fix(deps): update all dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -190,6 +190,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
+        uses: gradle/actions/dependency-submission@06832c7b30a0129d7fb559bcc6e43d26f6374244 # v4.3.1
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}

.github/workflows/codeql.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+      uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+      uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+      uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/semgrep.yml

@@ -29,7 +29,7 @@ jobs:
 
         steps:
             - name: Checkout
-              uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v4.1.1
+              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
               with:
                   persist-credentials: false
 

build.gradle

@@ -72,7 +72,7 @@ allprojects {
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.4.5-jre'
+        taglet 'com.google.guava:guava:33.4.7-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }

commercetools/commercetools-apachehttp-client/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.4.2" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.4.3" version {
         strictly "[5.4.1,6.0["
         prefer "5.4.2"
     }

commercetools/commercetools-async-http-client/build.gradle

@@ -3,10 +3,10 @@ dependencies {
     api project(":rmf:rmf-java-base")
     api "org.asynchttpclient:async-http-client:2.12.4"
     api commons.io version commons.io_version
-    api "io.netty:netty-codec:4.1.119.Final"
-    api "io.netty:netty-codec-http:4.1.119.Final"
-    api "io.netty:netty-codec-socks:4.1.119.Final"
-    api "io.netty:netty-handler-proxy:4.1.119.Final"
-    api "io.netty:netty-handler:4.1.119.Final"
+    api "io.netty:netty-codec:4.2.0.Final"
+    api "io.netty:netty-codec-http:4.2.0.Final"
+    api "io.netty:netty-codec-socks:4.2.0.Final"
+    api "io.netty:netty-handler-proxy:4.2.0.Final"
+    api "io.netty:netty-handler:4.2.0.Final"
     implementation javax.validation
 }

commercetools/commercetools-money/build.gradle

@@ -1,6 +1,6 @@
 dependencies {
     api "javax.money:money-api:1.1"
-    api('org.javamoney.moneta:moneta-core:1.4.4') {
+    api('org.javamoney.moneta:moneta-core:1.4.5') {
         exclude group: "com.squareup.okhttp3", module: "okhttp"
     }
 }

commercetools/commercetools-monitoring-datadog/build.gradle

@@ -1,6 +1,6 @@
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation "com.datadoghq:java-dogstatsd-client:4.4.3"
+    implementation "com.datadoghq:java-dogstatsd-client:4.4.4"
     implementation "com.datadoghq:datadog-api-client:2.33.1"
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")

commercetools/commercetools-monitoring-opentelemetry/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.48.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.49.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-okhttp-client3/build.gradle

@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.10.2"
+    implementation "com.squareup.okio:okio:3.11.0"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,4.0["
         prefer "3.14.9"