Dependency adjustments

[hazendaz]

• For commons io and commons pool2, those are coming into runtime. In case of commons io, its really old due to resolution issues and for commons pool2, that comes via the xml code this project has that hasn't been updated in something like 14 years. Added into dependency management to ensure when we are providing those public facing items, we are providing secure and maintained versions. This is especially important as some cve's have been flagged recently on commons modules.

• Maven finally backported to maven 3 for the testing harness so that is applied, I initially was adding additional overrides but have removed the guice override I had earlier as that is now fixed.

• For dependabot, I added snippet to it so it starts updating actions. I had been relying on my usage of my forked Renovate usage to do that so this will set it correctly for this repo, I did update the latest action update already here as well.

• For github actions, I updated the jdks involved to match current expectations.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[hazendaz]

@mathieucarbou Can you take a look once jobs finish here? Also why is CodeRabbit that is showing up here, is that intentional, it says its turned off on this repo?

[hazendaz]

@mathieucarbou Ping...

[hazendaz]

@mathieucarbou Ping...

[hazendaz]

I'd merge but I don't have that level of permission :)

[mathieucarbou]

I'd merge but I don't have that level of permission :)

Sorry! Yes you have, but PRs need at least 1 review to go through if I remember.

[mathieucarbou]

@hazendaz : can you try ? you should now see all green buttons right ?

[mathieucarbou]

@hazendaz sorry I didn't see all the pings... I was quite over busy the past weeks.

[hazendaz]

@mathieucarbou No problem! Thanks.