Update Mend: high confidence minor and patch dependency updates

Author: mend-for-github-com[bot]

distribution/tools/ansi-console/build.gradle

@@ -18,7 +18,7 @@ dependencies {
   testImplementation project(":test:framework")
 
   // multi-platform (Windows too) terminal detection and output formatting
-  api "org.fusesource.jansi:jansi:2.4.0"
+  api "org.fusesource.jansi:jansi:2.4.2"
 }
 
 // the code and tests in this project cover console initialization

distribution/tools/geoip-cli/build.gradle

@@ -18,6 +18,6 @@ dependencies {
   compileOnly project(":libs:elasticsearch-cli")
   compileOnly project(":libs:elasticsearch-x-content")
   testImplementation project(":test:framework")
-  testImplementation "org.apache.commons:commons-compress:1.26.1"
+  testImplementation "org.apache.commons:commons-compress:1.28.0"
   testImplementation "commons-io:commons-io:2.15.1"
 }

distribution/tools/plugin-cli/build.gradle

@@ -26,7 +26,7 @@ dependencies {
   implementation project(":libs:elasticsearch-plugin-scanner")
   // TODO: asm is picked up from the plugin scanner, we should consolidate so it is not defined twice
   implementation 'org.ow2.asm:asm:9.7'
-  implementation 'org.ow2.asm:asm-tree:9.7'
+  implementation 'org.ow2.asm:asm-tree:9.9.1'
 
   api "org.bouncycastle:bcpg-fips:1.0.7.1"
   api "org.bouncycastle:bc-fips:1.0.2.4"

gradle/build.versions.toml

@@ -1,35 +1,35 @@
 [versions]
-asm = "9.6"
-jackson = "2.15.0"
-junit5 = "5.8.1"
+asm = "9.9.1"
+jackson = "2.20.1"
+junit5 = "5.14.1"
 spock = "2.1-groovy-3.0"
 
 [libraries]
-ant = "org.apache.ant:ant:1.10.12"
+ant = "org.apache.ant:ant:1.10.15"
 antlrst4 = "org.antlr:ST4:4.3.4"
-apache-compress = "org.apache.commons:commons-compress:1.26.1"
+apache-compress = "org.apache.commons:commons-compress:1.28.0"
 apache-rat = "org.apache.rat:apache-rat:0.11"
 asm = { group = "org.ow2.asm", name="asm", version.ref="asm" }
 asm-tree = { group = "org.ow2.asm", name="asm-tree", version.ref="asm" }
-bytebuddy = "net.bytebuddy:byte-buddy:1.14.12"
-checkstyle = "com.puppycrawl.tools:checkstyle:10.3"
-commons-codec = "commons-codec:commons-codec:1.11"
+bytebuddy = "net.bytebuddy:byte-buddy:1.18.3"
+checkstyle = "com.puppycrawl.tools:checkstyle:10.26.1"
+commons-codec = "commons-codec:commons-codec:1.20.0"
 commmons-io = "commons-io:commons-io:2.2"
 docker-compose = "com.avast.gradle:gradle-docker-compose-plugin:0.17.5"
 forbiddenApis = "de.thetaphi:forbiddenapis:3.6"
 gradle-enterprise = "com.gradle:develocity-gradle-plugin:3.17.4"
 hamcrest = "org.hamcrest:hamcrest:2.1"
-httpcore = "org.apache.httpcomponents:httpcore:4.4.12"
+httpcore = "org.apache.httpcomponents:httpcore:4.4.16"
 httpclient = "org.apache.httpcomponents:httpclient:4.5.14"
-idea-ext = "gradle.plugin.org.jetbrains.gradle.plugin.idea-ext:gradle-idea-ext:1.1.4"
-javaparser = "com.github.javaparser:javaparser-core:3.18.0"
-json-schema-validator = "com.networknt:json-schema-validator:1.0.72"
-json-assert = "org.skyscreamer:jsonassert:1.5.0"
+idea-ext = "gradle.plugin.org.jetbrains.gradle.plugin.idea-ext:gradle-idea-ext:1.3"
+javaparser = "com.github.javaparser:javaparser-core:3.27.1"
+json-schema-validator = "com.networknt:json-schema-validator:1.5.9"
+json-assert = "org.skyscreamer:jsonassert:1.5.3"
 jackson-core = { group = "com.fasterxml.jackson.core", name="jackson-core", version.ref="jackson" }
 jackson-databind = { group = "com.fasterxml.jackson.core", name="jackson-databind", version.ref="jackson" }
 jackson-dataformat-yaml = { group = "com.fasterxml.jackson.dataformat", name="jackson-dataformat-yaml", version.ref="jackson" }
 jackson-platform = { group = "com.fasterxml.jackson", name="jackson-bom", version.ref="jackson" }
-jna = "net.java.dev.jna:jna:5.10.0"
+jna = "net.java.dev.jna:jna:5.18.1"
 junit = "junit:junit:4.13.2"
 junit5-platform = { group = "org.junit", name="junit-bom", version.ref="junit5" }
 junit5-jupiter = { group = "org.junit.jupiter", name="junit-jupiter", version.ref="junit5" }
@@ -38,12 +38,12 @@ junit5-vintage = { group = "org.junit.vintage", name="junit-vintage-engine", ver
 maven-model = "org.apache.maven:maven-model:3.6.2"
 mockito-core = "org.mockito:mockito-core:1.9.5"
 nebula-info = "com.netflix.nebula:gradle-info-plugin:11.3.3"
-reflections = "org.reflections:reflections:0.9.12"
+reflections = "org.reflections:reflections:0.10.2"
 shadow-plugin = "com.github.breskeby:shadow:3b035f2"
-snakeyaml = { group = "org.yaml", name = "snakeyaml", version = { strictly = "2.0" } }
+snakeyaml = { group = "org.yaml", name = "snakeyaml", version = { strictly = "2.5" } }
 spock-core = { group = "org.spockframework", name="spock-core", version.ref="spock" }
 spock-junit4 = { group = "org.spockframework", name="spock-junit4", version.ref="spock" }
 spock-platform = { group = "org.spockframework", name="spock-bom", version.ref="spock" }
 spotless-plugin = "com.diffplug.spotless:spotless-plugin-gradle:6.25.0"
-wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.23.2"
-xmlunit-core = "org.xmlunit:xmlunit-core:2.8.2"
+wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.35.2"
+xmlunit-core = "org.xmlunit:xmlunit-core:2.11.0"

gradle/verification-metadata.xml

@@ -799,6 +799,11 @@
             <sha256 value="e2b3f8a191b0b401b75c2c4542d3d1719814a4212e6920fae4f2f940678bfd99" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.gradle" name="develocity-gradle-plugin" version="3.19.2">
+         <artifact name="develocity-gradle-plugin-3.19.2.jar">
+            <sha256 value="fc611e8858a901619831ea1d9efd289db7fea28a0ca3d091abdd363365d9512b" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.h2database" name="h2" version="1.4.197">
          <artifact name="h2-1.4.197.jar">
             <sha256 value="37f5216e14af2772930dff9b8734353f0a80e89ba3f33e065441de6537c5e842" origin="Generated by Gradle"/>
@@ -1966,6 +1971,11 @@
             <sha256 value="27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.commons" name="commons-compress" version="1.28.0">
+         <artifact name="commons-compress-1.28.0.jar">
+            <sha256 value="e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.commons" name="commons-compress" version="1.4.1">
          <artifact name="commons-compress-1.4.1.jar">
             <sha256 value="28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86" origin="Generated by Gradle"/>
@@ -3612,6 +3622,11 @@
             <sha256 value="6cd91991323dd7b2fb28ca93d7ac12af5a86a2f53279e2b35827b30313fd0b9f" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.fusesource.jansi" name="jansi" version="2.4.2">
+         <artifact name="jansi-2.4.2.jar">
+            <sha256 value="0b7b8b003a90ea491579b62f5118828e45112914c65589b00faa49d6ec785839" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.fusesource.leveldbjni" name="leveldbjni-all" version="1.8">
          <artifact name="leveldbjni-all-1.8.jar">
             <sha256 value="c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe" origin="Generated by Gradle"/>
@@ -4207,6 +4222,11 @@
             <sha256 value="62f4b3bc436045c1acb5c3ba2d8ec556ec3369093d7f5d06c747eb04b56d52b1" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.ow2.asm" name="asm-tree" version="9.9.1">
+         <artifact name="asm-tree-9.9.1.jar">
+            <sha256 value="0f3555096b720b820bbacab0b515589bee0200bee099bda14c561738ae837ba1" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.ow2.asm" name="asm-util" version="7.2">
          <artifact name="asm-util-7.2.jar">
             <sha256 value="6e24913b021ffacfe8e7e053d6e0ccc731941148cfa078d4f1ed3d96904530f8" origin="Generated by Gradle"/>

libs/plugin-scanner/build.gradle

@@ -21,7 +21,7 @@ dependencies {
   api project(":libs:elasticsearch-x-content")
 
   api 'org.ow2.asm:asm:9.7'
-  api 'org.ow2.asm:asm-tree:9.7'
+  api 'org.ow2.asm:asm-tree:9.9.1'
 
   testImplementation "junit:junit:${versions.junit}"
   testImplementation(project(":test:framework")) {

libs/tdigest/build.gradle

@@ -27,7 +27,7 @@ dependencies {
   testImplementation(project(":test:framework")) {
     exclude group: 'org.elasticsearch', module: 'elasticsearch-tdigest'
   }
-  testImplementation 'org.junit.jupiter:junit-jupiter:5.8.1'
+  testImplementation 'org.junit.jupiter:junit-jupiter:5.14.1'
 }
 
 tasks.named('forbiddenApisMain').configure {

libs/x-content/impl/build.gradle

@@ -13,7 +13,7 @@ base {
   archivesName = "x-content-impl"
 }
 
-String jacksonVersion = "2.17.2"
+String jacksonVersion = "2.20.1"
 
 dependencies {
   compileOnly project(':libs:elasticsearch-core')

modules/apm/build.gradle

@@ -12,14 +12,14 @@ esplugin {
   classname 'org.elasticsearch.telemetry.apm.APM'
 }
 
-def otelVersion = '1.31.0'
+def otelVersion = '1.57.0'
 def otelSemconvVersion = '1.21.0-alpha'
 
 dependencies {
   implementation "io.opentelemetry:opentelemetry-api:${otelVersion}"
   implementation "io.opentelemetry:opentelemetry-context:${otelVersion}"
   implementation "io.opentelemetry:opentelemetry-semconv:${otelSemconvVersion}"
-  runtimeOnly    "co.elastic.apm:elastic-apm-agent:1.44.0"
+  runtimeOnly    "co.elastic.apm:elastic-apm-agent:1.55.2"
 }
 
 tasks.named("dependencyLicenses").configure {

modules/ingest-attachment/build.gradle

@@ -21,24 +21,24 @@ esplugin {
 // when updating tika, please review it's parent pom : https://repo1.maven.org/maven2/org/apache/tika/tika-parent
 // and manually update the transitive dependencies here
 def versions = [
-  'tika'  : '2.9.2',
+  'tika'  : '2.9.4',
   'pdfbox': '2.0.31',
-  'poi'   : '5.2.5',
+  'poi'   : '5.5.1',
   'sparsebitset' : '1.3', //poi dependency: https://repo1.maven.org/maven2/org/apache/poi/poi/
   'mime4j': '0.8.11',
-  'commonsCodec': '1.16.1',
-  'slf4' : '2.0.10',
-  'xz' : '1.9',
+  'commonsCodec': '1.20.0',
+  'slf4' : '2.0.17',
+  'xz' : '1.11',
   'commonsIo' : '2.15.1',
   //intentionally using the elder "juniversalchardet:juniversalchardet" rather than the newer "com.github.albfernandez:juniversalchardet"
   //since the "com.github.albfernandez" fork has some problems with Chinese.
   'juniversalchardet' : '1.0.3',
   'tagsoup' : '1.2.1',
   'jempbox' : '1.8.17',
   'xmlbeans' : '5.2.0', //poi-ooxml dependency: https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml/
-  'commonsCollections4' : '4.4',
-  'commonsCompress' : '1.26.1',
-  'commonsLang3' :'3.14.0',
+  'commonsCollections4' : '4.5.0',
+  'commonsCompress' : '1.28.0',
+  'commonsLang3' :'3.20.0',
   'commonsMath3' : '3.6.1'
 ]