Bumped up dependency versions

Author: rjrudin

build.gradle

@@ -2,7 +2,7 @@ plugins {
 	id "java-library"
 	id "maven-publish"
 	id "signing"
-  id "com.github.jk1.dependency-license-report" version "1.3"
+  id "com.github.jk1.dependency-license-report" version "1.17"
 	id "net.saliman.properties" version "1.5.1"
 	id "io.snyk.gradle.plugin.snykplugin" version "0.4"
 }
@@ -16,27 +16,29 @@ targetCompatibility = "8"
 repositories {
 	mavenLocal()
 	mavenCentral()
-
-	// Still needed for marklogic-junit5
-	jcenter()
 }
 
 dependencies {
   api 'com.marklogic:ml-javaclient-util:4.3.0'
-  api 'org.springframework:spring-web:5.3.7'
+  api 'org.springframework:spring-web:5.3.9'
+	// Match the version of what Java Client 5.5.0 expects
+	api 'com.fasterxml.jackson.core:jackson-databind:2.11.1'
 
 	implementation 'jaxen:jaxen:1.2.0'
 	implementation 'org.apache.httpcomponents:httpclient:4.5.13'
 	implementation 'org.jdom:jdom2:2.0.6'
 
 	// Forcing httpclient to use this to address https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
-	implementation 'commons-codec:commons-codec:1.13'
+	implementation 'commons-codec:commons-codec:1.15'
 
 	// For EqualsBuilder; added in 3.8.1 to support detecting if a mimetype's properties have changed or not
 	implementation "org.apache.commons:commons-lang3:3.12.0"
 
 	// For PreviewInterceptor; can be excluded if that feature is not used
-	implementation "com.flipkart.zjsonpatch:zjsonpatch:0.4.11"
+	implementation("com.flipkart.zjsonpatch:zjsonpatch:0.4.11") {
+		// Prefer the api version declared above
+		exclude module: "jackson-databind"
+	}
 
 	// Required for Java 11
 	implementation "javax.xml.bind:jaxb-api:2.3.1"
@@ -45,17 +47,17 @@ dependencies {
 
 	// Don't want to include this in the published jar, just the executable jar
 	compileOnly "com.beust:jcommander:1.78"
-	compileOnly "ch.qos.logback:logback-classic:1.2.3"
+	compileOnly "ch.qos.logback:logback-classic:1.2.4"
 
-	testImplementation "org.junit.jupiter:junit-jupiter:5.7.1"
-	testImplementation 'org.springframework:spring-test:5.3.7'
-	testImplementation 'commons-io:commons-io:2.8.0'
+	testImplementation "org.junit.jupiter:junit-jupiter:5.7.2"
+	testImplementation 'org.springframework:spring-test:5.3.9'
+	testImplementation 'commons-io:commons-io:2.11.0'
 	testImplementation 'xmlunit:xmlunit:1.6'
 
 	// Forcing Spring to use logback for testing instead of commons-logging
-	testImplementation "ch.qos.logback:logback-classic:1.2.3"
-	testImplementation "org.slf4j:jcl-over-slf4j:1.7.30"
-	testImplementation "org.slf4j:slf4j-api:1.7.30"
+	testImplementation "ch.qos.logback:logback-classic:1.2.4"
+	testImplementation "org.slf4j:jcl-over-slf4j:1.7.31"
+	testImplementation "org.slf4j:slf4j-api:1.7.31"
 }
 
 // This ensures that Gradle includes in the published jar any non-java files under src/main/java