Dependabot 20230201a

.github/workflows/merge-maven.yml

@@ -80,7 +80,7 @@ jobs:
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-distribution/egeria-omag-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
       - name: Build and push(egeria) to quay.io and docker.io
         if: ${{ github.repository == 'odpi/egeria' && github.ref == 'refs/heads/main'}}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4
         with:
           push: true
           tags: odpi/egeria:${{ env.VERSION }}, odpi/egeria:latest, quay.io/odpi/egeria:${{ env.VERSION }}, quay.io/odpi/egeria:latest
@@ -89,7 +89,7 @@ jobs:
       # Publish container images(egeria-configure) to quay.io and docker.io
       - name: Build and push(egeria-configure) to quay.io and docker.io
         if: ${{ github.repository == 'odpi/egeria' && github.ref == 'refs/heads/main'}}
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4
         with:
           push: true
           tags: odpi/egeria-configure:${{ env.VERSION }}, odpi/egeria-configure:latest, quay.io/odpi/egeria-configure:${{ env.VERSION }}, quay.io/odpi/egeria-configure:latest

.github/workflows/pr-gradle.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Gradle packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].4
         with:
           path: ~/.gradle/caches
           key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}

.github/workflows/pr-maven-latest.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
       - name: Cache Maven packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

.github/workflows/pr-maven-prod.yml

@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '11'
       - name: Cache Maven packages
-        uses: actions/[email protected].2
+        uses: actions/[email protected].4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-maven-java11-${{ hashFiles('**/pom.xml') }}

.github/workflows/release.yml

@@ -74,15 +74,15 @@ jobs:
           mkdir -p ./open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
           cp -r open-metadata-distribution/open-metadata-assemblies/target/egeria-${{ env.VERSION }}-distribution/egeria-omag-${{ env.VERSION }}/. open-metadata-resources/open-metadata-deployment/docker/egeria/target/assembly
       - name: Build and push(egeria) to quay.io and docker.io
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4
         with:
           push: true
           tags: odpi/egeria:${{ env.VERSION }}, odpi/egeria:latest, quay.io/odpi/egeria:${{ env.VERSION }}, quay.io/odpi/egeria:latest
           context: ./open-metadata-resources/open-metadata-deployment/docker/egeria
           platforms: linux/amd64,linux/arm64
       # Publish container images(egeria-configure) to quay.io and docker.io
       - name: Build and push(egeria-configure) to quay.io and docker.io
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4
         with:
           push: true
           tags: odpi/egeria-configure:${{ env.VERSION }}, odpi/egeria-configure:latest, quay.io/odpi/egeria-configure:${{ env.VERSION }}, quay.io/odpi/egeria-configure:latest

build.gradle

@@ -67,7 +67,7 @@ allprojects {
         commonsloggingVersion = '1.2'
         commonstextVersion = '1.10.0'
         commonscliVersion = '1.5.0'
-        elasticsearchVersion = '8.5.3'
+        elasticsearchVersion = '8.6.1'
         findbugsVersion = '3.0.2'
         glassfishVersion = '1.1.4'
         gremlinVersion = '3.5.2'
@@ -79,7 +79,7 @@ allprojects {
         httpclientVersion = '4.5.14'
         httpcoreVersion = '4.4.16'
         jacksonVersion = '2.14.1'
-        jacksonDatabindVersion = '2.14.1'
+        jacksonDatabindVersion = '2.14.2'
         jacksonaslVersion = '1.9.14-atlassian-6'
         jakartaannotationVersion = '2.1.1'
         jakartapersistenceVersion = '3.1.0'
@@ -91,52 +91,52 @@ allprojects {
         jodatimeVersion = '2.12.2'
         jsonldVersion = '0.13.4'
         junitVersion = '4.13.2'
-        junitjupiterVersion = '5.9.1'
+        junitjupiterVersion = '5.9.2'
         junitplatformVersion = '1.9.1'
         jwtVersion = '0.9.1'
         jwtApiVersion = '0.11.5'
         jwtImplVersion = '0.11.5'
         jwtJacksonVersion = '0.11.5'
-        kafkaVersion = '3.3.1'
+        kafkaVersion = '3.3.2'
         lang3Version = '3.12.0'
         logbackVersion = '1.2.11'
         lettuceVersion = '6.2.2.RELEASE'
         luceneVersion = '8.11.1'
-        openlineageVersion = '0.18.0'
+        openlineageVersion = '0.19.2'
         ossVersion = '4.15.0'
-        mockitoVersion = '4.11.0'
+        mockitoVersion = '5.1.1'
         plexusVersion = '3.5.0'
-        prometheusVersion = '1.10.2'
-        nettyVersion = '4.1.86.Final'
+        prometheusVersion = '1.10.3'
+        nettyVersion = '4.1.87.Final'
         quartzVersion = '2.3.2'
         reflectionsVersion = '0.10.2'
         sanitizerVersion = '1.2.3'
         servletVersion = '4.0.1'
         sleepycatVersion = '18.3.12'
         snakeyamlVersion = '1.33'
         slf4jVersion = '1.7.36'
-        snappyVersion = '1.1.8.4'
-        springbootVersion = '2.7.7'
-        springdocVersion = '1.6.12'
+        snappyVersion = '1.1.9.1'
+        springdocVersion = '1.6.13'
+        springbootVersion = '2.7.8'
         spotbugsVersion = '4.7.3'
-        springdataVersion = '2.7.6'
+        springdataVersion = '2.7.7'
         springldapVersion = '2.4.1'
         springsecurityVersion = '5.8.1'
-        swaggerVersion = '2.2.7'
+        swaggerVersion = '2.2.8'
         testngVersion = '7.7.1'
         thriftVersion = '0.17.0'
-        springwebVersion = '5.3.24'
+        springwebVersion = '5.3.25'
         tinkVersion = '1.7.0'
-        tomcatVersion = '9.0.70'
+        tomcatVersion = '9.0.71'
         validationVersion = '2.0.1.Final'
-        antVersion = '1.10.12'
-        gsonVersion = '2.10'
+        gsonVersion = '2.10.1'
+        antVersion = '1.10.13'
         jnrVersion = '3.1.16'
         cassandraVersion = '4.1.0'
         protobufVersion = '3.21.12'
         osgiVersion = '8.0.0'
         log4jVersion = '2.19.0'
-        jacksonjdk8Version = '2.14.1'
+        jacksonjdk8Version = '2.14.2'
         reactivestreamsVersion = '1.0.4'
     }
 
@@ -307,7 +307,7 @@ allprojects {
             runtimeOnly("org.antlr:antlr4:4.11.1")
             runtimeOnly("org.apache.ivy:ivy:2.5.1")
         }
-        implementation platform('net.openhft:chronicle-bom:2.24ea25')
+        implementation platform('net.openhft:chronicle-bom:2.24ea35')
     }
 
     /*
@@ -345,8 +345,8 @@ allprojects {
             includeEngines 'junit-jupiter'
         }
         dependencies {
-            testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.9.0'
-            testImplementation 'org.junit.jupiter:junit-jupiter-api:5.9.0'
+            testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.9.2'
+            testImplementation 'org.junit.jupiter:junit-jupiter-api:5.9.2'
         }
 
         testLogging {

pom.xml

@@ -147,27 +147,27 @@
         <classmate.version>1.5.1</classmate.version>
 
         <!-- Versions of dependent libraries -->
-        <junit.platform.version>1.9.1</junit.platform.version>
-        <junit.jupiter.version>5.9.1</junit.jupiter.version>
+        <junit.jupiter.version>5.9.2</junit.jupiter.version>
+        <junit.platform.version>1.9.2</junit.platform.version>
         <hamcrest.version>2.2</hamcrest.version>
         <junit.version>4.13.2</junit.version>
-        <surefire.plugin.version>3.0.0-M7</surefire.plugin.version>
+        <surefire.plugin.version>3.0.0-M8</surefire.plugin.version>
         <mockito.version>4.11.0</mockito.version>
         <slf4j.version>1.7.36</slf4j.version>
         <testng.version>7.7.1</testng.version>
-        <jackson.version>2.14.1</jackson.version>
-        <jackson.databind.version>2.14.1</jackson.databind.version>
+        <jackson.version>2.14.2</jackson.version>
+        <jackson.databind.version>2.14.2</jackson.databind.version>
         <logback.version>1.2.11</logback.version>
-        <kafka.version>3.3.1</kafka.version>
-        <netty.version>4.1.86.Final</netty.version>
-        <tomcat.version>9.0.70</tomcat.version>
+        <kafka.version>3.3.2</kafka.version>
+        <tomcat.version>9.0.71</tomcat.version>
+        <netty.version>4.1.87.Final</netty.version>
         <spring.ldap.core>2.4.1</spring.ldap.core>
         <janus.version>0.6.1</janus.version>
-        <spring-boot.version>2.7.7</spring-boot.version>
         <gremlin.version>3.5.2</gremlin.version>
+        <spring-boot.version>2.7.8</spring-boot.version>
         <springdoc.version>1.6.12</springdoc.version>
-        <spring-data.version>2.7.6</spring-data.version>
-        <spring.version>5.3.24</spring.version>
+        <spring-data.version>2.7.7</spring-data.version>
+        <spring.version>5.3.25</spring.version>
         <spring-security.version>5.8.1</spring-security.version>
         <springdoc-plugin.version>1.4</springdoc-plugin.version>
         <commons-io.version>2.11.0</commons-io.version>
@@ -205,11 +205,11 @@
         <jackson-asl.version>1.9.14-atlassian-6</jackson-asl.version>
         <antlr.version>3.5.3</antlr.version>
         <ST4.version>4.3.4</ST4.version>
-        <snappy.version>1.1.8.4</snappy.version>
+        <snappy.version>1.1.9.1</snappy.version>
         <snakeyaml.version>1.33</snakeyaml.version>
         <swagger.version>2.2.6</swagger.version>
         <classgraph.version>4.8.154</classgraph.version>
-        <micrometer-registry-prometheus.version>1.10.2</micrometer-registry-prometheus.version>
+        <micrometer-registry-prometheus.version>1.10.3</micrometer-registry-prometheus.version>
         <jcl-over-slf4j.version>1.7.36</jcl-over-slf4j.version>
         <groovy.version>3.0.14</groovy.version>
         <reflections.version>0.10.2</reflections.version>
@@ -225,51 +225,51 @@
         <lombok-plugin.version>1.18.20.0</lombok-plugin.version>
         <javax.servlet.version>4.0.1</javax.servlet.version>
         <thrift.version>0.17.0</thrift.version>
-        <elasticsearch.version>8.5.3</elasticsearch.version>
+        <elasticsearch.version>8.6.1</elasticsearch.version>
         <hibernate-validator.version>8.0.0.Final</hibernate-validator.version>
         <!-- Versions of plugins -->
         <enunciate-maven-plugin.version>2.10.1</enunciate-maven-plugin.version>
         <maven-javadoc-plugin.version>3.4.1</maven-javadoc-plugin.version>
-        <maven-reports-plugin.version>3.4.1</maven-reports-plugin.version>
+        <maven-reports-plugin.version>3.4.2</maven-reports-plugin.version>
         <maven-clean-plugin.version>3.2.0</maven-clean-plugin.version>
         <maven-site-plugin.version>3.12.1</maven-site-plugin.version>
         <maven-shade.version>3.4.1</maven-shade.version>
         <maven-install.version>3.1.0</maven-install.version>
-        <maven-pmd.version>3.19.0</maven-pmd.version>
+        <maven-pmd.version>3.20.0</maven-pmd.version>
         <maven-jar-plugin.version>3.3.0</maven-jar-plugin.version>
-        <owasp.version>7.4.3</owasp.version>
+        <owasp.version>8.0.2</owasp.version>
         <maven-compiler.version>3.10.1</maven-compiler.version>
         <maven-download.version>1.6.8</maven-download.version>
         <spotbugs-maven.version>4.7.3</spotbugs-maven.version>
         <maven-antrun.version>3.1.0</maven-antrun.version>
         <spotify-docker-plugin.version>1.4.13</spotify-docker-plugin.version>
-        <maven-enforcer-plugin.version>3.1.0</maven-enforcer-plugin.version>
+        <maven-enforcer-plugin.version>3.2.1</maven-enforcer-plugin.version>
         <jacoco-plugin.version>0.8.8</jacoco-plugin.version>
         <maven-assembly-plugin.version>3.4.2</maven-assembly-plugin.version>
         <frontend.plugin.version>1.12.1</frontend.plugin.version>
         <resources.plugin.version>3.3.0</resources.plugin.version>
         <exec.plugin.version>3.1.0</exec.plugin.version>
         <rat-plugin.version>0.15</rat-plugin.version>
-        <maven-dependency-plugin.version>3.4.0</maven-dependency-plugin.version>
+        <maven-dependency-plugin.version>3.5.0</maven-dependency-plugin.version>
         <maven-deploy-plugin.version>3.0.0</maven-deploy-plugin.version>
         <maven-source-plugin.version>3.2.1</maven-source-plugin.version>
         <maven-gpg-plugin.version>3.0.1</maven-gpg-plugin.version>
         <nexus-staging-maven-plugin>1.6.13</nexus-staging-maven-plugin>
         <license-plugin.version>2.0.0</license-plugin.version>
         <build-helper.version>3.3.0</build-helper.version>
-        <failsafe-plugin.version>3.0.0-M7</failsafe-plugin.version>
+        <failsafe-plugin.version>3.0.0-M8</failsafe-plugin.version>
         <git-commit-plugin.version>4.9.10</git-commit-plugin.version>
         <process-exec-plugin.version>0.9</process-exec-plugin.version>
         <groovy-plugin.version>2.1.1</groovy-plugin.version>
-        <openlineage.version>0.18.0</openlineage.version>
+        <openlineage.version>0.19.2</openlineage.version>
         <properties.plugin.version>1.1.0</properties.plugin.version>
         <cassandra.version>4.1.0</cassandra.version>
-        <ant.version>1.10.12</ant.version>
-        <gson.version>2.10</gson.version>
+        <gson.version>2.10.1</gson.version>
+        <ant.version>1.10.13</ant.version>
         <protobuf.version>3.21.12</protobuf.version>
         <jnr.version>3.1.16</jnr.version>
         <osgi.version>8.0.0</osgi.version>
-        <jacksonjdk8.version>2.14.1</jacksonjdk8.version>
+        <jacksonjdk8.version>2.14.2</jacksonjdk8.version>
         <log4j.version>2.19.0</log4j.version>
         <reactivestreams.version>1.0.4</reactivestreams.version>
 
@@ -3458,7 +3458,7 @@
             <dependency>
                 <groupId>net.openhft</groupId>
                 <artifactId>chronicle-bom</artifactId>
-                <version>2.24ea25</version>
+                <version>2.24ea35</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

settings.gradle

@@ -16,7 +16,7 @@ pluginManagement {
     }
     plugins {
         //id 'io.spring.dependency-management' version '1.0.10.RELEASE'
-        id 'org.springframework.boot' version '2.7.7'
+        id 'org.springframework.boot' version '2.7.8'
         id 'gradle-aggregate-javadocs-plugin' version '3.0.1'
         id 'org.siouan.frontend-jdk11' version '6.0.0'
         id 'com.github.johnrengelman.shadow' version '7.1.2'