From 36b0bcd879afa5ec3bd5f3dad1c0b63902adc79d Mon Sep 17 00:00:00 2001
From: Thomas <>
Date: Thu, 21 Dec 2023 07:27:10 +0100
Subject: chore(core): update third-party libs

---
 pom.xml | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/pom.xml b/pom.xml
index 3d3079f8..09fe4e14 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,25 +46,25 @@
     <io.grpc-core.version>1.53.0</io.grpc-core.version>
 
     <!-- Other third-party libs -->
-    <spring-boot-starter-web.version>3.1.3</spring-boot-starter-web.version>
-    <org.springframework.version>6.0.11</org.springframework.version>
-    <org.apache.tomcat.embed.version>10.1.13</org.apache.tomcat.embed.version>
+    <spring-boot-starter-web.version>3.1.6</spring-boot-starter-web.version>
+    <org.springframework.version>6.0.15</org.springframework.version>
+    <org.apache.tomcat.embed.version>10.1.17</org.apache.tomcat.embed.version>
     <org.opensaml.version>5.0.0</org.opensaml.version>
-    <org.apache.santuario.xmlsec.version>3.0.2</org.apache.santuario.xmlsec.version>
+    <org.apache.santuario.xmlsec.version>3.0.3</org.apache.santuario.xmlsec.version>
     <org.cryptacular.version>1.2.6</org.cryptacular.version>
     <org.bouncycastle.bcprov-jdk18on.version>1.76</org.bouncycastle.bcprov-jdk18on.version>
     <!-- currently, SSL Client authentication with re-recognition doesn't work with bctls-jdk18o > 1.71.1  -->
     <org.bouncycastle.bctls-jdk18on.version>1.71.1</org.bouncycastle.bctls-jdk18on.version>
 
-    <org.slf4j.version>2.0.7</org.slf4j.version>
-    <log4j.version>2.20.0</log4j.version>
-    <ch.qos.logback.version>1.4.11</ch.qos.logback.version>
+    <org.slf4j.version>2.0.9</org.slf4j.version>
+    <log4j.version>2.22.0</log4j.version>
+    <ch.qos.logback.version>1.4.14</ch.qos.logback.version>
     <org.owasp.encoder.version>1.2.3</org.owasp.encoder.version>    
     
-    <org.apache.commons-lang3.version>3.13.0</org.apache.commons-lang3.version>
-    <org.apache.commons-text.version>1.10.0</org.apache.commons-text.version>
+    <org.apache.commons-lang3.version>3.14.0</org.apache.commons-lang3.version>
+    <org.apache.commons-text.version>1.11.0</org.apache.commons-text.version>
     <org.apache.commons-collections4>4.4</org.apache.commons-collections4>
-    <commons-io.version>2.13.0</commons-io.version>
+    <commons-io.version>2.15.1</commons-io.version>
     <commons-codec.version>1.16.0</commons-codec.version>
     <commons-fileupload2.version>2.0.0-M1</commons-fileupload2.version>
 
@@ -73,15 +73,15 @@
 
     <joda-time.version>2.12.5</joda-time.version>
     <org.apache.velocity.version>2.3</org.apache.velocity.version>
-	<com.google.guava.version>32.1.2-jre</com.google.guava.version>
+	<com.google.guava.version>33.0.0-jre</com.google.guava.version>
 	<org.bitbucket.b_c.jose4j.version>0.9.3</org.bitbucket.b_c.jose4j.version>
     
     <jsr305.version>3.0.2</jsr305.version>
     
-    <httpclient.version>5.2.1</httpclient.version>
+    <httpclient.version>5.2.3</httpclient.version>
 
-    <com.fasterxml.jackson.core.version>2.15.2</com.fasterxml.jackson.core.version>
-    <com.fasterxml.jackson.databind.version>2.15.2</com.fasterxml.jackson.databind.version>
+    <com.fasterxml.jackson.core.version>2.16.0</com.fasterxml.jackson.core.version>
+    <com.fasterxml.jackson.databind.version>2.16.0</com.fasterxml.jackson.databind.version>
     <gson.version>2.10.1</gson.version>
        
     <jaxen.jaxen.version>2.0.0</jaxen.jaxen.version>
-- 
cgit v1.2.3