Update dependencies to fix Vulnerability alerts

Author: oyeliseiev-ua

.github/workflows/release.yml

@@ -36,7 +36,6 @@ jobs:
           java-version: '11'
           distribution: 'temurin'
           cache: maven
-          settings-path: ci/settings.xml
       - name: Import GPG key
         run: |
           openssl enc -d -aes-256-cbc -K ${{ secrets.ENCRYPTION_KEY }} \
@@ -45,6 +44,4 @@ jobs:
           gpg --import ci/secring.asc
       - name: Release to Maven Central
         if: ${{ success() }}
-        run: mvn clean deploy -DskipTests \
-          -Dsonatype.username=${{ secrets.SONATYPE_USERNAME }} \
-          -Dsonatype.password=${{ secrets.SONATYPE_PASSWORD }}
+        run: mvn -s ci/settings.xml clean deploy -DskipTests

ci/settings.xml

@@ -20,8 +20,8 @@
     <servers>
         <server>
             <id>ossrh</id>
-            <username>${sonatype.username}</username>
-            <password>${sonatype.password}</password>
+            <username>${secrets.SONATYPE_USERNAME}</username>
+            <password>${secrets.SONATYPE_PASSWORD}</password>
         </server>
     </servers>
 </settings>

pom.xml

@@ -20,7 +20,7 @@
         <osgi.version>6.0.0</osgi.version>
         <osgi.compendium.version>5.0.0</osgi.compendium.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <logback.version>1.5.6</logback.version>
+        <logback.version>1.5.13</logback.version>
         <logback-java8.version>1.3.12</logback-java8.version>
         <jacoco.version>0.8.12</jacoco.version>
         <waffle-jna.version>3.3.0</waffle-jna.version>
@@ -81,7 +81,7 @@
             <dependency>
                 <groupId>software.amazon.awssdk</groupId>
                 <artifactId>bom</artifactId>
-                <version>2.21.1</version>
+                <version>2.31.50</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>