diff --git a/build.gradle b/build.gradle index 1aeb3b192f..7ac4ca5c39 100644 --- a/build.gradle +++ b/build.gradle @@ -16,7 +16,7 @@ plugins { id "com.jfrog.artifactory" version "${artifactoryPluginVersion}" apply false id "com.github.node-gradle.node" version "${gradleNodePluginVersion}" apply false id "org.owasp.dependencycheck" version "${owaspDependencyCheckPluginVersion}" apply false - id "com.github.ben-manes.versions" version "0.54.0" + id "io.github.ben-manes.versions" version "0.61.0" id "org.labkey.build.multiGit" } diff --git a/gradle.properties b/gradle.properties index 6d82542646..d1a51ad9cf 100644 --- a/gradle.properties +++ b/gradle.properties @@ -54,7 +54,7 @@ osxProteomicsBinariesVersion=1.0 windowsProteomicsBinariesVersion=1.0 # The current version numbers for the gradle plugins. -artifactoryPluginVersion=5.2.5 +artifactoryPluginVersion=6.0.4 gradleNodePluginVersion=7.1.0 gradlePluginsVersion=10.0.1 owaspDependencyCheckPluginVersion=13.0.0 @@ -121,13 +121,13 @@ cglibNodepVersion=2.2.3 checkerQualVersion=3.53.0 -commonmarkVersion=0.29.0 +commonmarkVersion=0.30.0 # the beanutils version is not the default version brought from commons-validator and/or commons-digester # in the :server:api module but is required for some of our code to compile commonsBeanutilsVersion=1.11.0 commonsCodecVersion=1.22.1 -commonsCollections4Version=4.5.0 +commonsCollections4Version=4.6.0 commonsCollectionsVersion=3.2.2 commonsCompressVersion=1.28.0 commonsDbcpVersion=1.4 @@ -143,11 +143,11 @@ commonsTextVersion=1.15.0 commonsValidatorVersion=1.11.0 commonsVfs2Version=2.10.0 -datadogVersion=1.65.0 +datadogVersion=1.65.1 dom4jVersion=2.2.0 -ehcacheCoreVersion=2.6.8 +ehcacheCoreVersion=2.6.11 eigenbasePropertiesVersion=1.1.6 eigenbaseResgenVersion=1.3.7 eigenbaseXomVersion=1.3.7 @@ -166,7 +166,7 @@ googleHttpClientVersion=2.2.0 googleOauthClientVersion=1.39.0 googleProtocolBufVersion=3.25.9 -graphSupportVersion=1.5.2 +graphSupportVersion=1.5.3 grpcVersion=1.83.1 # Cloud and SequenceAnalysis bring gson in as a transitive dependency. @@ -195,15 +195,15 @@ httpcoreVersion=4.4.16 intellijKotlinVersion=2.3.10 # Update the three Jackson dependency versions below in tandem, unless one gets a patch release out-of-sync with the others -jacksonVersion=2.21.5 -jacksonDatabindVersion=2.21.5 -jacksonJaxrsBaseVersion=2.21.5 +jacksonVersion=2.21.6 +jacksonDatabindVersion=2.21.6 +jacksonJaxrsBaseVersion=2.21.6 # Note the inconsistent version numbering for "annotations"... it no longer matches the above jacksonAnnotationsVersion=2.21 # Spring Boot brings in a transitive dependency on Jackson 3.x. It has changed package names and can coexist with Jackson 2.x. -jackson3Version=3.1.5 +jackson3Version=3.1.6 # The Jakarta Activation API version that Angus Activation implements. Keep in sync with angusActivationVersion (above). jakartaActivationApiVersion=2.1.4 @@ -243,9 +243,9 @@ jodaTimeVersion=2.14.3 # brought in transitively by Cloud, FileTransfer, SequenceAnalysis, etc. Need to resolve consistently jsr305Version=3.0.2 -orgJsonVersion=20260719 +orgJsonVersion=20260814 -jsoupVersion=1.23.1 +jsoupVersion=1.23.2 junitVersion=4.13.2 @@ -255,12 +255,12 @@ kaptchaVersion=2.3 log4j2Version=2.26.1 -lombokVersion=1.18.46 +lombokVersion=1.18.48 -luceneVersion=10.5.0 +luceneVersion=10.5.1 # Microsoft library for sending OAuth2-authenticated notification emails via the Microsoft Graph API -microsoftGraphVersion=6.67.0 +microsoftGraphVersion=6.69.0 mssqlJdbcVersion=13.4.0.jre11 @@ -306,12 +306,12 @@ slf4jLog4jApiVersion=2.0.18 snappyJavaVersion=1.1.10.8 # Also, update apacheTomcatVersion above to match Spring Boot's Tomcat dependency version -springBootVersion=4.1.0 +springBootVersion=4.1.1 # This usually matches the Spring Framework version dictated by springBootVersion springVersion=7.0.9 springAiVersion=2.0.1 -sqliteJdbcVersion=3.53.2.1 +sqliteJdbcVersion=3.53.4.0 # SAML brings stax2-api in as a transitive dependency. We force the latest version. stax2ApiVersion=4.2.2 @@ -337,4 +337,4 @@ xercesImplVersion=2.12.2 xmlApisVersion=1.0.b2 # sync with Tika/POI -xmlbeansVersion=5.2.0 +xmlbeansVersion=5.4.0 diff --git a/server/embedded/build.gradle b/server/embedded/build.gradle index 8ce8d72094..27e9501ad3 100644 --- a/server/embedded/build.gradle +++ b/server/embedded/build.gradle @@ -8,7 +8,7 @@ plugins { id "java" id "maven-publish" id "org.springframework.boot" version "${springBootVersion}" - id "io.spring.dependency-management" version "1.0.8.RELEASE" + id "io.spring.dependency-management" version "1.1.7" } // 'dependency-management' plugin doesn't allow us to use 'resolutionStrategy.force' to lock versions