Dependabot June 2022

.github/workflows/linkcheck.yml

@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v1.4.1
+        uses: lycheeverse/lychee-action@v1.5.0
         with:
           # Can switch to true once we run clean
           fail: false

.github/workflows/merge-maven.yml

@@ -52,22 +52,22 @@ jobs:
         run: mvn -B clean verify
       # --
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       - name: Login to container registry (Quay.io)
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_IO_USERNAME }}
           password: ${{ secrets.QUAY_IO_ACCESS_TOKEN }}
       - name: Login to container registry (Docker Hub)
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
       # QEMU is needed for ARM64 build for egeria-configure
       # egeria-configure needs to install utilities
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v2
 
       - name: Set Release version env variable
         run: |
@@ -80,7 +80,7 @@ jobs:
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-distribution/egeria-omag-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
       - name: Build and push(egeria) to quay.io and docker.io
         if: ${{ github.repository == 'odpi/egeria' && github.ref == 'refs/heads/master'}}
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/egeria:${{ env.VERSION }}, odpi/egeria:latest, quay.io/odpi/egeria:${{ env.VERSION }}, quay.io/odpi/egeria:latest
@@ -89,7 +89,7 @@ jobs:
       # Publish container images(egeria-configure) to quay.io and docker.io
       - name: Build and push(egeria-configure) to quay.io and docker.io
         if: ${{ github.repository == 'odpi/egeria' && github.ref == 'refs/heads/master'}}
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/egeria-configure:${{ env.VERSION }}, odpi/egeria-configure:latest, quay.io/odpi/egeria-configure:${{ env.VERSION }}, quay.io/odpi/egeria-configure:latest
@@ -103,7 +103,7 @@ jobs:
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-deploy/egeria-deploy-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/jupyter/target/assembly
       - name: Build and push(jupyter) to quay.io and docker.io
         if: ${{ github.repository == 'odpi/egeria' && github.ref == 'refs/heads/master'}}
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/jupyter:${{ env.VERSION }}, odpi/jupyter:latest, quay.io/odpi/jupyter:${{ env.VERSION }}, quay.io/odpi/jupyter:latest

.github/workflows/pr-gradle.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Gradle packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           path: ~/.gradle/caches
           key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}

.github/workflows/pr-maven-latest.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
       - name: Cache Maven packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

.github/workflows/pr-maven-prod.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Maven packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

.github/workflows/release.yml

@@ -26,15 +26,15 @@ jobs:
         name: Checkout source
       # Prep for docker builds
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       - name: Login to container registry (Quay.io)
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_IO_USERNAME }}
           password: ${{ secrets.QUAY_IO_ACCESS_TOKEN }}
       - name: Login to container registry (docker.io)
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
@@ -63,7 +63,7 @@ jobs:
       # QEMU is needed for ARM64 build for egeria-configure
       # egeria-configure needs to install utilities
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v2
 
       - name: Set Release version env variable
         run: |
@@ -74,15 +74,15 @@ jobs:
           mkdir -p ./open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-distribution/egeria-omag-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
       - name: Build and push(egeria) to quay.io and docker.io
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/egeria:${{ env.VERSION }}, odpi/egeria:latest, quay.io/odpi/egeria:${{ env.VERSION }}, quay.io/odpi/egeria:latest
           context: ./open-metadata-resources/open-metadata-deployment/docker/egeria
           platforms: linux/amd64,linux/arm64
       # Publish container images(egeria-configure) to quay.io and docker.io
       - name: Build and push(egeria-configure) to quay.io and docker.io
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/egeria-configure:${{ env.VERSION }}, odpi/egeria-configure:latest, quay.io/odpi/egeria-configure:${{ env.VERSION }}, quay.io/odpi/egeria-configure:latest
@@ -94,7 +94,7 @@ jobs:
           mkdir -p ./open-metadata-resources/open-metadata-deployment/docker/jupyter/target/assembly
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-deploy/egeria-deploy-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/jupyter/target/assembly
       - name: Build and push(jupyter) to quay.io and docker.io
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           push: true
           tags: odpi/jupyter:${{ env.VERSION }}, odpi/jupyter:latest, quay.io/odpi/jupyter:${{ env.VERSION }}, quay.io/odpi/jupyter:latest

build.gradle

@@ -67,7 +67,7 @@ allprojects {
         antlrVersion = '3.5.3'
         ST4Version = '4.3.3'
         avroVersion = '1.11.0'
-        classgraphVersion = '4.8.146'
+        classgraphVersion = '4.8.147'
         classmateVersion = '1.5.1'
         collections4Version='4.4'
         commonscodecVersion = '1.15'
@@ -77,7 +77,7 @@ allprojects {
         commonsloggingVersion = '1.2'
         commonstextVersion = '1.9'
         commonscliVersion = '1.5.0'
-        elasticsearchVersion = '8.0.1'
+        elasticsearchVersion = '8.2.2'
         findbugsVersion = '3.0.2'
         glassfishVersion = '1.1.4'
         gremlinVersion = '3.5.2'
@@ -88,12 +88,12 @@ allprojects {
         hibernatevalidatorVersion = '6.2.3.Final'
         httpclientVersion = '4.5.13'
         httpcoreVersion = '4.4.15'
-        jacksonVersion = '2.13.1'
+        jacksonVersion = '2.13.3'
         jacksonaslVersion = '1.9.14-atlassian-6'
         jakartaannotationVersion = '1.3.5'
         jakartapersistenceVersion = '3.1.0'
         janusVersion = '0.6.1'
-	    jakartavalidationVersion = '3.0.1'
+	jakartavalidationVersion = '3.0.1'
         javassistVersion = '3.28.0-GA'
         jaxbVersion = '2.3.1'
         jenaVersion = '4.2.0'
@@ -103,17 +103,17 @@ allprojects {
         junitjupiterVersion = '5.8.2'
         junitplatformVersion = '1.8.2'
         jwtVersion = '0.9.1'
-        kafkaVersion = '3.1.0'
+        kafkaVersion = '3.2.0'
         lang3Version='3.8.1'
         logbackVersion = '1.2.11'
         lettuceVersion = '6.1.8.RELEASE'
         luceneVersion = '8.11.1'
-        nettyVersion = '4.1.76.Final'
+        nettyVersion = '4.1.77.Final'
         ossVersion = '4.14.1'
-        openlineageVersion = '0.8.1'
+        openlineageVersion = '0.8.2'
         mockitoVersion = '4.5.1'
-        plexusVersion = '3.4.1'
-        prometheusVersion = '1.8.5'
+        plexusVersion = '3.4.2'
+        prometheusVersion = '1.9.0'
         quartzVersion = '2.3.2'
         reflectionsVersion = '0.10.2'
         sanitizerVersion = '1.2.3'
@@ -122,24 +122,24 @@ allprojects {
         slf4jVersion = '1.7.36'
         snakeyamlVersion = '1.30'
         snappyVersion = '1.1.8.4'
-        springdataVersion = '2.6.4'
-        springbootVersion = '2.6.7'
-        spotbugsVersion = '4.6.0'
-        springdocVersion = '1.6.8'
-        springldapVersion = '2.3.5.RELEASE'
+        springbootVersion = '2.7.0'
+        spotbugsVersion = '4.7.0'
+        springdocVersion = '1.6.9'
+        springdataVersion = '2.7.0'
+        springldapVersion = '2.4.0'
         swaggerVersion = '2.2.0'
-        springsecurityVersion = '5.6.4'
+        springsecurityVersion = '5.7.1'
         springwebVersion = '5.3.20'
-        testngVersion = '7.5'
+        testngVersion = '7.6.0'
         thriftVersion = '0.16.0'
         tinkVersion = '1.6.1'
-        tomcatVersion = '9.0.62'
+        tomcatVersion = '9.0.63'
         validationVersion = '2.0.1.Final'
         antVersion = '1.10.12'
         gsonVersion = '2.9.0'
-        protobufVersion = '3.20.1'
+        protobufVersion = '3.21.1'
         jnrVersion = '3.1.15'
-        cassandraVersion = '4.0.3'
+        cassandraVersion = '4.0.4'
     }
 
     dependencies {

open-metadata-resources/open-metadata-deployment/docker/configure/Dockerfile

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright Contributors to the Egeria project
 
-FROM docker.io/library/alpine:3.15.4
+FROM docker.io/library/alpine:3.16.0
 ARG version=3.10-SNAPSHOT
 ARG VCS_REF=unknown
 ARG VCS_ORIGIN=unknown

pom.xml

@@ -154,20 +154,20 @@
         <surefire.plugin.version>3.0.0-M6</surefire.plugin.version>
         <mockito.version>4.5.1</mockito.version>
         <slf4j.version>1.7.36</slf4j.version>
-        <testng.version>7.5</testng.version>
-        <jackson.version>2.13.2</jackson.version>
-        <jackson.databind.version>2.13.2.2</jackson.databind.version>
+        <testng.version>7.6.0</testng.version>
+        <jackson.version>2.13.3</jackson.version>
+        <jackson.databind.version>2.13.3</jackson.databind.version>
         <logback.version>1.2.11</logback.version>
-        <spring-boot.version>2.6.7</spring-boot.version>
-        <netty.version>4.1.76.Final</netty.version>
-        <kafka.version>3.1.0</kafka.version>
+        <kafka.version>3.2.0</kafka.version>
+        <netty.version>4.1.77.Final</netty.version>
+        <spring-boot.version>2.7.0</spring-boot.version>
         <janus.version>0.6.1</janus.version>
-        <tomcat.version>9.0.62</tomcat.version>
-        <spring.ldap.core>2.3.7.RELEASE</spring.ldap.core>
+        <tomcat.version>9.0.63</tomcat.version>
+        <spring.ldap.core>2.4.0</spring.ldap.core>
         <gremlin.version>3.5.2</gremlin.version>
-        <spring-data.version>2.6.4</spring-data.version>
-        <springdoc.version>1.6.8</springdoc.version>
-        <spring-security.version>5.6.4</spring-security.version>
+        <spring-data.version>2.7.0</spring-data.version>
+        <springdoc.version>1.6.9</springdoc.version>
+        <spring-security.version>5.7.1</spring-security.version>
         <spring.version>5.3.20</spring.version>
         <springdoc-plugin.version>1.4</springdoc-plugin.version>
         <commons-io.version>2.11.0</commons-io.version>
@@ -196,7 +196,7 @@
         <json-sanitizer.version>1.2.3</json-sanitizer.version>
         <googlefindbugs.version>3.0.2</googlefindbugs.version>
         <oss.version>4.14.1</oss.version>
-        <spotbugs-annotations.version>4.6.0</spotbugs-annotations.version>
+        <spotbugs-annotations.version>4.7.0</spotbugs-annotations.version>
         <sleepycat.version>18.3.12</sleepycat.version>
         <joda.version>2.10.14</joda.version>
         <jackson-asl.version>1.9.14-atlassian-6</jackson-asl.version>
@@ -205,14 +205,14 @@
         <snappy.version>1.1.8.4</snappy.version>
         <swagger.version>2.2.0</swagger.version>
         <snakeyaml.version>1.30</snakeyaml.version>
-        <micrometer-registry-prometheus.version>1.8.5</micrometer-registry-prometheus.version>
+        <micrometer-registry-prometheus.version>1.9.0</micrometer-registry-prometheus.version>
         <groovy.version>3.0.10</groovy.version>
-        <classgraph.version>4.8.146</classgraph.version>
+        <classgraph.version>4.8.147</classgraph.version>
         <jcl-over-slf4j.version>1.7.36</jcl-over-slf4j.version>
         <reflections.version>0.10.2</reflections.version>
         <HdrHistogram.version>2.1.12</HdrHistogram.version>
         <glassfish.json.version>1.1.4</glassfish.json.version>
-        <javassist.version>3.28.0-GA</javassist.version>
+        <javassist.version>3.29.0-GA</javassist.version>
         <httpcore.version>4.4.15</httpcore.version>
         <httpclient.version>4.5.13</httpclient.version>
         <commons-configuration.version>1.10</commons-configuration.version>
@@ -222,7 +222,7 @@
         <lombok-plugin.version>1.18.20.0</lombok-plugin.version>
         <javax.servlet.version>4.0.1</javax.servlet.version>
         <thrift.version>0.16.0</thrift.version>
-        <elasticsearch.version>8.0.1</elasticsearch.version>
+        <elasticsearch.version>8.2.2</elasticsearch.version>
         <hibernate-validator.version>6.2.0.Final</hibernate-validator.version>
         <!-- Versions of plugins -->
         <enunciate-maven-plugin.version>2.10.1</enunciate-maven-plugin.version>
@@ -258,13 +258,13 @@
         <git-commit-plugin.version>4.9.10</git-commit-plugin.version>
         <process-exec-plugin.version>0.9</process-exec-plugin.version>
         <groovy-plugin.version>2.1.1</groovy-plugin.version>
-        <openlineage.version>0.8.1</openlineage.version>
+        <openlineage.version>0.8.2</openlineage.version>
         <properties.plugin.version>1.1.0</properties.plugin.version>
-        <cassandra.version>4.0.3</cassandra.version>
+        <cassandra.version>4.0.4</cassandra.version>
         <ant.version>1.10.12</ant.version>
         <gson.version>2.9.0</gson.version>
         <jnr.version>3.1.15</jnr.version>
-        <protobuf.version>3.20.1</protobuf.version>
+        <protobuf.version>3.21.1</protobuf.version>
 
         <!-- Configuration of sonar code scanning-->
         <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>

settings.gradle

@@ -16,7 +16,7 @@ pluginManagement {
     }
     plugins {
         //id 'io.spring.dependency-management' version '1.0.10.RELEASE'
-        id 'org.springframework.boot' version '2.6.7'
+        id 'org.springframework.boot' version '2.7.0'
         id 'gradle-aggregate-javadocs-plugin' version '3.0.1'
         id 'org.siouan.frontend-jdk11' version '6.0.0'
         id 'com.github.johnrengelman.shadow' version '7.1.2'