Update dependencies to fix Vulnerability alerts

Author: oyeliseiev-ua

.github/workflows/release.yml

@@ -36,15 +36,16 @@ jobs:
           java-version: '11'
           distribution: 'temurin'
           cache: maven
-          settings-path: ci/settings.xml
       - name: Import GPG key
         run: |
           openssl enc -d -aes-256-cbc -K ${{ secrets.ENCRYPTION_KEY }} \
           -iv ${{ secrets.ENCRYPTION_IV }} -in ci/secring.asc.enc \
           -out ci/secring.asc
           gpg --import ci/secring.asc
+      - name: Copy Maven Settings
+        run: |
+          mkdir -p ~/.m2
+          cp ci/settings.xml ~/.m2/settings.xml
       - name: Release to Maven Central
         if: ${{ success() }}
-        run: mvn clean deploy -DskipTests \
-          -Dsonatype.username=${{ secrets.SONATYPE_USERNAME }} \
-          -Dsonatype.password=${{ secrets.SONATYPE_PASSWORD }}
+        run: mvn -s ci/settings.xml clean deploy -DskipTests -Dsonatype.username=${{ secrets.SONATYPE_USER }} -Dsonatype.password=${{ secrets.SONATYPE_PASSWORD }}

pom.xml

@@ -20,7 +20,7 @@
         <osgi.version>6.0.0</osgi.version>
         <osgi.compendium.version>5.0.0</osgi.compendium.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <logback.version>1.5.6</logback.version>
+        <logback.version>1.5.13</logback.version>
         <logback-java8.version>1.3.12</logback-java8.version>
         <jacoco.version>0.8.12</jacoco.version>
         <waffle-jna.version>3.3.0</waffle-jna.version>
@@ -81,7 +81,7 @@
             <dependency>
                 <groupId>software.amazon.awssdk</groupId>
                 <artifactId>bom</artifactId>
-                <version>2.21.1</version>
+                <version>2.31.50</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>