fix(deps): update all dependencies

renovate[bot] · web-flow · commit 27f7774d8cc9 · 2025-05-22T19:53:16.000Z
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -140,7 +140,7 @@ jobs:
         run: ./gradlew codeCoverageReport
 
       - name: Send code coverage report to Codecov.io
-        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
         with:
             token: ${{ secrets.CODECOV_TOKEN }}
   docs:
@@ -190,6 +190,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@06832c7b30a0129d7fb559bcc6e43d26f6374244 # v4.3.1
+        uses: gradle/actions/dependency-submission@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+      uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+      uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+      uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
       with:
         category: "/language:${{matrix.language}}"
diff --git a/commercetools/commercetools-apachehttp-client/build.gradle b/commercetools/commercetools-apachehttp-client/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.4.4" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.5" version {
         strictly "[5.4.4,6.0["
         prefer "5.4.4"
     }
diff --git a/commercetools/commercetools-async-http-client/build.gradle b/commercetools/commercetools-async-http-client/build.gradle
@@ -3,10 +3,10 @@ dependencies {
     api project(":rmf:rmf-java-base")
     api "org.asynchttpclient:async-http-client:2.12.4"
     api commons.io version commons.io_version
-    api "io.netty:netty-codec:4.2.0.Final"
-    api "io.netty:netty-codec-http:4.2.0.Final"
-    api "io.netty:netty-codec-socks:4.2.0.Final"
-    api "io.netty:netty-handler-proxy:4.2.0.Final"
-    api "io.netty:netty-handler:4.2.0.Final"
+    api "io.netty:netty-codec:4.2.1.Final"
+    api "io.netty:netty-codec-http:4.2.1.Final"
+    api "io.netty:netty-codec-socks:4.2.1.Final"
+    api "io.netty:netty-handler-proxy:4.2.1.Final"
+    api "io.netty:netty-handler:4.2.1.Final"
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-monitoring-opentelemetry/build.gradle b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.49.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.50.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-reactornetty-client/build.gradle b/commercetools/commercetools-reactornetty-client/build.gradle
@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.2.5"
-    api "io.projectreactor.netty:reactor-netty-core:1.2.5"
+    api "io.projectreactor.netty:reactor-netty-http:1.2.6"
+    api "io.projectreactor.netty:reactor-netty-core:1.2.6"
 
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-sdk-compat-v1/build.gradle b/commercetools/commercetools-sdk-compat-v1/build.gradle
@@ -21,8 +21,8 @@ dependencies {
     api project(':commercetools:commercetools-sdk-java-api')
     api ctsdkv1.client version ctsdkv1.version
     api ctsdkv1.models version ctsdkv1.version
-    api "io.netty:netty-codec:4.2.0.Final"
-    api "io.netty:netty-codec-http:4.2.0.Final"
+    api "io.netty:netty-codec:4.2.1.Final"
+    api "io.netty:netty-codec-http:4.2.1.Final"
 
     jmhImplementation project(':commercetools:commercetools-async-http-client')
     jmhImplementation project(':commercetools:commercetools-apachehttp-client')
diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle
@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.1.20"
+    id 'org.jetbrains.kotlin.jvm' version "2.1.21"
 }
 
 repositories {
diff --git a/gradle-scripts/extensions.gradle b/gradle-scripts/extensions.gradle
@@ -63,7 +63,7 @@ ext {
 
     mockito = [
             inline: 'org.mockito:mockito-inline:5.2.0',
-            junit: 'org.mockito:mockito-junit-jupiter:5.17.0',
+            junit: 'org.mockito:mockito-junit-jupiter:5.18.0',
     ]
 
     failsafe = [
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
diff --git a/gradlew b/gradlew
@@ -15,6 +15,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+# SPDX-License-Identifier: Apache-2.0
+#
 
 ##############################################################################
 #
@@ -84,7 +86,7 @@ done
 # shellcheck disable=SC2034
 APP_BASE_NAME=${0##*/}
 # Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036)
-APP_HOME=$( cd "${APP_HOME:-./}" > /dev/null && pwd -P ) || exit
+APP_HOME=$( cd -P "${APP_HOME:-./}" > /dev/null && printf '%s\n' "$PWD" ) || exit
 
 # Use the maximum available, or set MAX_FD != -1 to use that value.
 MAX_FD=maximum
@@ -112,7 +114,7 @@ case "$( uname )" in                #(
   NONSTOP* )        nonstop=true ;;
 esac
 
-CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
+CLASSPATH="\\\"\\\""
 
 
 # Determine the Java command to use to start the JVM.
@@ -203,15 +205,15 @@ fi
 DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
 
 # Collect all arguments for the java command:
-#   * DEFAULT_JVM_OPTS, JAVA_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
 #     and any embedded shellness will be escaped.
 #   * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be
 #     treated as '${Hostname}' itself on the command line.
 
 set -- \
         "-Dorg.gradle.appname=$APP_BASE_NAME" \
         -classpath "$CLASSPATH" \
-        org.gradle.wrapper.GradleWrapperMain \
+        -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
         "$@"
 
 # Stop when "xargs" is not available.
diff --git a/gradlew.bat b/gradlew.bat
@@ -13,6 +13,8 @@
 @rem See the License for the specific language governing permissions and
 @rem limitations under the License.
 @rem
+@rem SPDX-License-Identifier: Apache-2.0
+@rem
 
 @if "%DEBUG%"=="" @echo off
 @rem ##########################################################################
@@ -68,11 +70,11 @@ goto fail
 :execute
 @rem Setup the command line
 
-set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
+set CLASSPATH=
 
 
 @rem Execute Gradle
-"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %*
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" -jar "%APP_HOME%\gradle\wrapper\gradle-wrapper.jar" %*
 
 :end
 @rem End local scope for the variables with windows NT shell
diff --git a/package.json b/package.json
@@ -12,7 +12,7 @@
   "packageManager": "yarn@4.9.1",
   "dependencies": {
     "husky": "9.1.7",
-    "lint-staged": "15.5.1"
+    "lint-staged": "15.5.2"
   },
   "scripts": {
     "postinstall": "husky install",
diff --git a/yarn.lock b/yarn.lock
@@ -82,7 +82,7 @@ __metadata:
   resolution: "commercetools-sdk-java-v2@workspace:."
   dependencies:
     husky: "npm:9.1.7"
-    lint-staged: "npm:15.5.1"
+    lint-staged: "npm:15.5.2"
   languageName: unknown
   linkType: soft
 
@@ -230,9 +230,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lint-staged@npm:15.5.1":
-  version: 15.5.1
-  resolution: "lint-staged@npm:15.5.1"
+"lint-staged@npm:15.5.2":
+  version: 15.5.2
+  resolution: "lint-staged@npm:15.5.2"
   dependencies:
     chalk: "npm:^5.4.1"
     commander: "npm:^13.1.0"
@@ -246,7 +246,7 @@ __metadata:
     yaml: "npm:^2.7.0"
   bin:
     lint-staged: bin/lint-staged.js
-  checksum: 10c0/86deddb08bf10428f2eb96c02326a9ee403360729225f0b12afb0c0f13c287a75daa01e179d86f64e3432576446d8643d204a47417296f9ef0aa56f1340ff2af
+  checksum: 10c0/618386254600ada3af3672486a9d082250108245e7c0863d9dfe0a21e7764e3b2eb6416b0f8970e548f4e9d368637331598b27df5a1306925feabbaf16a667e1
   languageName: node
   linkType: hard
 

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`
`2`	`2`	`dependencies {`
`3`	`3`	`api project(":rmf:rmf-java-base")`
`4`		`- api "org.apache.httpcomponents.client5:httpclient5:5.4.4" version {`
	`4`	`+ api "org.apache.httpcomponents.client5:httpclient5:5.5" version {`
`5`	`5`	`strictly "[5.4.4,6.0["`
`6`	`6`	`prefer "5.4.4"`
`7`	`7`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,8 +2,8 @@`
`2`	`2`	`dependencies {`
`3`	`3`	`api project(":rmf:rmf-java-base")`
`4`	`4`
`5`		`- api "io.projectreactor.netty:reactor-netty-http:1.2.5"`
`6`		`- api "io.projectreactor.netty:reactor-netty-core:1.2.5"`
	`5`	`+ api "io.projectreactor.netty:reactor-netty-http:1.2.6"`
	`6`	`+ api "io.projectreactor.netty:reactor-netty-core:1.2.6"`
`7`	`7`
`8`	`8`	`implementation javax.validation`
`9`	`9`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`plugins {`
`2`	`2`	`id 'java-gradle-plugin'`
`3`	`3`	`id 'idea'`
`4`		`- id 'org.jetbrains.kotlin.jvm' version "2.1.20"`
	`4`	`+ id 'org.jetbrains.kotlin.jvm' version "2.1.21"`
`5`	`5`	`}`
`6`	`6`
`7`	`7`	`repositories {`
Original file line number	Diff line number	Diff line change
`@@ -63,7 +63,7 @@ ext {`
`63`	`63`
`64`	`64`	`mockito = [`
`65`	`65`	`inline: 'org.mockito:mockito-inline:5.2.0',`
`66`		`- junit: 'org.mockito:mockito-junit-jupiter:5.17.0',`
	`66`	`+ junit: 'org.mockito:mockito-junit-jupiter:5.18.0',`
`67`	`67`	`]`
`68`	`68`
`69`	`69`	`failsafe = [`