasp.version>7.0.4</owasp.version>
         <maven-jar-plugin.version>3.2.2</maven-jar-plugin.version>
         <maven-pmd.version>3.16.0</maven-pmd.version>
-        <maven-compiler.version>3.10.0</maven-compiler.version>
+        <maven-compiler.version>3.10.1</maven-compiler.version>
         <maven-download.version>1.6.8</maven-download.version>
-        <spotbugs-maven.version>4.5.3</spotbugs-maven.version>
+        <spotbugs-maven.version>4.6.0</spotbugs-maven.version>
         <maven-antrun.version>3.0.0</maven-antrun.version>
         <spotify-docker-plugin.version>1.4.13</spotify-docker-plugin.version>
         <maven-enforcer-plugin.version>3.0.0-M3</maven-enforcer-plugin.version>
@@ -246,7 +246,7 @@
         <exec.plugin.version>3.0.0</exec.plugin.version>
         <resources.plugin.version>3.2.0</resources.plugin.version>
         <rat-plugin.version>0.13</rat-plugin.version>
-        <maven-dependency-plugin.version>3.1.2</maven-dependency-plugin.version>
+        <maven-dependency-plugin.version>3.3.0</maven-dependency-plugin.version>
         <maven-deploy-plugin.version>2.8.2</maven-deploy-plugin.version>
         <maven-source-plugin.version>3.2.1</maven-source-plugin.version>
         <maven-gpg-plugin.version>3.0.1</maven-gpg-plugin.version>
@@ -257,8 +257,8 @@
         <git-commit-plugin.version>4.9.10</git-commit-plugin.version>
         <process-exec-plugin.version>0.9</process-exec-plugin.version>
         <groovy-plugin.version>2.1.1</groovy-plugin.version>
-        <properties.plugin.version>1.0.0</properties.plugin.version>
-        <openlineage.version>0.5.2</openlineage.version>
+        <openlineage.version>0.6.2</openlineage.version>
+        <properties.plugin.version>1.1.0</properties.plugin.version>
 
         <!-- Configuration of sonar code scanning-->
         <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
@@ -316,7 +316,7 @@
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
                 <scope>compile</scope>
-                <version>${jackson.version}</version>
+                <version>${jackson.databind.version}</version>
             </dependency>
 
             <dependency>
@@ -3816,6 +3816,9 @@
                                 <ignoredUnusedDeclaredDependency>org.slf4j:slf4j-simple:*
                                 </ignoredUnusedDeclaredDependency>
                             </ignoredUnusedDeclaredDependencies>
+                            <ignoredNonTestScopedDependencies>
+                                <ignoredNonTestScopedDependency>*</ignoredNonTestScopedDependency>
+                            </ignoredNonTestScopedDependencies>
                         </configuration>
                     </execution>
                     <execution>

settings.gradle

@@ -7,7 +7,7 @@
 pluginManagement {
     plugins {
         //id 'io.spring.dependency-management' version '1.0.10.RELEASE'
-        id 'org.springframework.boot' version '2.6.4'
+        id 'org.springframework.boot' version '2.6.6'
         id 'gradle-aggregate-javadocs-plugin' version '3.0.1'
         id 'org.siouan.frontend-jdk11' version '6.0.0'
         id 'com.github.johnrengelman.shadow' version '7.1.2'