fix(deps): update all dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -191,6 +191,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
+        uses: gradle/actions/dependency-submission@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}

.github/workflows/codeql.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+      uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+      uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+      uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/semgrep.yml

@@ -36,7 +36,7 @@ jobs:
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@97a2bfd2a3d26d458da69e548f7f859d6fca634d # v2.16.1
+              uses: github/codeql-action/upload-sarif@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1
               with:
                   sarif_file: semgrep.sarif
               if: always()

commercetools/commercetools-monitoring-opentelemetry/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.50.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.51.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-okhttp-client3/build.gradle

@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.12.0"
+    implementation "com.squareup.okio:okio:3.13.0"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"

commercetools/commercetools-okhttp-client4/build.gradle

@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.12.0"
+    implementation "com.squareup.okio:okio:3.13.0"
 
     implementation javax.validation
 }

commercetools/commercetools-reactornetty-client/build.gradle

@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.2.6"
-    api "io.projectreactor.netty:reactor-netty-core:1.2.6"
+    api "io.projectreactor.netty:reactor-netty-http:1.2.7"
+    api "io.projectreactor.netty:reactor-netty-core:1.2.7"
 
     implementation javax.validation
 }

common-plugins/javaparser/build.gradle

@@ -15,5 +15,5 @@ shadowJar {
 }
 
 dependencies {
-    implementation 'com.github.javaparser:javaparser-core:3.26.4'
+    implementation 'com.github.javaparser:javaparser-core:3.27.0'
 }

gradle-scripts/extensions.gradle

@@ -31,10 +31,10 @@ ext {
 
     jackson_core = [
             version: '2.19.0',
-            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.19.0',
-            databind: 'com.fasterxml.jackson.core:jackson-databind:2.19.0',
-            core: 'com.fasterxml.jackson.core:jackson-core:2.19.0',
-            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.0',
+            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.19.1',
+            databind: 'com.fasterxml.jackson.core:jackson-databind:2.19.1',
+            core: 'com.fasterxml.jackson.core:jackson-core:2.19.1',
+            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.1',
     ]
 
     google = [
@@ -56,7 +56,7 @@ ext {
     ]
 
     junit = [
-            junit: 'org.junit.jupiter:junit-jupiter:5.13.0',
+            junit: 'org.junit.jupiter:junit-jupiter:5.13.1',
             jsonassert: 'org.skyscreamer:jsonassert:1.5.3',
             assertj: 'org.assertj:assertj-core:3.27.3'
     ]

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.2-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME