Update dependencies to fix security breaches.

[policy/parent.git] / integration / pom.xml

diff --git a/integration/pom.xml b/integration/pom.xml
index eaa09fc..30623ef 100644 (file)
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -29,7 +29,7 @@
     <parent>
         <groupId>org.onap.policy.parent</groupId>
         <artifactId>policy-parent</artifactId>
-        <version>4.1.0-SNAPSHOT</version>
+        <version>4.1.1-SNAPSHOT</version>
     </parent>
     <artifactId>integration</artifactId>
     <packaging>pom</packaging>
@@ -38,7 +38,7 @@
     <properties>
         <java.version>17</java.version>
         <!-- Note Well: For RELEASE/SNAPSHOT always set to the project version -->
-        <version.parent.resources>4.0.3-SNAPSHOT</version.parent.resources>
+        <version.parent.resources>4.1.1-SNAPSHOT</version.parent.resources>
         <jacoco.dataFile>${project.basedir}/../target/code-coverage/jacoco-ut.exec</jacoco.dataFile>
         <repo.npm>https://nexus3.onap.org/repository/npm.public/npm/-/</repo.npm>
         <docker.pull.registry>nexus3.onap.org:10001</docker.pull.registry>
@@ -55,23 +55,24 @@
         <version.jackson>2.15.2</version.jackson>
         <version.jacoco>0.8.10</version.jacoco>
         <version.jersey>3.1.3</version.jersey>
-        <version.jetty>11.0.16</version.jetty>
+        <version.jetty>11.0.18</version.jetty>
         <version.jupiter>5.10.0</version.jupiter>
         <version.log4j>2.20.0</version.log4j>
-        <version.logback>1.4.8</version.logback>
+        <version.logback>1.4.14</version.logback>
         <version.maven-remote-resources-plugin>3.1.0</version.maven-remote-resources-plugin>
         <version.medeia.validator>1.1.1</version.medeia.validator>
+        <version.micrometer>1.11.4</version.micrometer>
         <version.mockito>5.5.0</version.mockito>
         <version.mockserver>5.15.0</version.mockserver>
-        <version.netty>4.1.95.Final</version.netty>
+        <version.netty>4.1.100.Final</version.netty>
         <version.nsa-cambria>1.2.1-oss</version.nsa-cambria>
         <version.nsa-sa-client>1.3.0-oss</version.nsa-sa-client>
         <version.plexus>3.5.0</version.plexus>
         <version.sdc>2.0.1</version.sdc>
-        <version.slf4j>2.0.7</version.slf4j>
-        <version.spring>6.0.12</version.spring>
-        <version.springboot>3.1.4</version.springboot>
-        <version.spring-security>6.1.4</version.spring-security>
+        <version.slf4j>2.0.11</version.slf4j>
+        <version.spring>6.0.14</version.spring>
+        <version.springboot>3.1.7</version.springboot>
+        <version.spring-security>6.1.6</version.spring-security>
         <version.swagger.codegen.v3>3.0.46</version.swagger.codegen.v3>
         <version.swagger.core.v3>2.2.15</version.swagger.core.v3>
         <surefireArgLine>
@@ -153,14 +154,14 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>32.1.1-jre</version>
+                <version>32.1.3-jre</version>
             </dependency>
 
             <!-- Jakarta dependencies -->
             <dependency>
                 <groupId>jakarta.xml.bind</groupId>
                 <artifactId>jakarta.xml.bind-api</artifactId>
-                <version>4.0.0</version>
+                <version>4.0.1</version>
             </dependency>
             <dependency>
                 <groupId>jakarta.servlet</groupId>
@@ -567,6 +568,22 @@
                 <artifactId>netty-handler-proxy</artifactId>
                 <version>${version.netty}</version>
             </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-buffer</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-codec</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-handler</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+
             <!-- Apache Commons -->
             <dependency>
                 <groupId>commons-cli</groupId>
@@ -596,7 +613,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.13.0</version>
+                <version>3.14.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
@@ -745,7 +762,7 @@
             <dependency>
                 <groupId>org.apache.tomcat.embed</groupId>
                 <artifactId>tomcat-embed-core</artifactId>
-                <version>10.1.13</version>
+                <version>10.1.18</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework</groupId>
@@ -756,9 +773,19 @@
             <dependency>
                 <groupId>io.micrometer</groupId>
                 <artifactId>micrometer-registry-prometheus</artifactId>
-                <version>1.11.4</version>
+                <version>${version.micrometer}</version>
                 <scope>runtime</scope>
             </dependency>
+            <dependency>
+                <groupId>io.micrometer</groupId>
+                <artifactId>micrometer-observation</artifactId>
+                <version>${version.micrometer}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.micrometer</groupId>
+                <artifactId>micrometer-core</artifactId>
+                <version>${version.micrometer}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <scm>