Merge pull request #27 from blackducksoftware/task/romeara/dependencies-update

Update dependencies to latest minor/micro versions

Author: romeara

CHANGE_LOG.md

@@ -5,6 +5,13 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
+### Changed
+- Updated `com.google.guava:guava` from `31.0-jre` to `31.1-jre`
+- Updated `org.ow2.asm:asm` from `9.2` to `9.3`
+- Updated `org.slf4j:slf4j-api` from `1.7.32` to `1.7.36`
+- Updated `org.slf4j:slf4j-simple` from `1.7.32` to `1.7.36`
+- Updated `org.testng:testng` from `7.4.0` to `7.5`
+- Updated override of `org.yaml:snakeyaml` transitive dependency from `1.29` to `1.30`
 
 ## [0.1.7]
 ### Changed

method-analyzer-core/build.gradle

@@ -8,20 +8,19 @@ description = 'Library which analyzes Java projects for method calls to external
 dependencies {
     compileOnly 'com.google.code.findbugs:jsr305:3.0.2'
 
-    api 'com.google.guava:guava:31.0-jre'
-    api 'org.ow2.asm:asm:9.2'
+    api 'com.google.guava:guava:31.1-jre'
+    api 'org.ow2.asm:asm:9.3'
 
-    implementation 'com.google.code.gson:gson:2.8.8'
-    implementation 'org.slf4j:slf4j-api:1.7.32'
+    implementation 'com.google.code.gson:gson:2.9.0'
+    implementation 'org.slf4j:slf4j-api:1.7.36'
 
     testImplementation project(':method-analyzer-test-project')
-    testImplementation 'org.slf4j:slf4j-api:1.7.32'
-    testImplementation 'org.slf4j:slf4j-simple:1.7.32'
-    testImplementation 'org.testng:testng:7.4.0'
-    testImplementation 'org.slf4j:slf4j-simple:1.7.32'
+    testImplementation 'org.slf4j:slf4j-api:1.7.36'
+    testImplementation 'org.slf4j:slf4j-simple:1.7.36'
+    testImplementation 'org.testng:testng:7.5'
 
     // Overrides vulnerable version 1.21 in transitive dependencies of TestNG
-    testImplementation 'org.yaml:snakeyaml:1.29'
+    testImplementation 'org.yaml:snakeyaml:1.30'
 }
 
 // TODO romeara Add to contribution doc