Update latest security dependencies

Tested with most of the policy projects (compilation only).

Issue-ID: INT-1417
Change-Id: I0013dd1b2fb5996700bace81e68ef79ddfb6e17d
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>

diff --git a/dependencies/pom.xml b/dependencies/pom.xml
index 0acfb6c..afff5e5 100644 (file)
--- a/dependencies/pom.xml
+++ b/dependencies/pom.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-   Copyright (c) 2018-2019 AT&T Technologies and others.
+   Copyright (c) 2018-2020 AT&T Technologies and others.
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
@@ -26,15 +26,15 @@
   <name>oparent/dependencies</name>
   <packaging>pom</packaging>
   <properties>
-    <spring.version>5.1.2.RELEASE</spring.version>
-    <jetty.version>9.4.20.v20190813</jetty.version>
+    <spring.version>5.2.1.RELEASE</spring.version>
+    <jetty.version>9.4.24.v20191120</jetty.version>
   </properties>
   <dependencyManagement>
     <dependencies>
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>27.0-jre</version>
+        <version>28.1-jre</version>
       </dependency>
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
@@ -79,7 +79,7 @@
       <dependency>
         <groupId>org.apache.tomcat.embed</groupId>
         <artifactId>tomcat-embed-core</artifactId>
-        <version>9.0.24</version>
+        <version>9.0.29</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.jackson</groupId>
@@ -89,12 +89,17 @@
       <dependency>
         <groupId>org.webjars</groupId>
         <artifactId>bootstrap</artifactId>
-        <version>4.2.1</version>
+        <version>4.3.1</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.jackson.core</groupId>
         <artifactId>jackson-core</artifactId>
-        <version>2.9.8</version>
+        <version>2.10.1</version>
+      </dependency>
+      <dependency>
+        <groupId>com.fasterxml.jackson.core</groupId>
+        <artifactId>jackson-databind</artifactId>
+        <version>2.10.1</version>
       </dependency>
       <dependency>
         <groupId>org.webjars</groupId>
@@ -104,12 +109,12 @@
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-        <version>1.2.3</version>
+        <version>1.3.0-alpha5</version>
       </dependency>
       <dependency>
         <groupId>org.apache.httpcomponents</groupId>
         <artifactId>httpclient</artifactId>
-        <version>4.5.7</version>
+        <version>4.5.10</version>
       </dependency>
       <dependency>
         <groupId>xerces</groupId>