From: adheli.tavares <adheli.tavares@est.tech>
Date: Thu, 30 Nov 2023 18:14:30 +0000 (+0000)
Subject: Update dependencies for vulnerabilities fixes
X-Git-Tag: 4.1.0~5
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=policy%2Fparent.git;a=commitdiff_plain;h=ad432cdd89084da3e971d0eee059444abc39d92b

Update dependencies for vulnerabilities fixes

Issue-ID: POLICY-4893
Change-Id: Iacbc261debc2550b50777e7a8686ef1adad23089
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
---

diff --git a/integration/pom.xml b/integration/pom.xml
index eaa09fc4..8d74627f 100644
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -55,15 +55,16 @@
         <version.jackson>2.15.2</version.jackson>
         <version.jacoco>0.8.10</version.jacoco>
         <version.jersey>3.1.3</version.jersey>
-        <version.jetty>11.0.16</version.jetty>
+        <version.jetty>11.0.18</version.jetty>
         <version.jupiter>5.10.0</version.jupiter>
         <version.log4j>2.20.0</version.log4j>
         <version.logback>1.4.8</version.logback>
         <version.maven-remote-resources-plugin>3.1.0</version.maven-remote-resources-plugin>
         <version.medeia.validator>1.1.1</version.medeia.validator>
+        <version.micrometer>1.11.4</version.micrometer>
         <version.mockito>5.5.0</version.mockito>
         <version.mockserver>5.15.0</version.mockserver>
-        <version.netty>4.1.95.Final</version.netty>
+        <version.netty>4.1.100.Final</version.netty>
         <version.nsa-cambria>1.2.1-oss</version.nsa-cambria>
         <version.nsa-sa-client>1.3.0-oss</version.nsa-sa-client>
         <version.plexus>3.5.0</version.plexus>
@@ -153,7 +154,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>32.1.1-jre</version>
+                <version>32.1.3-jre</version>
             </dependency>
 
             <!-- Jakarta dependencies -->
@@ -567,6 +568,22 @@
                 <artifactId>netty-handler-proxy</artifactId>
                 <version>${version.netty}</version>
             </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-buffer</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-codec</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-handler</artifactId>
+                <version>${version.netty}</version>
+            </dependency>
+
             <!-- Apache Commons -->
             <dependency>
                 <groupId>commons-cli</groupId>
@@ -596,7 +613,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.13.0</version>
+                <version>3.14.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
@@ -745,7 +762,7 @@
             <dependency>
                 <groupId>org.apache.tomcat.embed</groupId>
                 <artifactId>tomcat-embed-core</artifactId>
-                <version>10.1.13</version>
+                <version>10.1.16</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework</groupId>
@@ -756,9 +773,19 @@
             <dependency>
                 <groupId>io.micrometer</groupId>
                 <artifactId>micrometer-registry-prometheus</artifactId>
-                <version>1.11.4</version>
+                <version>${version.micrometer}</version>
                 <scope>runtime</scope>
             </dependency>
+            <dependency>
+                <groupId>io.micrometer</groupId>
+                <artifactId>micrometer-observation</artifactId>
+                <version>${version.micrometer}</version>
+            </dependency>
+            <dependency>
+                <groupId>io.micrometer</groupId>
+                <artifactId>micrometer-core</artifactId>
+                <version>${version.micrometer}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <scm>