build(deps): upgrade vulnerable dependencies

Author: slisson

gradle.properties

@@ -1,12 +1,3 @@
-org.gradle.jvmargs=-Xmx512m "-XX:MaxMetaspaceSize=2g"
+org.gradle.jvmargs=-Xmx1024m "-XX:MaxMetaspaceSize=2g"
 systemProp.org.gradle.internal.http.socketTimeout=120000
 kotlin.daemon.jvmargs=-Xmx2G
-
-kotlinVersion=1.8.20
-kotlinCoroutinesVersion=1.6.4
-ktorVersion=2.2.4
-kotlinLoggingVersion=3.0.5
-kotlinxHtmlVersion=0.8.0
-kotlinxSerializationVersion=1.5.0
-modelixIncrementalVersion=0.1.4
-kotlinCollectionsImmutableVersion=0.3.5

gradle/libs.versions.toml

@@ -1,15 +1,36 @@
+## Generated by $ ./gradlew refreshVersionsCatalog
+
+[bundles]
+
+ignite = ["ignite-core", "ignite-spring", "ignite-indexing"]
+apache-cxf = ["apache-cxf-client", "apache-cxf-sse"]
+
+[plugins]
+
+kotlin-multiplatform = { id = "org.jetbrains.kotlin.multiplatform", version.ref = "kotlin" }
+kotlin-jvm = { id = "org.jetbrains.kotlin.jvm", version.ref = "kotlin" }
+kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
+gitVersion = { id = "com.palantir.git-version", version = "3.0.0" }
+ktlint = { id = "org.jlleitschuh.gradle.ktlint", version = "11.3.2" }
+spotless = { id = "com.diffplug.spotless", version = "6.18.0" }
+tasktree = { id = "com.dorongold.task-tree", version = "2.1.1" }
+modelix-mps-buildtools = { id = "org.modelix.mps.build-tools", version = "1.0.11" }
+
 [versions]
-kotlin = "1.8.20"
+
+kotlin = "1.8.21"
 kotlinCoroutines="1.6.4"
-ktor="2.2.4"
+ktor="2.3.0"
 kotlinHtml="0.8.0"
 kotlinSerialization="1.5.0"
-ignite="2.13.0"
+ignite="2.14.0"
+apacheCxf="3.5.5"
 
 [libraries]
+
 kotlin-stdlib-common = { group = "org.jetbrains.kotlin", name = "kotlin-stdlib-common", version.ref = "kotlin" }
 kotlin-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "kotlinSerialization" }
-kotlin-serialization-yaml = { group = "com.charleskorn.kaml", name = "kaml", version = "0.40.0" }
+kotlin-serialization-yaml = { group = "com.charleskorn.kaml", name = "kaml", version = "0.53.0" }
 kotlin-logging = { group = "io.github.microutils", name = "kotlin-logging", version = "3.0.5" }
 kotlin-collections-immutable = { group = "org.jetbrains.kotlinx", name = "kotlinx-collections-immutable", version = "0.3.5" }
 kotlin-datetime = { group = "org.jetbrains.kotlinx", name = "kotlinx-datetime", version = "0.4.0" }
@@ -43,26 +64,22 @@ ktor-serialization-json = { group = "io.ktor", name = "ktor-serialization-kotlin
 keycloak-authz-client = { group = "org.keycloak", name = "keycloak-authz-client", version = "18.0.1" }
 guava = { group = "com.google.guava", name = "guava", version = "31.1-jre" }
 modelix-incremental = { group = "org.modelix", name = "incremental", version = "0.1.4" }
-kotlinpoet = { group = "com.squareup", name = "kotlinpoet", version = "1.12.0" }
-vavr = { group = "io.vavr", name = "vavr", version = "0.10.3" }
-apache-commons-lang = { group = "org.apache.commons", name = "commons-lang3", version = "3.11" }
-apache-commons-io = { group = "commons-io", name = "commons-io", version = "2.7" }
+kotlinpoet = { group = "com.squareup", name = "kotlinpoet", version = "1.13.1" }
+vavr = { group = "io.vavr", name = "vavr", version = "0.10.4" }
+apache-commons-lang = { group = "org.apache.commons", name = "commons-lang3", version = "3.12.0" }
+apache-commons-io = { group = "commons-io", name = "commons-io", version = "2.11.0" }
 apache-commons-collections = { group = "org.apache.commons", name = "commons-collections4", version = "4.4" }
 trove4j = { group = "net.sf.trove4j", name = "trove4j", version = "3.0.3" }
 
 ignite-core = { group = "org.apache.ignite", name = "ignite-core", version.ref = "ignite" }
 ignite-spring = { group = "org.apache.ignite", name = "ignite-spring", version.ref = "ignite" }
 ignite-indexing = { group = "org.apache.ignite", name = "ignite-indexing", version.ref = "ignite" }
 
-[bundles]
-ignite = ["ignite-core", "ignite-spring", "ignite-indexing"]
+logback-classic = { group = "ch.qos.logback", name = "logback-classic", version = "1.4.7" }
+postgresql = { group = "org.postgresql", name = "postgresql", version = "42.6.0" }
+jcommander = { group = "com.beust", name = "jcommander", version = "1.82" }
+cucumber-java = { group = "io.cucumber", name = "cucumber-java", version = "7.11.2" }
+junit = { group = "junit", name = "junit", version = "4.13.2" }
 
-[plugins]
-kotlin-multiplatform = { id = "org.jetbrains.kotlin.multiplatform", version.ref = "kotlin" }
-kotlin-jvm = { id = "org.jetbrains.kotlin.jvm", version.ref = "kotlin" }
-kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
-gitVersion = { id = "com.palantir.git-version", version = "0.13.0" }
-ktlint = { id = "org.jlleitschuh.gradle.ktlint", version = "10.3.0" }
-spotless = { id = "com.diffplug.spotless", version = "5.0.0" }
-tasktree = { id = "com.dorongold.task-tree", version = "2.1.0" }
-modelix-mps-buildtools = { id = "org.modelix.mps.build-tools", version = "1.0.11" }
+apache-cxf-sse = { group = "org.apache.cxf", name = "cxf-rt-rs-sse", version.ref = "apacheCxf" }
+apache-cxf-client = { group = "org.apache.cxf", name = "cxf-rt-rs-client", version.ref = "apacheCxf" }

model-api/src/commonMain/kotlin/org/modelix/model/api/IBranch.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api

model-api/src/commonMain/kotlin/org/modelix/model/api/IBranchListener.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api

model-api/src/commonMain/kotlin/org/modelix/model/api/IChildLink.kt

@@ -10,13 +10,14 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api
 
 interface IChildLink : ILink {
     val isMultiple: Boolean
+
     @Deprecated("use .targetConcept")
     val childConcept: IConcept
 }

model-api/src/commonMain/kotlin/org/modelix/model/api/IConcept.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api

model-api/src/commonMain/kotlin/org/modelix/model/api/IConceptReference.kt

@@ -17,7 +17,8 @@ import org.modelix.model.area.IArea
 
 interface IConceptReference {
     companion object {
-        private var deserializers: Map<Any, ((String)->IConceptReference?)> = LinkedHashMap()
+        private var deserializers: Map<Any, ((String) -> IConceptReference?)> = LinkedHashMap()
+
         @Deprecated("use ConceptReference()")
         fun deserialize(serialized: String?): ConceptReference? {
             if (serialized == null) return null
@@ -28,18 +29,23 @@ interface IConceptReference {
                 else -> throw RuntimeException("Multiple deserializers applicable to $serialized")
             }
         }
+
         @Deprecated("use ILanguageRepository.register")
         fun registerDeserializer(key: Any, deserializer: ((String) -> IConceptReference?)) {
             deserializers = deserializers + (key to deserializer)
         }
+
         @Deprecated("use ILanguageRepository.unregister")
         fun unregisterSerializer(key: Any) {
             deserializers = deserializers - key
         }
     }
+
     fun getUID(): String
+
     @Deprecated("use ILanguageRepository.resolveConcept")
     fun resolve(area: IArea?): IConcept?
+
     @Deprecated("use getUID()")
     fun serialize(): String
 }

model-api/src/commonMain/kotlin/org/modelix/model/api/IIdGenerator.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api

model-api/src/commonMain/kotlin/org/modelix/model/api/INode.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api

model-api/src/commonMain/kotlin/org/modelix/model/api/INodeReference.kt

@@ -10,7 +10,7 @@
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
- * under the License. 
+ * under the License.
  */
 
 package org.modelix.model.api