From 870a88a462e0d800201c9a17d34b7aeff0f68de0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Jan 2025 23:58:37 +0000
Subject: [PATCH] Bump the maven group across 4 directories with 19 updates

Bumps the maven group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| xalan:xalan | `2.7.1` | `2.7.3` |
| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `2.3.11` | `2.4.21` |
| commons-net:commons-net | `3.0.1` | `3.9.0` |
| commons-io:commons-io | `2.1` | `2.14.0` |
| commons-fileupload:commons-fileupload | `1.3.3` | `1.5` |
| org.apache.commons:commons-email | `1.4` | `1.5` |
| org.apache.xmlgraphics:xmlgraphics-commons | `2.3` | `2.6` |
| org.apache.xmlgraphics:batik-transcoder | `1.10` | `1.17` |
| xerces:xercesImpl | `2.11.0` | `2.12.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `24.1.1-jre` | `32.0.0-jre` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `1.3.174` | `2.2.220` |
| org.springframework.data:spring-data-jpa | `1.4.1.RELEASE` | `1.11.22.RELEASE` |
| org.apache.pdfbox:pdfbox | `2.0.19` | `2.0.24` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.14.3` | `1.15.3` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20140107` | `20231013` |
| [org.owasp.esapi:esapi](https://github.com/ESAPI/esapi-java-legacy) | `2.3.0.0` | `2.6.0.0` |
| [com.amazonaws:aws-java-sdk-s3](https://github.com/aws/aws-sdk-java) | `1.11.618` | `1.12.261` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.7` | `2.8.9` |
| [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.4.0` | `2.9.0` |

Bumps the maven group with 15 updates in the /common directory:

| Package | From | To |
| --- | --- | --- |
| xalan:xalan | `2.7.1` | `2.7.3` |
| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `2.3.11` | `2.4.21` |
| commons-net:commons-net | `3.0.1` | `3.9.0` |
| commons-io:commons-io | `2.1` | `2.14.0` |
| commons-fileupload:commons-fileupload | `1.3.3` | `1.5` |
| org.apache.commons:commons-email | `1.4` | `1.5` |
| org.apache.xmlgraphics:xmlgraphics-commons | `2.3` | `2.6` |
| org.apache.xmlgraphics:batik-transcoder | `1.10` | `1.17` |
| xerces:xercesImpl | `2.11.0` | `2.12.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `24.1.1-jre` | `32.0.0-jre` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `1.3.174` | `2.2.220` |
| org.springframework.data:spring-data-jpa | `1.4.1.RELEASE` | `1.11.22.RELEASE` |
| org.apache.pdfbox:pdfbox | `2.0.19` | `2.0.24` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.14.3` | `1.15.3` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20140107` | `20231013` |

Bumps the maven group with 16 updates in the /core directory:

| Package | From | To |
| --- | --- | --- |
| xalan:xalan | `2.7.1` | `2.7.3` |
| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `2.3.11` | `2.4.21` |
| commons-net:commons-net | `3.0.1` | `3.9.0` |
| commons-io:commons-io | `2.1` | `2.14.0` |
| commons-fileupload:commons-fileupload | `1.3.3` | `1.5` |
| org.apache.commons:commons-email | `1.4` | `1.5` |
| org.apache.xmlgraphics:xmlgraphics-commons | `2.3` | `2.6` |
| org.apache.xmlgraphics:batik-transcoder | `1.10` | `1.17` |
| xerces:xercesImpl | `2.11.0` | `2.12.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `24.1.1-jre` | `32.0.0-jre` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `1.3.174` | `2.2.220` |
| org.springframework.data:spring-data-jpa | `1.4.1.RELEASE` | `1.11.22.RELEASE` |
| org.apache.pdfbox:pdfbox | `2.0.19` | `2.0.24` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.14.3` | `1.15.3` |
| [org.owasp.esapi:esapi](https://github.com/ESAPI/esapi-java-legacy) | `2.3.0.0` | `2.6.0.0` |
| [com.amazonaws:aws-java-sdk-s3](https://github.com/aws/aws-sdk-java) | `1.11.618` | `1.12.261` |

Bumps the maven group with 16 updates in the /services directory:

| Package | From | To |
| --- | --- | --- |
| xalan:xalan | `2.7.1` | `2.7.3` |
| [org.codehaus.groovy:groovy-all](https://github.com/apache/groovy) | `2.3.11` | `2.4.21` |
| commons-net:commons-net | `3.0.1` | `3.9.0` |
| commons-io:commons-io | `2.1` | `2.14.0` |
| commons-fileupload:commons-fileupload | `1.3.3` | `1.5` |
| org.apache.commons:commons-email | `1.4` | `1.5` |
| org.apache.xmlgraphics:xmlgraphics-commons | `2.3` | `2.6` |
| org.apache.xmlgraphics:batik-transcoder | `1.10` | `1.17` |
| xerces:xercesImpl | `2.11.0` | `2.12.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `24.1.1-jre` | `32.0.0-jre` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `1.3.174` | `2.2.220` |
| org.springframework.data:spring-data-jpa | `1.4.1.RELEASE` | `1.11.22.RELEASE` |
| org.apache.pdfbox:pdfbox | `2.0.19` | `2.0.24` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.14.3` | `1.15.3` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.7` | `2.8.9` |
| [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.4.0` | `2.9.0` |



Updates `xalan:xalan` from 2.7.1 to 2.7.3

Updates `org.codehaus.groovy:groovy-all` from 2.3.11 to 2.4.21
- [Commits](https://github.com/apache/groovy/commits)

Updates `commons-net:commons-net` from 3.0.1 to 3.9.0

Updates `commons-io:commons-io` from 2.1 to 2.14.0

Updates `commons-fileupload:commons-fileupload` from 1.3.3 to 1.5

Updates `org.apache.commons:commons-email` from 1.4 to 1.5

Updates `org.apache.xmlgraphics:xmlgraphics-commons` from 2.3 to 2.6

Updates `org.apache.xmlgraphics:batik-transcoder` from 1.10 to 1.17

Updates `xerces:xercesImpl` from 2.11.0 to 2.12.2

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.h2database:h2` from 1.3.174 to 2.2.220
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

Updates `org.springframework.data:spring-data-jpa` from 1.4.1.RELEASE to 1.11.22.RELEASE

Updates `org.apache.pdfbox:pdfbox` from 2.0.19 to 2.0.24

Updates `org.jsoup:jsoup` from 1.14.3 to 1.15.3
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/jsoup-1.15.3/CHANGES)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.14.3...jsoup-1.15.3)

Updates `org.json:json` from 20140107 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `org.owasp.esapi:esapi` from 2.3.0.0 to 2.6.0.0
- [Release notes](https://github.com/ESAPI/esapi-java-legacy/releases)
- [Changelog](https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.0-readme-crypto-changes.html)
- [Commits](https://github.com/ESAPI/esapi-java-legacy/compare/esapi-2.3.0.0...esapi-2.6.0.0)

Updates `com.amazonaws:aws-java-sdk-s3` from 1.11.618 to 1.12.261
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.618...1.12.261)

Updates `com.google.code.gson:gson` from 2.7 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.7...gson-parent-2.8.9)

Updates `com.jayway.jsonpath:json-path` from 2.4.0 to 2.9.0
- [Release notes](https://github.com/jayway/JsonPath/releases)
- [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md)
- [Commits](https://github.com/jayway/JsonPath/compare/json-path-2.4.0...json-path-2.9.0)

Updates `xalan:xalan` from 2.7.1 to 2.7.3

Updates `org.codehaus.groovy:groovy-all` from 2.3.11 to 2.4.21
- [Commits](https://github.com/apache/groovy/commits)

Updates `commons-net:commons-net` from 3.0.1 to 3.9.0

Updates `commons-io:commons-io` from 2.1 to 2.14.0

Updates `commons-fileupload:commons-fileupload` from 1.3.3 to 1.5

Updates `org.apache.commons:commons-email` from 1.4 to 1.5

Updates `org.apache.xmlgraphics:xmlgraphics-commons` from 2.3 to 2.6

Updates `org.apache.xmlgraphics:batik-transcoder` from 1.10 to 1.17

Updates `xerces:xercesImpl` from 2.11.0 to 2.12.2

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.h2database:h2` from 1.3.174 to 2.2.220
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

Updates `org.springframework.data:spring-data-jpa` from 1.4.1.RELEASE to 1.11.22.RELEASE

Updates `org.apache.pdfbox:pdfbox` from 2.0.19 to 2.0.24

Updates `org.jsoup:jsoup` from 1.14.3 to 1.15.3
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/jsoup-1.15.3/CHANGES)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.14.3...jsoup-1.15.3)

Updates `org.json:json` from 20140107 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `xalan:xalan` from 2.7.1 to 2.7.3

Updates `org.codehaus.groovy:groovy-all` from 2.3.11 to 2.4.21
- [Commits](https://github.com/apache/groovy/commits)

Updates `commons-net:commons-net` from 3.0.1 to 3.9.0

Updates `commons-io:commons-io` from 2.1 to 2.14.0

Updates `commons-fileupload:commons-fileupload` from 1.3.3 to 1.5

Updates `org.apache.commons:commons-email` from 1.4 to 1.5

Updates `org.apache.xmlgraphics:xmlgraphics-commons` from 2.3 to 2.6

Updates `org.apache.xmlgraphics:batik-transcoder` from 1.10 to 1.17

Updates `xerces:xercesImpl` from 2.11.0 to 2.12.2

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.h2database:h2` from 1.3.174 to 2.2.220
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

Updates `org.springframework.data:spring-data-jpa` from 1.4.1.RELEASE to 1.11.22.RELEASE

Updates `org.apache.pdfbox:pdfbox` from 2.0.19 to 2.0.24

Updates `org.jsoup:jsoup` from 1.14.3 to 1.15.3
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/jsoup-1.15.3/CHANGES)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.14.3...jsoup-1.15.3)

Updates `org.owasp.esapi:esapi` from 2.3.0.0 to 2.6.0.0
- [Release notes](https://github.com/ESAPI/esapi-java-legacy/releases)
- [Changelog](https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.0-readme-crypto-changes.html)
- [Commits](https://github.com/ESAPI/esapi-java-legacy/compare/esapi-2.3.0.0...esapi-2.6.0.0)

Updates `com.amazonaws:aws-java-sdk-s3` from 1.11.618 to 1.12.261
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.618...1.12.261)

Updates `xalan:xalan` from 2.7.1 to 2.7.3

Updates `org.codehaus.groovy:groovy-all` from 2.3.11 to 2.4.21
- [Commits](https://github.com/apache/groovy/commits)

Updates `commons-net:commons-net` from 3.0.1 to 3.9.0

Updates `commons-io:commons-io` from 2.1 to 2.14.0

Updates `commons-fileupload:commons-fileupload` from 1.3.3 to 1.5

Updates `org.apache.commons:commons-email` from 1.4 to 1.5

Updates `org.apache.xmlgraphics:xmlgraphics-commons` from 2.3 to 2.6

Updates `org.apache.xmlgraphics:batik-transcoder` from 1.10 to 1.17

Updates `xerces:xercesImpl` from 2.11.0 to 2.12.2

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.h2database:h2` from 1.3.174 to 2.2.220
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

Updates `org.springframework.data:spring-data-jpa` from 1.4.1.RELEASE to 1.11.22.RELEASE

Updates `org.apache.pdfbox:pdfbox` from 2.0.19 to 2.0.24

Updates `org.jsoup:jsoup` from 1.14.3 to 1.15.3
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/jsoup-1.15.3/CHANGES)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.14.3...jsoup-1.15.3)

Updates `com.google.code.gson:gson` from 2.7 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.7...gson-parent-2.8.9)

Updates `com.jayway.jsonpath:json-path` from 2.4.0 to 2.9.0
- [Release notes](https://github.com/jayway/JsonPath/releases)
- [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md)
- [Commits](https://github.com/jayway/JsonPath/compare/json-path-2.4.0...json-path-2.9.0)

---
updated-dependencies:
- dependency-name: xalan:xalan
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.groovy:groovy-all
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-net:commons-net
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-fileupload:commons-fileupload
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-email
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:xmlgraphics-commons
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:batik-transcoder
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xerces:xercesImpl
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.h2database:h2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework.data:spring-data-jpa
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.pdfbox:pdfbox
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.owasp.esapi:esapi
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.jayway.jsonpath:json-path
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: xalan:xalan
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.groovy:groovy-all
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-net:commons-net
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-fileupload:commons-fileupload
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-email
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:xmlgraphics-commons
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:batik-transcoder
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xerces:xercesImpl
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.h2database:h2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework.data:spring-data-jpa
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.pdfbox:pdfbox
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xalan:xalan
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.groovy:groovy-all
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-net:commons-net
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-fileupload:commons-fileupload
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-email
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:xmlgraphics-commons
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:batik-transcoder
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xerces:xercesImpl
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.h2database:h2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework.data:spring-data-jpa
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.pdfbox:pdfbox
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.owasp.esapi:esapi
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xalan:xalan
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.groovy:groovy-all
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-net:commons-net
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-fileupload:commons-fileupload
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-email
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:xmlgraphics-commons
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.xmlgraphics:batik-transcoder
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: xerces:xercesImpl
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.h2database:h2
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.springframework.data:spring-data-jpa
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.pdfbox:pdfbox
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.jayway.jsonpath:json-path
  dependency-type: direct:development
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 common/pom.xml   |  2 +-
 core/pom.xml     |  4 ++--
 pom.xml          | 28 ++++++++++++++--------------
 services/pom.xml |  4 ++--
 4 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/common/pom.xml b/common/pom.xml
index f9d084aca219..f9ab3b8b3796 100644
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -163,7 +163,7 @@
     <dependency>
       <groupId>org.json</groupId>
       <artifactId>json</artifactId>
-      <version>20140107</version>
+      <version>20231013</version>
       <scope>compile</scope>
     </dependency>
   </dependencies>
diff --git a/core/pom.xml b/core/pom.xml
index 6ae1dc249f3a..c83c248eaff5 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -540,7 +540,7 @@
     <dependency>
       <groupId>org.owasp.esapi</groupId>
       <artifactId>esapi</artifactId>
-      <version>2.3.0.0</version>
+      <version>2.6.0.0</version>
       <exclusions>
         <exclusion>
           <groupId>log4j</groupId>
@@ -570,7 +570,7 @@
     <dependency>
       <groupId>com.amazonaws</groupId>
       <artifactId>aws-java-sdk-s3</artifactId>
-      <version>1.11.618</version>
+      <version>1.12.261</version>
     </dependency>
     <dependency>
       <groupId>org.jasypt</groupId>
diff --git a/pom.xml b/pom.xml
index d3e42a6cf17a..f19774689fb3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -356,7 +356,7 @@
       <dependency>
         <groupId>xalan</groupId>
         <artifactId>xalan</artifactId>
-        <version>2.7.1</version>
+        <version>2.7.3</version>
       </dependency>
       <dependency>
         <groupId>net.sf.saxon</groupId>
@@ -389,7 +389,7 @@
       <dependency>
         <groupId>org.codehaus.groovy</groupId>
         <artifactId>groovy-all</artifactId>
-        <version>2.3.11</version>
+        <version>2.4.21</version>
       </dependency>
 
       <!-- universal character set detector -->
@@ -466,7 +466,7 @@
       <dependency>
         <groupId>commons-net</groupId>
         <artifactId>commons-net</artifactId>
-        <version>3.0.1</version>
+        <version>3.9.0</version>
       </dependency>
       <dependency>
         <groupId>commons-digester</groupId>
@@ -486,12 +486,12 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.1</version>
+        <version>2.14.0</version>
       </dependency>
       <dependency>
         <groupId>commons-fileupload</groupId>
         <artifactId>commons-fileupload</artifactId>
-        <version>1.3.3</version>
+        <version>1.5</version>
       </dependency>
       <dependency>
         <groupId>commons-collections</groupId>
@@ -501,12 +501,12 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-email</artifactId>
-        <version>1.4</version>
+        <version>1.5</version>
       </dependency>
       <dependency>
         <groupId>org.apache.xmlgraphics</groupId>
         <artifactId>xmlgraphics-commons</artifactId>
-        <version>2.3</version>
+        <version>2.6</version>
       </dependency>
       <dependency>
         <groupId>avalon-framework</groupId>
@@ -540,7 +540,7 @@
       <dependency>
         <groupId>org.apache.xmlgraphics</groupId>
         <artifactId>batik-transcoder</artifactId>
-        <version>1.10</version>
+        <version>1.17</version>
       </dependency>
       <dependency>
         <groupId>org.slf4j</groupId>
@@ -570,7 +570,7 @@
       <dependency>
         <groupId>xerces</groupId>
         <artifactId>xercesImpl</artifactId>
-        <version>2.11.0</version>
+        <version>2.12.2</version>
       </dependency>
       <dependency>
         <groupId>xml-apis</groupId>
@@ -880,7 +880,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>24.1.1-jre</version>
+        <version>32.0.0-jre</version>
       </dependency>
 
       <!-- Monitoring libraries -->
@@ -953,7 +953,7 @@
       <dependency>
         <groupId>com.h2database</groupId>
         <artifactId>h2</artifactId>
-        <version>1.3.174</version>
+        <version>2.2.220</version>
       </dependency>
       <dependency>
         <groupId>org.postgis</groupId>
@@ -1098,7 +1098,7 @@
       <dependency>
         <groupId>org.springframework.data</groupId>
         <artifactId>spring-data-jpa</artifactId>
-        <version>1.4.1.RELEASE</version>
+        <version>1.11.22.RELEASE</version>
       </dependency>
 
       <dependency>
@@ -1183,12 +1183,12 @@
       <dependency>
         <groupId>org.apache.pdfbox</groupId>
         <artifactId>pdfbox</artifactId>
-        <version>2.0.19</version>
+        <version>2.0.24</version>
       </dependency>
       <dependency>
         <groupId>org.jsoup</groupId>
         <artifactId>jsoup</artifactId>
-        <version>1.14.3</version>
+        <version>1.15.3</version>
       </dependency>
 
       <dependency>
diff --git a/services/pom.xml b/services/pom.xml
index 730f03887bde..a8d7c6f9be77 100644
--- a/services/pom.xml
+++ b/services/pom.xml
@@ -123,14 +123,14 @@
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.7</version>
+      <version>2.8.9</version>
       <scope>test</scope>
     </dependency>
 
     <dependency>
       <groupId>com.jayway.jsonpath</groupId>
       <artifactId>json-path</artifactId>
-      <version>2.4.0</version>
+      <version>2.9.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>