feat!: bump vulnerable dependencies

Author: meotchwilliams

build.gradle

@@ -1,7 +1,7 @@
 plugins {
   id "idea"
-  id "com.github.mxenabled.coppuccino" version "4.+" apply false
-  id "com.github.mxenabled.vogue" version "1.+"
+  id "com.github.mxenabled.coppuccino" version "4.4.2" apply false
+  id "com.github.mxenabled.vogue" version "1.1.0"
   id "io.freefair.lombok" version "8.+" apply false
   id "io.github.gradle-nexus.publish-plugin" version "1.1.+"
   id "com.netflix.nebula.maven-resolved-dependencies" version "21.2.0" apply false
@@ -19,26 +19,20 @@ allprojects {
   group "com.mx.path-facilities"
   description "MX Path Facilities"
   version rootProject.version
-  sourceCompatibility = 1.8
-  targetCompatibility = 1.8
+  sourceCompatibility = JavaVersion.VERSION_17
+  targetCompatibility = JavaVersion.VERSION_17
 
   repositories {
     mavenCentral()
     mavenLocal()
-    // maven {
-    //   url "https://s01.oss.sonatype.org/content/repositories/snapshots/"
-    //   mavenContent {
-    //     snapshotsOnly()
-    //   }
-    // }
   }
 
   configurations.all {
     resolutionStrategy.cacheChangingModulesFor 0, 'seconds'
   }
 
   ext {
-    pathSDKVersion = "[4.0,5.0)"
+    pathSDKVersion = "4.7.0"
   }
 }
 
@@ -61,9 +55,6 @@ subprojects {
       implementation platform("com.mx.path-core:platform:${project.ext.pathSDKVersion}")
       implementation "com.mx.path-core:common"
       testImplementation "com.mx.path-core:testing"
-      testImplementation "org.junit.jupiter:junit-jupiter-api:[5.9.0,5.10.0)"
-      testRuntimeOnly "org.junit.platform:junit-platform-launcher"
-
     }
 
     test { useJUnitPlatform() }

encryption-service-jasypt/build.gradle

@@ -3,7 +3,7 @@ coppuccino {
     minimumCoverage = 1.00
   }
   dependencies {
-    excludePreReleaseVersions = false
+    excludePreReleaseVersions = true
   }
 }
 
@@ -13,7 +13,7 @@ dependencies {
   compileOnly "org.slf4j:slf4j-api"
 
   //testing dependencies
-  testImplementation "org.mockito:mockito-inline:4.+"
+  testImplementation "org.mockito:mockito-inline:[4.0,5.0["
   testImplementation "org.slf4j:slf4j-simple:1.7.30"
-  testImplementation "org.spockframework:spock-core:2.+"
+  testImplementation "org.spockframework:spock-core:2.4-M6-groovy-3.0"
 }

encryption-service-jasypt/gradle.lockfile

@@ -1,7 +1,6 @@
 # This is a Gradle generated file for dependency locking.
 # Manual edits can break the build and are not advised.
 # This file is expected to be part of source control.
-antlr:antlr:2.7.7=checkstyle
 com.auth0:java-jwt:4.5.0=testRuntimeClasspath
 com.beust:jcommander:1.48=pmd
 com.datadoghq:dd-trace-api:1.38.0=testRuntimeClasspath
@@ -10,38 +9,41 @@ com.fasterxml.jackson.core:jackson-core:2.15.4=testRuntimeClasspath
 com.fasterxml.jackson.core:jackson-databind:2.15.4=testRuntimeClasspath
 com.fasterxml.jackson:jackson-bom:2.15.4=testRuntimeClasspath
 com.github.rholder:guava-retrying:2.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.github.spotbugs:spotbugs-annotations:4.7.2=runtimeClasspath,testRuntimeClasspath
-com.github.spotbugs:spotbugs-annotations:4.8.2=compileClasspath,spotbugs,testCompileClasspath
-com.github.spotbugs:spotbugs:4.8.2=spotbugs
+com.github.spotbugs:spotbugs-annotations:4.9.8=compileClasspath,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath
+com.github.spotbugs:spotbugs:4.9.8=spotbugs
 com.github.stephenc.jcip:jcip-annotations:1.0-1=spotbugs
 com.google.code.findbugs:jsr305:3.0.2=checkstyle,compileClasspath,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath
-com.google.code.gson:gson:2.10.1=spotbugs
+com.google.code.gson:gson:2.13.2=spotbugs
 com.google.code.gson:gson:2.8.9=pmd
 com.google.code.gson:gson:2.9.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.google.errorprone:error_prone_annotations:2.11.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.google.errorprone:error_prone_annotations:2.3.4=checkstyle
-com.google.guava:failureaccess:1.0.1=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.google.guava:guava:28.2-jre=checkstyle
-com.google.guava:guava:31.1-jre=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.google.errorprone:error_prone_annotations:2.21.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.google.errorprone:error_prone_annotations:2.36.0=checkstyle
+com.google.errorprone:error_prone_annotations:2.41.0=spotbugs
+com.google.guava:failureaccess:1.0.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.google.guava:failureaccess:1.0.3=checkstyle
+com.google.guava:guava:32.1.3-jre=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.google.guava:guava:33.4.8-jre=checkstyle
 com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.google.j2objc:j2objc-annotations:1.3=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.mx.path-core:common:4.5.4=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.mx.path-core:context:4.5.4=testRuntimeClasspath
-com.mx.path-core:gateway:4.5.4=testRuntimeClasspath
-com.mx.path-core:messaging:4.5.4=testRuntimeClasspath
-com.mx.path-core:platform:4.5.4=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-com.mx.path-core:testing:4.5.4=testCompileClasspath,testRuntimeClasspath
-com.mx.path-core:utilities:4.5.4=testRuntimeClasspath
-com.puppycrawl.tools:checkstyle:8.29=checkstyle
+com.google.j2objc:j2objc-annotations:2.8=compileClasspath,testCompileClasspath
+com.google.j2objc:j2objc-annotations:3.0.0=checkstyle
+com.mx.path-core:common:4.7.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.mx.path-core:context:4.7.0=testRuntimeClasspath
+com.mx.path-core:gateway:4.7.0=testRuntimeClasspath
+com.mx.path-core:messaging:4.7.0=testRuntimeClasspath
+com.mx.path-core:platform:4.7.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+com.mx.path-core:testing:4.7.0=testCompileClasspath,testRuntimeClasspath
+com.mx.path-core:utilities:4.7.0=testRuntimeClasspath
+com.puppycrawl.tools:checkstyle:10.25.0=checkstyle
 com.sun.activation:jakarta.activation:1.2.2=testRuntimeClasspath
 com.sun.istack:istack-commons-runtime:3.0.12=testRuntimeClasspath
 com.sun.xml.bind:jaxb-impl:2.3.1=testRuntimeClasspath
-commons-beanutils:commons-beanutils:1.9.4=checkstyle
-commons-codec:commons-codec:1.15=compileClasspath,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath
+commons-beanutils:commons-beanutils:1.11.0=checkstyle
+commons-codec:commons-codec:1.15=checkstyle,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
 commons-collections:commons-collections:3.2.2=checkstyle
+commons-io:commons-io:2.20.0=spotbugs
 commons-lang:commons-lang:2.6=testRuntimeClasspath
 commons-logging:commons-logging:1.2=testRuntimeClasspath
-info.picocli:picocli:4.1.4=checkstyle
+info.picocli:picocli:4.7.7=checkstyle
 io.github.cdimascio:dotenv-java:2.3.2=testRuntimeClasspath
 io.leangen.geantyref:geantyref:1.3.16=testRuntimeClasspath
 io.opentracing:opentracing-api:0.33.0=testRuntimeClasspath
@@ -51,77 +53,86 @@ jakarta.activation:jakarta.activation-api:1.2.2=testRuntimeClasspath
 jakarta.xml.bind:jakarta.xml.bind-api:2.3.3=testRuntimeClasspath
 jakarta.xml.soap:jakarta.xml.soap-api:1.4.2=testRuntimeClasspath
 jaxen:jaxen:2.0.0=spotbugs
-junit:junit:4.13.2=testCompileClasspath,testRuntimeClasspath
 net.bytebuddy:byte-buddy-agent:1.12.19=testCompileClasspath,testRuntimeClasspath
-net.bytebuddy:byte-buddy:1.12.19=testCompileClasspath,testRuntimeClasspath
-net.sf.saxon:Saxon-HE:12.3=spotbugs
-net.sf.saxon:Saxon-HE:9.9.1-6=checkstyle
-net.sourceforge.pmd:pmd-core:6.54.0=pmd
-net.sourceforge.pmd:pmd-java:6.54.0=pmd
+net.bytebuddy:byte-buddy:1.12.19=testCompileClasspath
+net.bytebuddy:byte-buddy:1.17.7=testRuntimeClasspath
+net.sf.saxon:Saxon-HE:12.5=checkstyle
+net.sf.saxon:Saxon-HE:12.9=spotbugs
+net.sourceforge.pmd:pmd-core:6.55.0=pmd
+net.sourceforge.pmd:pmd-java:6.55.0=pmd
 net.sourceforge.saxon:saxon:9.1.0.8=pmd
+org.antlr:antlr4-runtime:4.13.2=checkstyle
 org.antlr:antlr4-runtime:4.7.2=pmd
-org.antlr:antlr4-runtime:4.8-1=checkstyle
-org.apache.bcel:bcel:6.6.1=spotbugs
-org.apache.commons:commons-lang3:3.13.0=spotbugs
+org.apache.bcel:bcel:6.11.0=spotbugs
 org.apache.commons:commons-lang3:3.18.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-org.apache.commons:commons-lang3:3.8.1=pmd
-org.apache.commons:commons-text:1.10.0=spotbugs
-org.apache.commons:commons-text:1.14.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-org.apache.groovy:groovy-bom:4.0.26=testCompileClasspath,testRuntimeClasspath
-org.apache.groovy:groovy:4.0.26=testCompileClasspath,testRuntimeClasspath
-org.apache.httpcomponents.client5:httpclient5:5.1.3=spotbugs
-org.apache.httpcomponents.core5:httpcore5-h2:5.1.3=spotbugs
-org.apache.httpcomponents.core5:httpcore5:5.1.3=spotbugs
-org.apache.httpcomponents:httpclient:4.5.13=testRuntimeClasspath
+org.apache.commons:commons-lang3:3.19.0=spotbugs
+org.apache.commons:commons-lang3:3.8.1=checkstyle,pmd
+org.apache.commons:commons-text:1.14.0=compileClasspath,runtimeClasspath,spotbugs,testCompileClasspath,testRuntimeClasspath
+org.apache.commons:commons-text:1.3=checkstyle
+org.apache.httpcomponents.client5:httpclient5:5.1.3=checkstyle
+org.apache.httpcomponents.core5:httpcore5-h2:5.1.3=checkstyle
+org.apache.httpcomponents.core5:httpcore5:5.1.3=checkstyle
+org.apache.httpcomponents:httpclient:4.5.13=checkstyle,testRuntimeClasspath
 org.apache.httpcomponents:httpcore:4.4.13=testRuntimeClasspath
-org.apache.logging.log4j:log4j-api:2.22.0=spotbugs
-org.apache.logging.log4j:log4j-core:2.22.0=spotbugs
+org.apache.httpcomponents:httpcore:4.4.14=checkstyle
+org.apache.logging.log4j:log4j-api:2.25.2=spotbugs
+org.apache.logging.log4j:log4j-core:2.25.2=spotbugs
+org.apache.maven.doxia:doxia-core:1.12.0=checkstyle
+org.apache.maven.doxia:doxia-logging-api:1.12.0=checkstyle
+org.apache.maven.doxia:doxia-module-xdoc:1.12.0=checkstyle
+org.apache.maven.doxia:doxia-sink-api:1.12.0=checkstyle
+org.apache.xbean:xbean-reflect:3.7=checkstyle
 org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath
-org.checkerframework:checker-qual:2.10.0=checkstyle
-org.checkerframework:checker-qual:3.12.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-org.dom4j:dom4j:2.1.4=spotbugs
-org.glassfish.jaxb:jaxb-runtime:2.3.7=testRuntimeClasspath
-org.glassfish.jaxb:txw2:2.3.7=testRuntimeClasspath
-org.hamcrest:hamcrest-core:1.3=testCompileClasspath,testRuntimeClasspath
+org.assertj:assertj-core:3.27.6=testRuntimeClasspath
+org.checkerframework:checker-qual:3.37.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
+org.checkerframework:checker-qual:3.49.3=checkstyle
+org.codehaus.groovy:groovy:3.0.24=testCompileClasspath,testRuntimeClasspath
+org.codehaus.plexus:plexus-classworlds:2.6.0=checkstyle
+org.codehaus.plexus:plexus-component-annotations:2.1.0=checkstyle
+org.codehaus.plexus:plexus-container-default:2.1.0=checkstyle
+org.codehaus.plexus:plexus-utils:3.3.0=checkstyle
+org.dom4j:dom4j:2.2.0=spotbugs
+org.glassfish.jaxb:jaxb-runtime:2.3.9=testRuntimeClasspath
+org.glassfish.jaxb:txw2:2.3.9=testRuntimeClasspath
 org.hamcrest:hamcrest:3.0=testCompileClasspath,testRuntimeClasspath
 org.jacoco:org.jacoco.agent:0.8.8=jacocoAgent,jacocoAnt
 org.jacoco:org.jacoco.ant:0.8.8=jacocoAnt
 org.jacoco:org.jacoco.core:0.8.8=jacocoAnt
 org.jacoco:org.jacoco.report:0.8.8=jacocoAnt
 org.jasypt:jasypt:1.9.3=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
-org.javassist:javassist:3.28.0-GA=testRuntimeClasspath
-org.junit.jupiter:junit-jupiter-api:5.12.2=testCompileClasspath,testRuntimeClasspath
-org.junit.jupiter:junit-jupiter-engine:5.12.2=testRuntimeClasspath
-org.junit.platform:junit-platform-commons:1.12.2=testCompileClasspath,testRuntimeClasspath
-org.junit.platform:junit-platform-engine:1.12.2=testCompileClasspath,testRuntimeClasspath
-org.junit.platform:junit-platform-launcher:1.12.2=testRuntimeClasspath
-org.junit:junit-bom:5.12.2=testCompileClasspath,testRuntimeClasspath
-org.junit:junit-bom:5.9.0=runtimeClasspath
+org.javassist:javassist:3.28.0-GA=checkstyle,testRuntimeClasspath
+org.jspecify:jspecify:1.0.0=checkstyle
+org.junit.jupiter:junit-jupiter-api:5.14.0=testRuntimeClasspath
+org.junit.platform:junit-platform-commons:1.12.2=testCompileClasspath
+org.junit.platform:junit-platform-commons:1.14.0=testRuntimeClasspath
+org.junit.platform:junit-platform-engine:1.12.2=testCompileClasspath
+org.junit.platform:junit-platform-engine:1.14.0=testRuntimeClasspath
+org.junit:junit-bom:5.12.2=testCompileClasspath
+org.junit:junit-bom:5.14.0=runtimeClasspath,spotbugs,testRuntimeClasspath
 org.mockito:mockito-core:4.11.0=testCompileClasspath,testRuntimeClasspath
 org.mockito:mockito-inline:4.11.0=testCompileClasspath,testRuntimeClasspath
 org.objenesis:objenesis:3.3=runtimeClasspath,testRuntimeClasspath
 org.opentest4j:opentest4j:1.3.0=testCompileClasspath,testRuntimeClasspath
 org.ow2.asm:asm-analysis:9.2=jacocoAnt
-org.ow2.asm:asm-analysis:9.6=spotbugs
+org.ow2.asm:asm-analysis:9.9=spotbugs
 org.ow2.asm:asm-commons:9.2=jacocoAnt
-org.ow2.asm:asm-commons:9.6=spotbugs
+org.ow2.asm:asm-commons:9.9=spotbugs
 org.ow2.asm:asm-tree:9.2=jacocoAnt
-org.ow2.asm:asm-tree:9.6=spotbugs
-org.ow2.asm:asm-util:9.6=spotbugs
+org.ow2.asm:asm-tree:9.9=spotbugs
+org.ow2.asm:asm-util:9.9=spotbugs
 org.ow2.asm:asm:9.2=jacocoAnt
-org.ow2.asm:asm:9.3=pmd
-org.ow2.asm:asm:9.6=spotbugs
-org.projectlombok:lombok:1.18.38=annotationProcessor,compileClasspath,lombok,testAnnotationProcessor,testCompileClasspath
-org.reflections:reflections:0.10.2=testRuntimeClasspath
+org.ow2.asm:asm:9.4=pmd
+org.ow2.asm:asm:9.9=spotbugs
+org.projectlombok:lombok:1.18.42=annotationProcessor,compileClasspath,lombok,testAnnotationProcessor,testCompileClasspath
+org.reflections:reflections:0.10.2=checkstyle,testRuntimeClasspath
 org.slf4j:slf4j-api:1.7.30=compileClasspath,runtimeClasspath,testCompileClasspath
 org.slf4j:slf4j-api:1.7.32=testRuntimeClasspath
-org.slf4j:slf4j-api:2.0.0=spotbugsSlf4j
-org.slf4j:slf4j-api:2.0.9=spotbugs
+org.slf4j:slf4j-api:2.0.17=spotbugs,spotbugsSlf4j
 org.slf4j:slf4j-simple:1.7.30=testCompileClasspath,testRuntimeClasspath
-org.slf4j:slf4j-simple:2.0.0=spotbugsSlf4j
-org.spockframework:spock-bom:2.4-M6-groovy-4.0=testCompileClasspath,testRuntimeClasspath
-org.spockframework:spock-core:2.4-M6-groovy-4.0=testCompileClasspath,testRuntimeClasspath
-org.spockframework:spock-junit4:2.4-M6-groovy-4.0=testCompileClasspath,testRuntimeClasspath
-org.xmlresolver:xmlresolver:5.2.0=spotbugs
+org.slf4j:slf4j-simple:2.0.17=spotbugsSlf4j
+org.spockframework:spock-bom:2.4-M6-groovy-3.0=testCompileClasspath,testRuntimeClasspath
+org.spockframework:spock-core:2.4-M6-groovy-3.0=testCompileClasspath,testRuntimeClasspath
+org.xmlresolver:xmlresolver:5.2.2=checkstyle
+org.xmlresolver:xmlresolver:5.3.3=spotbugs
 org.yaml:snakeyaml:1.33=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
 empty=signatures,spotbugsPlugins

encryption-service-vault/build.gradle

@@ -3,7 +3,7 @@ coppuccino {
     minimumCoverage = 0.88
   }
   dependencies {
-    excludePreReleaseVersions = false
+    excludePreReleaseVersions = true
   }
 }