From 982d6a577b137cd68348a46f9108b19acdca3d09 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 May 2025 16:10:37 +0000
Subject: [PATCH] Bump the maven group across 17 directories with 14 updates

Bumps the maven group with 6 updates in the /examples/cloud-datafusion-functions-plugins directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.7.1` | `3.25.5` |
| [com.google.guava:guava](https://github.com/google/guava) | `28.0-jre` | `32.0.0-jre` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.9.7` | `2.12.7.1` |
| org.apache.hadoop:hadoop-common | `2.8.0` | `3.4.0` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `1.5.7` | `3.0.24` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.11` | `4.13.1` |

Bumps the maven group with 1 update in the /examples/dataflow-dlp-hash-pipeline directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 3 updates in the /examples/dataflow-elasticsearch-indexer/ElasticIndexer directory: [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf), [com.google.guava:guava](https://github.com/google/guava) and [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 2 updates in the /examples/dataflow-streaming-benchmark directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 1 update in the /examples/dataflow-xmlio-to-bq directory: org.apache.logging.log4j:log4j-core.
Bumps the maven group with 3 updates in the /examples/e2e-test-dataflow directory: [junit:junit](https://github.com/junit-team/junit4), org.apache.logging.log4j:log4j-core and commons-io:commons-io.
Bumps the maven group with 4 updates in the /examples/iot-nirvana directory: [junit:junit](https://github.com/junit-team/junit4), commons-io:commons-io, [com.google.code.gson:gson](https://github.com/google/gson) and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 4 updates in the /examples/iot-nirvana/app-engine directory: [com.google.guava:guava](https://github.com/google/guava), [junit:junit](https://github.com/junit-team/junit4), commons-io:commons-io and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 3 updates in the /examples/iot-nirvana/client directory: [junit:junit](https://github.com/junit-team/junit4), [com.google.code.gson:gson](https://github.com/google/gson) and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/common directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /examples/iot-nirvana/pipeline directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 1 update in the /examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis directory: [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 2 updates in the /examples/pubsub-publish-avro-example directory: [junit:junit](https://github.com/junit-team/junit4) and org.apache.avro:avro.
Bumps the maven group with 2 updates in the /tools/apachebeam-throttling directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 2 updates in the /tools/maven-archetype-dataflow/src/main/resources/archetype-resources directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 1 update in the /tools/quota-monitoring-alerting/java/quota-scan directory: [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 3 updates in the /tools/secret-manager-helper directory: [junit:junit](https://github.com/junit-team/junit4), [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) and org.apache.commons:commons-text.


Updates `com.google.protobuf:protobuf-java` from 3.7.1 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.7.1...v3.25.5)

Updates `com.google.guava:guava` from 28.0-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.9.7 to 2.12.7.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.apache.hadoop:hadoop-common` from 2.8.0 to 3.4.0

Updates `org.codehaus.plexus:plexus-utils` from 1.5.7 to 3.0.24
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-1.5.7...plexus-utils-3.0.24)

Updates `junit:junit` from 4.11 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.google.protobuf:protobuf-java` from 3.6.0 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.7.1...v3.25.5)

Updates `com.google.guava:guava` from 25.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.29 to 10.23.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.29...checkstyle-10.23.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.14.0 to 2.17.1

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.13.0 to 2.17.1

Updates `commons-io:commons-io` from 2.6 to 2.14.0

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `org.eclipse.paho:org.eclipse.paho.client.mqttv3` from 1.2.0 to 1.2.1

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.8.2 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `org.eclipse.paho:org.eclipse.paho.client.mqttv3` from 1.2.0 to 1.2.1

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `org.apache.avro:avro` from 1.8.2 to 1.11.4

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.11 to 8.29
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.29...checkstyle-10.23.1)

Updates `junit:junit` from 4.13 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.30 to 10.23.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.29...checkstyle-10.23.1)

Updates `com.google.code.gson:gson` from 2.8.6 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.27 to 8.29
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.29...checkstyle-10.23.1)

Updates `org.apache.commons:commons-text` from 1.9 to 1.10.0

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.12.7.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.4.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 3.0.24
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.23.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.17.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.17.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.paho:org.eclipse.paho.client.mqttv3
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.paho:org.eclipse.paho.client.mqttv3
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.avro:avro
  dependency-version: 1.11.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '8.29'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.23.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '8.29'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.10.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 examples/cloud-datafusion-functions-plugins/pom.xml  | 12 ++++++------
 examples/dataflow-dlp-hash-pipeline/pom.xml          |  2 +-
 .../ElasticIndexer/pom.xml                           |  6 +++---
 examples/dataflow-streaming-benchmark/pom.xml        |  4 ++--
 examples/dataflow-xmlio-to-bq/pom.xml                |  2 +-
 examples/e2e-test-dataflow/pom.xml                   |  6 +++---
 examples/iot-nirvana/app-engine/pom.xml              |  6 +++---
 examples/iot-nirvana/client/pom.xml                  |  4 ++--
 examples/iot-nirvana/common/pom.xml                  |  2 +-
 examples/iot-nirvana/pipeline/pom.xml                |  2 +-
 examples/iot-nirvana/pom.xml                         |  2 +-
 .../sentiment-analysis/pom.xml                       |  2 +-
 examples/pubsub-publish-avro-example/pom.xml         |  4 ++--
 tools/apachebeam-throttling/pom.xml                  |  4 ++--
 .../src/main/resources/archetype-resources/pom.xml   |  4 ++--
 .../java/quota-scan/pom.xml                          |  2 +-
 tools/secret-manager-helper/pom.xml                  |  6 +++---
 17 files changed, 35 insertions(+), 35 deletions(-)

diff --git a/examples/cloud-datafusion-functions-plugins/pom.xml b/examples/cloud-datafusion-functions-plugins/pom.xml
index b24ecb6272d..cb225931bb6 100644
--- a/examples/cloud-datafusion-functions-plugins/pom.xml
+++ b/examples/cloud-datafusion-functions-plugins/pom.xml
@@ -31,8 +31,8 @@
     <spark.version>2.1.3</spark.version>
     <hydrator.version>2.3.0</hydrator.version>
     <cdap.version>6.0.0-SNAPSHOT</cdap.version>
-    <hadoop.version>2.8.0</hadoop.version>
-    <guava.version>28.0-jre</guava.version>
+    <hadoop.version>3.4.0</hadoop.version>
+    <guava.version>32.0.0-jre</guava.version>
     <!-- properties for script build step that creates the config files for the artifacts -->
     <widgets.dir>widgets</widgets.dir>
     <bigquery.connector.hadoop2.version>0.13.1-hadoop2</bigquery.connector.hadoop2.version>
@@ -41,7 +41,7 @@
     <main.basedir>${project.basedir}</main.basedir>
     <google.cloud.bigquery.version>1.72.0</google.cloud.bigquery.version>
     <google.cloud.monitoring.version>1.72.0</google.cloud.monitoring.version>
-    <protobuf.java.version>3.7.1</protobuf.java.version>
+    <protobuf.java.version>3.25.5</protobuf.java.version>
     <google.cloud.storage.version>1.98.0</google.cloud.storage.version>
     <retrofit.version>2.6.0</retrofit.version>
     <okhttp.version>4.2.1</okhttp.version>
@@ -194,7 +194,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>2.9.7</version>
+      <version>2.12.7.1</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
@@ -410,7 +410,7 @@
     <dependency>
     <groupId>org.codehaus.plexus</groupId>
     <artifactId>plexus-utils</artifactId>
-    <version>1.5.7</version>
+    <version>3.0.24</version>
    </dependency>
     <dependency>
       <groupId>joda-time</groupId>
@@ -451,7 +451,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
     </dependency>
   </dependencies>
 
diff --git a/examples/dataflow-dlp-hash-pipeline/pom.xml b/examples/dataflow-dlp-hash-pipeline/pom.xml
index 206a57e5705..a11d4a4ccaa 100644
--- a/examples/dataflow-dlp-hash-pipeline/pom.xml
+++ b/examples/dataflow-dlp-hash-pipeline/pom.xml
@@ -45,7 +45,7 @@
     <java.version>1.8</java.version>
     <j2v8.version>4.8.0</j2v8.version>
     <json-data-generator.version>1.5</json-data-generator.version>
-    <junit.version>4.12</junit.version>
+    <junit.version>4.13.1</junit.version>
     <maven-checkstyle-plugin.version>3.0.0</maven-checkstyle-plugin.version>
     <maven-compiler-plugin.version>3.8.0</maven-compiler-plugin.version>
     <maven-dependency-plugin.version>3.1.1</maven-dependency-plugin.version>
diff --git a/examples/dataflow-elasticsearch-indexer/ElasticIndexer/pom.xml b/examples/dataflow-elasticsearch-indexer/ElasticIndexer/pom.xml
index 8a72e3e5b4a..a884f7a8d73 100644
--- a/examples/dataflow-elasticsearch-indexer/ElasticIndexer/pom.xml
+++ b/examples/dataflow-elasticsearch-indexer/ElasticIndexer/pom.xml
@@ -33,8 +33,8 @@
 
     <properties>
         <beam.version>2.8.0</beam.version>
-        <protobuf.java.version>3.6.0</protobuf.java.version>
-        <guava.version>25.1-jre</guava.version>
+        <protobuf.java.version>3.25.5</protobuf.java.version>
+        <guava.version>32.0.0-jre</guava.version>
         <hbase.version>1.1.5</hbase.version>
         <bigtable.version>1.3.0</bigtable.version>
         <junit.jupiter.engine.version>5.1.0</junit.jupiter.engine.version>
@@ -49,7 +49,7 @@
         <maven-assembly-plugin.version>3.1.0</maven-assembly-plugin.version>
         <maven-exec-plugin.version>1.5.0</maven-exec-plugin.version>
         <auto-value.version>1.6.2</auto-value.version>
-        <json.version>20180813</json.version>
+        <json.version>20231013</json.version>
         <compiler.error.flag>-Werror</compiler.error.flag>
         <compiler.default.pkginfo.flag>-Xpkginfo:always</compiler.default.pkginfo.flag>
         <compiler.default.exclude>nothing</compiler.default.exclude>
diff --git a/examples/dataflow-streaming-benchmark/pom.xml b/examples/dataflow-streaming-benchmark/pom.xml
index 8046a219838..110c070dbf6 100644
--- a/examples/dataflow-streaming-benchmark/pom.xml
+++ b/examples/dataflow-streaming-benchmark/pom.xml
@@ -39,14 +39,14 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
     <!-- Dependency properties -->
-    <checkstyle.version>8.29</checkstyle.version>
+    <checkstyle.version>10.23.1</checkstyle.version>
     <beam.version>2.19.0</beam.version>
     <gson.version>2.7</gson.version>
     <hamcrest.version>1.3</hamcrest.version>
     <java.version>1.8</java.version>
     <j2v8.version>4.8.0</j2v8.version>
     <json-data-generator.version>1.5</json-data-generator.version>
-    <junit.version>4.12</junit.version>
+    <junit.version>4.13.1</junit.version>
     <maven-checkstyle-plugin.version>3.0.0</maven-checkstyle-plugin.version>
     <maven-compiler-plugin.version>3.8.0</maven-compiler-plugin.version>
     <maven-dependency-plugin.version>3.1.1</maven-dependency-plugin.version>
diff --git a/examples/dataflow-xmlio-to-bq/pom.xml b/examples/dataflow-xmlio-to-bq/pom.xml
index 5746efa99bb..c4d996c499b 100644
--- a/examples/dataflow-xmlio-to-bq/pom.xml
+++ b/examples/dataflow-xmlio-to-bq/pom.xml
@@ -68,7 +68,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.14.0</version>
+      <version>2.17.1</version>
     </dependency>
     <dependency>
       <groupId>org.apache.beam</groupId>
diff --git a/examples/e2e-test-dataflow/pom.xml b/examples/e2e-test-dataflow/pom.xml
index 8f5c19157c5..a061f6608c4 100644
--- a/examples/e2e-test-dataflow/pom.xml
+++ b/examples/e2e-test-dataflow/pom.xml
@@ -45,17 +45,17 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.13.0</version>
+            <version>2.17.1</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.6</version>
+            <version>2.14.0</version>
         </dependency>
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
-            <version>4.12</version>
+            <version>4.13.1</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
diff --git a/examples/iot-nirvana/app-engine/pom.xml b/examples/iot-nirvana/app-engine/pom.xml
index c1af66606c4..e9e6190c88e 100644
--- a/examples/iot-nirvana/app-engine/pom.xml
+++ b/examples/iot-nirvana/app-engine/pom.xml
@@ -52,12 +52,12 @@
         <!-- packages version -->
         <com.google.http-client.version>1.23.0</com.google.http-client.version>
         <com.googlecode.objectify.version>5.1.22</com.googlecode.objectify.version>
-        <com.google.code.gson.version>2.8.2</com.google.code.gson.version>
-        <com.google.guava.version>24.1.1-jre</com.google.guava.version>
+        <com.google.code.gson.version>2.8.9</com.google.code.gson.version>
+        <com.google.guava.version>32.0.0-jre</com.google.guava.version>
         <com.github.rholder.version>2.0.0</com.github.rholder.version>
         <com.google.api-client.version>1.23.0</com.google.api-client.version>
         <commons.codec.version>1.9</commons.codec.version>
-        <commons.io.version>2.5</commons.io.version>
+        <commons.io.version>2.14.0</commons.io.version>
         <google-api-services-compute.version>v1-rev171-1.23.0</google-api-services-compute.version>
         <google-api-services-cloudiot.version>v1-rev25-1.23.0</google-api-services-cloudiot.version>
         <gcloud.plugin.version>2.0.9.133.v201611104</gcloud.plugin.version>
diff --git a/examples/iot-nirvana/client/pom.xml b/examples/iot-nirvana/client/pom.xml
index 041ed59d04d..bbbcd885c26 100644
--- a/examples/iot-nirvana/client/pom.xml
+++ b/examples/iot-nirvana/client/pom.xml
@@ -51,13 +51,13 @@
     <commons.cli.version>1.4</commons.cli.version>
     <google.api.services.cloudiot.version>v1-rev17-1.23.0</google.api.services.cloudiot.version>
     <google.cloud.logging>1.15.0</google.cloud.logging>
-    <gson.version>2.3.1</gson.version>
+    <gson.version>2.8.9</gson.version>
     <iot.nirvana.common.version>0.1-SNAPSHOT</iot.nirvana.common.version>
     <jjwt.version>0.7.0</jjwt.version>
     <joda.time.version>2.1</joda.time.version>
     <junit.version>4.10</junit.version>
     <maven.assembly.plugin>2.4.1</maven.assembly.plugin>
-    <mqtt.client.version>1.2.0</mqtt.client.version>
+    <mqtt.client.version>1.2.1</mqtt.client.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
   </properties>
 
diff --git a/examples/iot-nirvana/common/pom.xml b/examples/iot-nirvana/common/pom.xml
index 038f8d45571..c4ce84b0100 100644
--- a/examples/iot-nirvana/common/pom.xml
+++ b/examples/iot-nirvana/common/pom.xml
@@ -51,7 +51,7 @@
         <auto.value.version>1.6.2</auto.value.version>
         <beam.version>2.5.0</beam.version>
         <commons.codec.version>1.9</commons.codec.version>
-        <gson.version>2.8.0</gson.version>
+        <gson.version>2.8.9</gson.version>
         <guava.version>22.0</guava.version>
     </properties>
 
diff --git a/examples/iot-nirvana/pipeline/pom.xml b/examples/iot-nirvana/pipeline/pom.xml
index 78c82e48fc0..529162d6ebe 100644
--- a/examples/iot-nirvana/pipeline/pom.xml
+++ b/examples/iot-nirvana/pipeline/pom.xml
@@ -49,7 +49,7 @@
     <commons.codec.version>1.9</commons.codec.version>
     <beam.version>2.5.0</beam.version>
     <bigquery.version>v2-rev374-1.22.0</bigquery.version>
-    <gson.version>2.8.0</gson.version>
+    <gson.version>2.8.9</gson.version>
     <guava.version>22.0</guava.version>
     <hamcrest.version>1.3</hamcrest.version>
     <iot.nirvana.common.version>0.1-SNAPSHOT</iot.nirvana.common.version>
diff --git a/examples/iot-nirvana/pom.xml b/examples/iot-nirvana/pom.xml
index fd1a9b1272f..fb9fc0f3637 100644
--- a/examples/iot-nirvana/pom.xml
+++ b/examples/iot-nirvana/pom.xml
@@ -45,7 +45,7 @@
     <exec.maven.plugin>1.4.0</exec.maven.plugin>
     <java.version>1.8</java.version>
     <junit.jupiter.engine.version>5.1.0</junit.jupiter.engine.version>
-    <junit.version>4.10</junit.version>
+    <junit.version>4.13.1</junit.version>
     <maven.compiler.plugin.version>3.6.2</maven.compiler.plugin.version>
     <truth.version>0.41</truth.version>
   </properties>
diff --git a/examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis/pom.xml b/examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis/pom.xml
index f884cd9456c..4a3c3f328aa 100644
--- a/examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis/pom.xml
+++ b/examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis/pom.xml
@@ -44,7 +44,7 @@
     <hamcrest.version>1.3</hamcrest.version>
     <java.version>1.8</java.version>
     <j2v8.version>4.8.0</j2v8.version>
-    <json.version>20180813</json.version>
+    <json.version>20231013</json.version>
     <junit.jupiter.version>5.3.2</junit.jupiter.version>
     <junit-platform.version>1.3.2</junit-platform.version>
     <junit.version>4.12</junit.version>
diff --git a/examples/pubsub-publish-avro-example/pom.xml b/examples/pubsub-publish-avro-example/pom.xml
index 1ae3d88e16c..7edfa3c497f 100644
--- a/examples/pubsub-publish-avro-example/pom.xml
+++ b/examples/pubsub-publish-avro-example/pom.xml
@@ -39,7 +39,7 @@
     <project.test.coverage.targetPercentage>80%</project.test.coverage.targetPercentage>
 
     <!-- Dependency properties -->
-    <avro.version>1.8.2</avro.version>
+    <avro.version>1.11.4</avro.version>
     <beam.version>2.7.0</beam.version>
     <checkstyle.version>8.11</checkstyle.version>
     <google.cloud.pubsub.version>1.49.0</google.cloud.pubsub.version>
@@ -47,7 +47,7 @@
     <java.version>1.8</java.version>
     <j2v8.version>4.8.0</j2v8.version>
     <jcommander.version>1.72</jcommander.version>
-    <junit.version>4.12</junit.version>
+    <junit.version>4.13.1</junit.version>
     <maven-build-helper-plugin.version>3.0.0</maven-build-helper-plugin.version>
     <maven-checkstyle-plugin.version>3.0.0</maven-checkstyle-plugin.version>
     <maven-clover-plugin.version>4.3.0</maven-clover-plugin.version>
diff --git a/tools/apachebeam-throttling/pom.xml b/tools/apachebeam-throttling/pom.xml
index 9a13ba09594..cc6bc4945bc 100644
--- a/tools/apachebeam-throttling/pom.xml
+++ b/tools/apachebeam-throttling/pom.xml
@@ -39,12 +39,12 @@
         <project.test.coverage.targetPercentage>70%</project.test.coverage.targetPercentage>
 
         <!-- Dependency properties -->
-        <checkstyle.version>8.11</checkstyle.version>
+        <checkstyle.version>8.29</checkstyle.version>
         <beam.version>2.10.0</beam.version>
         <hamcrest.version>1.3</hamcrest.version>
         <java.version>1.8</java.version>
         <j2v8.version>4.8.0</j2v8.version>
-        <junit.version>4.12</junit.version>
+        <junit.version>4.13.1</junit.version>
         <commons.version>1.3.2</commons.version>
         <log4j.version>1.2.17</log4j.version>
         <maven-checkstyle-plugin.version>3.0.0</maven-checkstyle-plugin.version>
diff --git a/tools/maven-archetype-dataflow/src/main/resources/archetype-resources/pom.xml b/tools/maven-archetype-dataflow/src/main/resources/archetype-resources/pom.xml
index 22535fb7d26..0a75790d93f 100644
--- a/tools/maven-archetype-dataflow/src/main/resources/archetype-resources/pom.xml
+++ b/tools/maven-archetype-dataflow/src/main/resources/archetype-resources/pom.xml
@@ -40,12 +40,12 @@
     <project.test.coverage.targetPercentage>70%</project.test.coverage.targetPercentage>
 
     <!-- Dependency properties -->
-    <checkstyle.version>8.30</checkstyle.version>
+    <checkstyle.version>10.23.1</checkstyle.version>
     <beam.version>2.19.0</beam.version>
 
     <hamcrest.version>2.2</hamcrest.version>
     <java.version>1.8</java.version>
-    <junit.version>4.13</junit.version>
+    <junit.version>4.13.1</junit.version>
     <mockito-core.version>3.3.0</mockito-core.version>
     <slf4j.version>1.7.30</slf4j.version>
 
diff --git a/tools/quota-monitoring-alerting/java/quota-scan/pom.xml b/tools/quota-monitoring-alerting/java/quota-scan/pom.xml
index 6fd3f1360c0..897c8119f1f 100644
--- a/tools/quota-monitoring-alerting/java/quota-scan/pom.xml
+++ b/tools/quota-monitoring-alerting/java/quota-scan/pom.xml
@@ -119,7 +119,7 @@
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.8.6</version>
+      <version>2.8.9</version>
     </dependency>
     <dependency>
       <groupId>com.google.cloud</groupId>
diff --git a/tools/secret-manager-helper/pom.xml b/tools/secret-manager-helper/pom.xml
index 01e9b311f01..4019a9c27cb 100644
--- a/tools/secret-manager-helper/pom.xml
+++ b/tools/secret-manager-helper/pom.xml
@@ -60,7 +60,7 @@
             <!-- Find the most recent version of this artifact here:
             http://checkstyle.sourceforge.net
             -->
-            <version>8.27</version>
+            <version>8.29</version>
           </dependency>
         </dependencies>
         <executions>
@@ -98,7 +98,7 @@
     <dependency>
       <artifactId>commons-text</artifactId>
       <groupId>org.apache.commons</groupId>
-      <version>1.9</version>
+      <version>1.10.0</version>
     </dependency>
     <!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-api -->
     <dependency>
@@ -116,7 +116,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.10</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>