dependabot: bump net.bytebuddy:byte-buddy-agent from 1.17.7 to 1.18.4 (#1643)

* dependabot: bump net.bytebuddy:byte-buddy-agent from 1.17.7 to 1.18.4

Bumps [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) from 1.17.7 to 1.18.4.
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.7...byte-buddy-1.18.4)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Upgrade urllib3 to >=2.6.3 to fix CVEs

Signed-off-by: Daniel Widdis <widdis@gmail.com>

* dependabot: bump com.google.code.gson:gson from 2.11.0 to 2.13.2

Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.11.0 to 2.13.2.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.11.0...gson-parent-2.13.2)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* dependabot: bump com.netflix.nebula.ospackage from 12.1.0 to 12.2.0

Bumps com.netflix.nebula.ospackage from 12.1.0 to 12.2.0.

---
updated-dependencies:
- dependency-name: com.netflix.nebula.ospackage
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel Widdis <widdis@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Widdis <widdis@gmail.com>

Author: dependabot[bot]

build.gradle

@@ -83,7 +83,7 @@ buildscript {
 }
 
 plugins {
-    id 'com.netflix.nebula.ospackage' version "12.1.0"
+    id 'com.netflix.nebula.ospackage' version "12.2.0"
     id "com.diffplug.spotless" version "6.25.0"
     id 'java-library'
     id 'org.gradle.test-retry' version '1.6.0'
@@ -152,7 +152,7 @@ dependencies {
     implementation 'com.google.guava:guava:33.4.5-jre'
     implementation 'com.google.guava:failureaccess:1.0.3'
     implementation 'org.apache.commons:commons-math3:3.6.1'
-    implementation 'com.google.code.gson:gson:2.11.0'
+    implementation 'com.google.code.gson:gson:2.13.2'
     implementation 'com.yahoo.datasketches:sketches-core:0.13.4'
     implementation 'com.yahoo.datasketches:memory:0.12.2'
     implementation 'org.apache.commons:commons-pool2:2.12.0'
@@ -187,8 +187,8 @@ dependencies {
     testImplementation 'pl.pragmatists:JUnitParams:1.1.1'
     testImplementation 'org.mockito:mockito-core:5.20.0'
     testImplementation 'org.objenesis:objenesis:3.4'
-    testImplementation 'net.bytebuddy:byte-buddy:1.17.7'
-    testImplementation 'net.bytebuddy:byte-buddy-agent:1.17.7'
+    testImplementation 'net.bytebuddy:byte-buddy:1.18.4'
+    testImplementation 'net.bytebuddy:byte-buddy-agent:1.18.4'
     testCompileOnly 'org.apiguardian:apiguardian-api:1.1.2'
     // jupiter is required to run unit tests not inherited from OpenSearchTestCase (e.g., PreviousValueImputerTests)
     testImplementation 'org.junit.jupiter:junit-jupiter-api:5.14.2'
@@ -264,14 +264,13 @@ configurations.all {
 
         force "org.mockito:mockito-core:5.20.0"
         force "org.objenesis:objenesis:3.4"
-        force "net.bytebuddy:byte-buddy:1.17.7"
-        force "net.bytebuddy:byte-buddy-agent:1.17.7"
-        force "com.google.code.gson:gson:2.11.0"
+        force "net.bytebuddy:byte-buddy:1.18.4"
+        force "net.bytebuddy:byte-buddy-agent:1.18.4"
+        force "com.google.code.gson:gson:2.13.2"
         force "junit:junit:4.13.2"
 
         force "com.google.guava:guava:33.4.5-jre" // CVE for 31.1
         force("com.fasterxml.jackson.core:jackson-core:${versions.jackson}")
-        force "org.eclipse.platform:org.eclipse.core.runtime:3.29.0" // CVE for < 3.29.0
         force "org.ow2.asm:asm:9.7.1"
     }
 }

dataGeneration/requirements.txt

@@ -4,4 +4,4 @@ numpy==1.26.4
 opensearch_py==3.1.0
 retry2==0.9.2
 scipy==1.16.1
-urllib3>=2.5.0
+urllib3>=2.6.3