Merge branch 'main' into dependabot/gradle/org.junit.platform-junit-platform-launcher-1.13.4

Author: pboos

build.gradle

@@ -69,7 +69,7 @@ subprojects {
 
         // Security constraints
         constraints {
-            implementation("org.springframework:spring-web:6.2.8") {
+            implementation("org.springframework:spring-web:6.2.10") {
                 because("versions below 6.2.8 have security vulnerabilities including CVE-2024-38820 - see dependabot #12")
             }
             implementation("org.apache.tomcat.embed:tomcat-embed-core:10.1.42") {
@@ -78,6 +78,12 @@ subprojects {
             implementation("org.apache.commons:commons-lang3:3.18.0") {
                 because("versions below 3.18.0 have security vulnerabilities including CVE-2025-48924 - see dependabot #15")
             }
+            implementation("io.projectreactor.netty:reactor-netty-http:1.2.9") {
+                because("versions below 1.2.8 have security vulnerabilities including CVE-2025-22227 - see dependabot #16")
+            }
+            implementation("io.netty:netty-codec-http2:4.1.124.Final") {
+                because("versions below 4.1.124.Final have security vulnerabilities including CVE-2025-55163 - see dependabot #17")
+            }
         }
     }
 

gradle/libs.versions.toml

@@ -1,11 +1,11 @@
 [versions]
 java = "21"
-spring-boot = "3.5.3"
+spring-boot = "3.5.4"
 spring-dependency-management = "1.1.7"
-openapi-generator = "7.13.0"
+openapi-generator = "7.14.0"
 openapi-tools = "0.2.6"
-swagger = "2.2.34"
-swagger-request-validator = "2.44.9"
+swagger = "2.2.36"
+swagger-request-validator = "2.45.1"
 jakarta-validation = "3.1.1"
 lombok = "1.18.38"
 commons-codec = "1.18.0"
@@ -17,8 +17,8 @@ checkstyle = "8.44"
 pmd = "7.14.0"
 jacoco = "0.8.13"
 # Testing
-mockito = "5.18.0"
-junit-jupiter = "5.13.1"
+mockito = "5.19.0"
+junit-jupiter = "5.13.4"
 junit-platform = "1.13.4"
 
 [libraries]

gygservice.yml renamed to service-provisioning.yml

@@ -1,7 +1,6 @@
-version: '1'
 service:
   name: openapi-validation-java
-  type: Library
-  main_language: Java
   owner: chk
+  type: Library
   level: best effort
+  main_language: Java