From ede5d3ed76c9fa4c974876379ca5538a29323cd0 Mon Sep 17 00:00:00 2001 From: Mitchell Williams Date: Tue, 10 Feb 2026 14:37:42 -0700 Subject: [PATCH] fix: resolve CVEs --- .vogue.yml | 4 +- build.gradle | 32 +++++++++- mdx-gateway-generator/gradle.lockfile | 24 ++++---- mdx-gateways/gradle.lockfile | 27 ++++----- mdx-models/gradle.lockfile | 31 ++++------ mdx-web/gradle.lockfile | 85 +++++++++++++-------------- realtime/gradle.lockfile | 33 +++++------ 7 files changed, 120 insertions(+), 116 deletions(-) diff --git a/.vogue.yml b/.vogue.yml index 631af3ba..f3e8bc4c 100644 --- a/.vogue.yml +++ b/.vogue.yml @@ -3,7 +3,7 @@ defaultRules: {} packageRules: - package: "com.github.mxenabled.coppuccino:com.github.mxenabled.coppuccino.gradle.plugin" rules: {} - suppressUntil: "2026-02-09" + suppressUntil: "2026-02-15" - package: "com.github.mxenabled.vogue:com.github.mxenabled.vogue.gradle.plugin" rules: {} - suppressUntil: "2026-02-09" + suppressUntil: "2026-02-15" diff --git a/build.gradle b/build.gradle index ab15c9ce..b5154a7d 100644 --- a/build.gradle +++ b/build.gradle @@ -34,13 +34,39 @@ allprojects { mavenLocal() } - configurations.all { + configurations.configureEach { + resolutionStrategy.eachDependency { details -> + //Uncontrolled Recursion [High Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-10734078] in org.apache.commons:commons-lang3@3.17.0 + // introduced by net.sourceforge.pmd:pmd-java@7.16.0 > org.apache.commons:commons-lang3@3.17.0 and 7 other path(s) + // This issue was fixed in versions: 3.18.0 + if (details.requested.group == "org.apache.commons" && details.requested.name == "commons-lang3") { + details.useVersion "3.18.0" + } + //Improper Validation of Certificate with Host Mismatch [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-14532782] in org.apache.logging.log4j:log4j-core@2.24.3 + // introduced by com.github.spotbugs:spotbugs@4.9.8 > org.apache.logging.log4j:log4j-core@2.24.3 + // This issue was fixed in versions: 2.25.3 + else if (details.requested.group == "org.apache.logging.log4j" && details.requested.name == "log4j-core") { + details.useVersion "2.25.3" + } + //XML External Entity (XXE) Injection [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGASSERTJ-15102413] in org.assertj:assertj-core@3.27.6 + // introduced by com.mx.path-core:testing@5.1.0 > org.assertj:assertj-core@3.27.6 and 1 other path(s) + // This issue was fixed in versions: 3.27.7 + else if (details.requested.group == "org.assertj" && details.requested.name == "assertj-core") { + details.useVersion "3.27.7" + } + //Information Exposure [Low Severity][https://security.snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518] in commons-codec:commons-codec@1.11 + // introduced by io.honeybadger:honeybadger-java@2.1.2 > org.apache.httpcomponents:fluent-hc@4.5.14 > org.apache.httpcomponents:httpclient@4.5.14 > commons-codec:commons-codec@1.11 + // This issue was fixed in versions: 1.14 + else if (details.requested.group == "commons-codec" && details.requested.name == "commons-codec") { + details.useVersion "1.14" + } + } resolutionStrategy.cacheChangingModulesFor 0, 'seconds' } ext { - pathSDKVersion = "[5.0,6.0)" - springVersion = "3.5.8" + pathSDKVersion = "[6.0,7.0)" + springVersion = "[3.5,4.0)" } } diff --git a/mdx-gateway-generator/gradle.lockfile b/mdx-gateway-generator/gradle.lockfile index 604de9b8..67ee64f4 100644 --- a/mdx-gateway-generator/gradle.lockfile +++ b/mdx-gateway-generator/gradle.lockfile @@ -25,22 +25,21 @@ com.google.guava:guava:32.0.1-jre=runtimeClasspath,testRuntimeClasspath com.google.guava:guava:32.1.3-jre=compileClasspath,testCompileClasspath com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.google.j2objc:j2objc-annotations:2.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:common:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:context:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway-generator:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:messaging:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:platform:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:utilities:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:common:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:context:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway-generator:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:messaging:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:platform:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:utilities:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.squareup:javapoet:1.13.0=runtimeClasspath,testRuntimeClasspath com.sun.istack:istack-commons-runtime:4.1.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-core:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-impl:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-beanutils:commons-beanutils:1.11.0=runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.11=runtimeClasspath,testRuntimeClasspath +commons-codec:commons-codec:1.14=runtimeClasspath,testRuntimeClasspath commons-collections:commons-collections:3.2.2=runtimeClasspath,testRuntimeClasspath commons-io:commons-io:2.20.0=spotbugs -commons-lang:commons-lang:2.6=runtimeClasspath,testRuntimeClasspath commons-logging:commons-logging:1.3.5=runtimeClasspath,testRuntimeClasspath io.github.cdimascio:dotenv-java:2.3.2=runtimeClasspath,testRuntimeClasspath io.leangen.geantyref:geantyref:1.3.16=testRuntimeClasspath @@ -55,14 +54,13 @@ net.bytebuddy:byte-buddy-agent:1.14.1=testCompileClasspath,testRuntimeClasspath net.bytebuddy:byte-buddy:1.14.1=testCompileClasspath,testRuntimeClasspath net.sf.saxon:Saxon-HE:12.9=spotbugs org.apache.bcel:bcel:6.11.0=spotbugs -org.apache.commons:commons-lang3:3.19.0=spotbugs -org.apache.commons:commons-lang3:3.20.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.apache.commons:commons-lang3:3.18.0=compileClasspath,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.14.0=spotbugs org.apache.commons:commons-text:1.15.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.httpcomponents:httpclient:4.5.13=runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.13=runtimeClasspath,testRuntimeClasspath -org.apache.logging.log4j:log4j-api:2.25.2=spotbugs -org.apache.logging.log4j:log4j-core:2.25.2=spotbugs +org.apache.logging.log4j:log4j-api:2.25.3=spotbugs +org.apache.logging.log4j:log4j-core:2.25.3=spotbugs org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath org.checkerframework:checker-qual:3.33.0=runtimeClasspath,testRuntimeClasspath org.checkerframework:checker-qual:3.37.0=compileClasspath,testCompileClasspath diff --git a/mdx-gateways/gradle.lockfile b/mdx-gateways/gradle.lockfile index c8ebab28..580f77d8 100644 --- a/mdx-gateways/gradle.lockfile +++ b/mdx-gateways/gradle.lockfile @@ -32,24 +32,22 @@ com.google.guava:guava:33.4.8-jre=checkstyle com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=annotationProcessor,checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.google.j2objc:j2objc-annotations:2.8=annotationProcessor,compileClasspath,testCompileClasspath com.google.j2objc:j2objc-annotations:3.0.0=checkstyle -com.mx.path-core:common:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:context:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway-generator:5.1.0=annotationProcessor -com.mx.path-core:gateway:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:messaging:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:platform:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:utilities:5.1.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:common:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:context:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway-generator:6.0.0=annotationProcessor +com.mx.path-core:gateway:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:messaging:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:platform:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:utilities:6.0.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.puppycrawl.tools:checkstyle:10.25.0=checkstyle com.squareup:javapoet:1.13.0=annotationProcessor com.sun.istack:istack-commons-runtime:4.1.2=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-core:4.0.6=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-impl:4.0.6=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-beanutils:commons-beanutils:1.11.0=annotationProcessor,checkstyle,runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.11=annotationProcessor,runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.15=checkstyle,pmd +commons-codec:commons-codec:1.14=annotationProcessor,checkstyle,pmd,runtimeClasspath,testRuntimeClasspath commons-collections:commons-collections:3.2.2=annotationProcessor,checkstyle,runtimeClasspath,testRuntimeClasspath commons-io:commons-io:2.20.0=spotbugs -commons-lang:commons-lang:2.6=annotationProcessor,runtimeClasspath,testRuntimeClasspath commons-logging:commons-logging:1.3.5=annotationProcessor,runtimeClasspath,testRuntimeClasspath info.picocli:picocli:4.7.7=checkstyle io.github.cdimascio:dotenv-java:2.3.2=annotationProcessor,runtimeClasspath,testRuntimeClasspath @@ -72,10 +70,7 @@ net.sourceforge.pmd:pmd-java:7.16.0=pmd org.antlr:antlr4-runtime:4.13.2=checkstyle org.antlr:antlr4-runtime:4.9.3=pmd org.apache.bcel:bcel:6.11.0=spotbugs -org.apache.commons:commons-lang3:3.18.0=pmd -org.apache.commons:commons-lang3:3.19.0=spotbugs -org.apache.commons:commons-lang3:3.20.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.commons:commons-lang3:3.8.1=checkstyle +org.apache.commons:commons-lang3:3.18.0=annotationProcessor,checkstyle,compileClasspath,pmd,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.14.0=spotbugs org.apache.commons:commons-text:1.15.0=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.3=checkstyle @@ -85,8 +80,8 @@ org.apache.httpcomponents.core5:httpcore5:5.1.3=checkstyle,pmd org.apache.httpcomponents:httpclient:4.5.13=annotationProcessor,checkstyle,runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.13=annotationProcessor,runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.14=checkstyle -org.apache.logging.log4j:log4j-api:2.25.2=spotbugs -org.apache.logging.log4j:log4j-core:2.25.2=spotbugs +org.apache.logging.log4j:log4j-api:2.25.3=spotbugs +org.apache.logging.log4j:log4j-core:2.25.3=spotbugs org.apache.maven.doxia:doxia-core:1.12.0=checkstyle org.apache.maven.doxia:doxia-logging-api:1.12.0=checkstyle org.apache.maven.doxia:doxia-module-xdoc:1.12.0=checkstyle diff --git a/mdx-models/gradle.lockfile b/mdx-models/gradle.lockfile index ba6f3970..2bbe9f27 100644 --- a/mdx-models/gradle.lockfile +++ b/mdx-models/gradle.lockfile @@ -28,23 +28,21 @@ com.google.guava:guava:33.4.8-jre=checkstyle com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.google.j2objc:j2objc-annotations:2.8=compileClasspath,testCompileClasspath com.google.j2objc:j2objc-annotations:3.0.0=checkstyle -com.mx.path-core:common:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:context:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:messaging:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:platform:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:testing:5.1.0=testCompileClasspath,testRuntimeClasspath -com.mx.path-core:utilities:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:common:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:context:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:messaging:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:platform:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:testing:6.0.0=testCompileClasspath,testRuntimeClasspath +com.mx.path-core:utilities:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.puppycrawl.tools:checkstyle:10.25.0=checkstyle com.sun.istack:istack-commons-runtime:4.1.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-core:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-impl:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-beanutils:commons-beanutils:1.11.0=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.11=runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.15=checkstyle,pmd +commons-codec:commons-codec:1.14=checkstyle,pmd,runtimeClasspath,testRuntimeClasspath commons-collections:commons-collections:3.2.2=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-io:commons-io:2.20.0=spotbugs -commons-lang:commons-lang:2.6=runtimeClasspath,testRuntimeClasspath commons-logging:commons-logging:1.3.5=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath info.picocli:picocli:4.7.7=checkstyle io.github.cdimascio:dotenv-java:2.3.2=runtimeClasspath,testRuntimeClasspath @@ -58,7 +56,7 @@ jakarta.xml.soap:jakarta.xml.soap-api:3.0.2=compileClasspath,runtimeClasspath,te jaxen:jaxen:2.0.0=spotbugs net.bytebuddy:byte-buddy-agent:1.14.1=testCompileClasspath,testRuntimeClasspath net.bytebuddy:byte-buddy:1.14.1=testCompileClasspath -net.bytebuddy:byte-buddy:1.17.7=testRuntimeClasspath +net.bytebuddy:byte-buddy:1.18.3=testRuntimeClasspath net.sf.saxon:Saxon-HE:12.5=checkstyle,pmd net.sf.saxon:Saxon-HE:12.9=spotbugs net.sourceforge.pmd:pmd-ant:7.16.0=pmd @@ -67,10 +65,7 @@ net.sourceforge.pmd:pmd-java:7.16.0=pmd org.antlr:antlr4-runtime:4.13.2=checkstyle org.antlr:antlr4-runtime:4.9.3=pmd org.apache.bcel:bcel:6.11.0=spotbugs -org.apache.commons:commons-lang3:3.18.0=pmd -org.apache.commons:commons-lang3:3.19.0=spotbugs -org.apache.commons:commons-lang3:3.20.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.commons:commons-lang3:3.8.1=checkstyle +org.apache.commons:commons-lang3:3.18.0=checkstyle,compileClasspath,pmd,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.14.0=spotbugs org.apache.commons:commons-text:1.15.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.3=checkstyle @@ -80,15 +75,15 @@ org.apache.httpcomponents.core5:httpcore5:5.1.3=checkstyle,pmd org.apache.httpcomponents:httpclient:4.5.13=checkstyle,runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.13=runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.14=checkstyle -org.apache.logging.log4j:log4j-api:2.25.2=spotbugs -org.apache.logging.log4j:log4j-core:2.25.2=spotbugs +org.apache.logging.log4j:log4j-api:2.25.3=spotbugs +org.apache.logging.log4j:log4j-core:2.25.3=spotbugs org.apache.maven.doxia:doxia-core:1.12.0=checkstyle org.apache.maven.doxia:doxia-logging-api:1.12.0=checkstyle org.apache.maven.doxia:doxia-module-xdoc:1.12.0=checkstyle org.apache.maven.doxia:doxia-sink-api:1.12.0=checkstyle org.apache.xbean:xbean-reflect:3.7=checkstyle org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath -org.assertj:assertj-core:3.27.6=testRuntimeClasspath +org.assertj:assertj-core:3.27.7=testRuntimeClasspath org.checkerframework:checker-qual:3.37.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.checkerframework:checker-qual:3.49.3=checkstyle org.checkerframework:checker-qual:3.49.5=pmd diff --git a/mdx-web/gradle.lockfile b/mdx-web/gradle.lockfile index af6b3999..f8e8a90f 100644 --- a/mdx-web/gradle.lockfile +++ b/mdx-web/gradle.lockfile @@ -1,8 +1,8 @@ # This is a Gradle generated file for dependency locking. # Manual edits can break the build and are not advised. # This file is expected to be part of source control. -ch.qos.logback:logback-classic:1.5.21=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -ch.qos.logback:logback-core:1.5.21=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +ch.qos.logback:logback-classic:1.5.25=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +ch.qos.logback:logback-core:1.5.25=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.auth0:java-jwt:4.5.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.datadoghq:dd-trace-api:1.38.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.fasterxml.jackson.core:jackson-annotations:2.19.4=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath @@ -33,31 +33,29 @@ com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=chec com.google.j2objc:j2objc-annotations:2.8=compileClasspath,testCompileClasspath com.google.j2objc:j2objc-annotations:3.0.0=checkstyle com.jayway.jsonpath:json-path:2.9.0=testCompileClasspath,testRuntimeClasspath -com.mx.path-core:common:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:context:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:messaging:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:platform:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:testing:5.1.0=testCompileClasspath,testRuntimeClasspath -com.mx.path-core:utilities:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:common:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:context:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:messaging:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:platform:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:testing:6.0.0=testCompileClasspath,testRuntimeClasspath +com.mx.path-core:utilities:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.puppycrawl.tools:checkstyle:10.25.0=checkstyle com.sun.istack:istack-commons-runtime:4.1.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-core:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-impl:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.vaadin.external.google:android-json:0.0.20131108.vaadin1=testCompileClasspath,testRuntimeClasspath commons-beanutils:commons-beanutils:1.11.0=checkstyle,runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.15=checkstyle,pmd -commons-codec:commons-codec:1.18.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +commons-codec:commons-codec:1.14=checkstyle,compileClasspath,pmd,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-collections:commons-collections:3.2.2=checkstyle,runtimeClasspath,testRuntimeClasspath commons-io:commons-io:2.14.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-io:commons-io:2.20.0=spotbugs -commons-lang:commons-lang:2.6=runtimeClasspath,testRuntimeClasspath commons-logging:commons-logging:1.3.5=runtimeClasspath,testRuntimeClasspath info.picocli:picocli:4.7.7=checkstyle io.github.cdimascio:dotenv-java:2.3.2=runtimeClasspath,testRuntimeClasspath io.leangen.geantyref:geantyref:1.3.16=testRuntimeClasspath -io.micrometer:micrometer-commons:1.15.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -io.micrometer:micrometer-observation:1.15.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +io.micrometer:micrometer-commons:1.15.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +io.micrometer:micrometer-observation:1.15.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath io.opentracing:opentracing-api:0.33.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath io.opentracing:opentracing-mock:0.33.0=testCompileClasspath,testRuntimeClasspath io.opentracing:opentracing-noop:0.33.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath @@ -68,7 +66,7 @@ jakarta.xml.bind:jakarta.xml.bind-api:4.0.4=compileClasspath,runtimeClasspath,te jakarta.xml.soap:jakarta.xml.soap-api:3.0.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath jaxen:jaxen:2.0.0=spotbugs net.bytebuddy:byte-buddy-agent:1.17.8=testCompileClasspath,testRuntimeClasspath -net.bytebuddy:byte-buddy:1.17.8=testCompileClasspath,testRuntimeClasspath +net.bytebuddy:byte-buddy:1.18.3=testCompileClasspath,testRuntimeClasspath net.minidev:accessors-smart:2.5.2=testCompileClasspath,testRuntimeClasspath net.minidev:json-smart:2.5.2=testCompileClasspath,testRuntimeClasspath net.sf.saxon:Saxon-HE:12.5=checkstyle,pmd @@ -79,10 +77,7 @@ net.sourceforge.pmd:pmd-java:7.16.0=pmd org.antlr:antlr4-runtime:4.13.2=checkstyle org.antlr:antlr4-runtime:4.9.3=pmd org.apache.bcel:bcel:6.11.0=spotbugs -org.apache.commons:commons-lang3:3.18.0=pmd -org.apache.commons:commons-lang3:3.19.0=spotbugs -org.apache.commons:commons-lang3:3.20.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.commons:commons-lang3:3.8.1=checkstyle +org.apache.commons:commons-lang3:3.18.0=checkstyle,compileClasspath,pmd,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.14.0=spotbugs org.apache.commons:commons-text:1.15.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.3=checkstyle @@ -93,19 +88,19 @@ org.apache.httpcomponents:httpclient:4.5.13=checkstyle,runtimeClasspath,testRunt org.apache.httpcomponents:httpcore:4.4.14=checkstyle org.apache.httpcomponents:httpcore:4.4.16=runtimeClasspath,testRuntimeClasspath org.apache.logging.log4j:log4j-api:2.24.3=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.logging.log4j:log4j-api:2.25.2=spotbugs -org.apache.logging.log4j:log4j-core:2.25.2=spotbugs +org.apache.logging.log4j:log4j-api:2.25.3=spotbugs +org.apache.logging.log4j:log4j-core:2.25.3=spotbugs org.apache.logging.log4j:log4j-to-slf4j:2.24.3=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.maven.doxia:doxia-core:1.12.0=checkstyle org.apache.maven.doxia:doxia-logging-api:1.12.0=checkstyle org.apache.maven.doxia:doxia-module-xdoc:1.12.0=checkstyle org.apache.maven.doxia:doxia-sink-api:1.12.0=checkstyle -org.apache.tomcat.embed:tomcat-embed-core:10.1.49=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.tomcat.embed:tomcat-embed-el:10.1.49=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.tomcat.embed:tomcat-embed-websocket:10.1.49=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.apache.tomcat.embed:tomcat-embed-core:10.1.50=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.apache.tomcat.embed:tomcat-embed-el:10.1.50=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.apache.tomcat.embed:tomcat-embed-websocket:10.1.50=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.xbean:xbean-reflect:3.7=checkstyle org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath -org.assertj:assertj-core:3.27.6=testCompileClasspath,testRuntimeClasspath +org.assertj:assertj-core:3.27.7=testCompileClasspath,testRuntimeClasspath org.awaitility:awaitility:4.2.2=testCompileClasspath,testRuntimeClasspath org.checkerframework:checker-qual:3.37.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.checkerframework:checker-qual:3.49.3=checkstyle @@ -168,26 +163,26 @@ org.slf4j:slf4j-api:2.0.17=compileClasspath,runtimeClasspath,spotbugs,spotbugsSl org.slf4j:slf4j-simple:2.0.17=spotbugsSlf4j org.spockframework:spock-bom:2.4-M6-groovy-3.0=testCompileClasspath,testRuntimeClasspath org.spockframework:spock-core:2.4-M6-groovy-3.0=testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-autoconfigure:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-json:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-logging:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-parent:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-test:3.5.8=testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-tomcat:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter-web:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-starter:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-test-autoconfigure:3.5.8=testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot-test:3.5.8=testCompileClasspath,testRuntimeClasspath -org.springframework.boot:spring-boot:3.5.8=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-aop:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-beans:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-context:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-core:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-expression:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-jcl:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-test:6.2.14=testCompileClasspath,testRuntimeClasspath -org.springframework:spring-web:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.springframework:spring-webmvc:6.2.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-autoconfigure:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-json:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-logging:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-parent:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-test:3.5.10=testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-tomcat:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter-web:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-starter:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-test-autoconfigure:3.5.10=testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot-test:3.5.10=testCompileClasspath,testRuntimeClasspath +org.springframework.boot:spring-boot:3.5.10=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-aop:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-beans:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-context:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-core:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-expression:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-jcl:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-test:6.2.15=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-web:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.springframework:spring-webmvc:6.2.15=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.xmlresolver:xmlresolver:5.2.2=checkstyle,pmd org.xmlresolver:xmlresolver:5.3.3=spotbugs org.xmlunit:xmlunit-core:2.10.4=testCompileClasspath,testRuntimeClasspath diff --git a/realtime/gradle.lockfile b/realtime/gradle.lockfile index 959474b9..f5a74203 100644 --- a/realtime/gradle.lockfile +++ b/realtime/gradle.lockfile @@ -28,24 +28,22 @@ com.google.guava:guava:33.4.8-jre=checkstyle com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.google.j2objc:j2objc-annotations:2.8=compileClasspath,testCompileClasspath com.google.j2objc:j2objc-annotations:3.0.0=checkstyle -com.mx.path-core:common:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:context:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:gateway:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:http:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:messaging:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:platform:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -com.mx.path-core:testing:5.1.0=testCompileClasspath,testRuntimeClasspath -com.mx.path-core:utilities:5.1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:common:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:context:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:gateway:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:http:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:messaging:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:platform:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.mx.path-core:testing:6.0.0=testCompileClasspath,testRuntimeClasspath +com.mx.path-core:utilities:6.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.puppycrawl.tools:checkstyle:10.25.0=checkstyle com.sun.istack:istack-commons-runtime:4.1.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-core:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath com.sun.xml.bind:jaxb-impl:4.0.6=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath commons-beanutils:commons-beanutils:1.11.0=checkstyle,runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.11=runtimeClasspath,testRuntimeClasspath -commons-codec:commons-codec:1.15=checkstyle,pmd +commons-codec:commons-codec:1.14=checkstyle,pmd,runtimeClasspath,testRuntimeClasspath commons-collections:commons-collections:3.2.2=checkstyle,runtimeClasspath,testRuntimeClasspath commons-io:commons-io:2.20.0=spotbugs -commons-lang:commons-lang:2.6=runtimeClasspath,testRuntimeClasspath commons-logging:commons-logging:1.3.5=runtimeClasspath,testRuntimeClasspath info.picocli:picocli:4.7.7=checkstyle io.github.cdimascio:dotenv-java:2.3.2=runtimeClasspath,testRuntimeClasspath @@ -59,7 +57,7 @@ jakarta.xml.soap:jakarta.xml.soap-api:3.0.2=compileClasspath,runtimeClasspath,te jaxen:jaxen:2.0.0=spotbugs net.bytebuddy:byte-buddy-agent:1.14.1=testCompileClasspath,testRuntimeClasspath net.bytebuddy:byte-buddy:1.14.1=testCompileClasspath -net.bytebuddy:byte-buddy:1.17.7=testRuntimeClasspath +net.bytebuddy:byte-buddy:1.18.3=testRuntimeClasspath net.sf.saxon:Saxon-HE:12.5=checkstyle,pmd net.sf.saxon:Saxon-HE:12.9=spotbugs net.sourceforge.pmd:pmd-ant:7.16.0=pmd @@ -68,10 +66,7 @@ net.sourceforge.pmd:pmd-java:7.16.0=pmd org.antlr:antlr4-runtime:4.13.2=checkstyle org.antlr:antlr4-runtime:4.9.3=pmd org.apache.bcel:bcel:6.11.0=spotbugs -org.apache.commons:commons-lang3:3.18.0=pmd -org.apache.commons:commons-lang3:3.19.0=spotbugs -org.apache.commons:commons-lang3:3.20.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath -org.apache.commons:commons-lang3:3.8.1=checkstyle +org.apache.commons:commons-lang3:3.18.0=checkstyle,compileClasspath,pmd,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.14.0=spotbugs org.apache.commons:commons-text:1.15.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.apache.commons:commons-text:1.3=checkstyle @@ -81,15 +76,15 @@ org.apache.httpcomponents.core5:httpcore5:5.1.3=checkstyle,pmd org.apache.httpcomponents:httpclient:4.5.13=checkstyle,runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.13=runtimeClasspath,testRuntimeClasspath org.apache.httpcomponents:httpcore:4.4.14=checkstyle -org.apache.logging.log4j:log4j-api:2.25.2=spotbugs -org.apache.logging.log4j:log4j-core:2.25.2=spotbugs +org.apache.logging.log4j:log4j-api:2.25.3=spotbugs +org.apache.logging.log4j:log4j-core:2.25.3=spotbugs org.apache.maven.doxia:doxia-core:1.12.0=checkstyle org.apache.maven.doxia:doxia-logging-api:1.12.0=checkstyle org.apache.maven.doxia:doxia-module-xdoc:1.12.0=checkstyle org.apache.maven.doxia:doxia-sink-api:1.12.0=checkstyle org.apache.xbean:xbean-reflect:3.7=checkstyle org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath -org.assertj:assertj-core:3.27.6=testRuntimeClasspath +org.assertj:assertj-core:3.27.7=testRuntimeClasspath org.checkerframework:checker-qual:3.37.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath org.checkerframework:checker-qual:3.49.3=checkstyle org.checkerframework:checker-qual:3.49.5=pmd