From b8da9aad3741d0e4c0d1c82164a9bb3c5834c93f Mon Sep 17 00:00:00 2001
From: Thomas <thomas.lenz@egiz.gv.at>
Date: Mon, 5 May 2025 11:37:42 +0200
Subject: chore(core): update third-party libs

---
 eaaf-springboot-utils/pom.xml |  9 ++++----
 pom.xml                       | 50 +++++++++++++++++++++----------------------
 2 files changed, 29 insertions(+), 30 deletions(-)

diff --git a/eaaf-springboot-utils/pom.xml b/eaaf-springboot-utils/pom.xml
index fc6bee5b..61a68d6e 100644
--- a/eaaf-springboot-utils/pom.xml
+++ b/eaaf-springboot-utils/pom.xml
@@ -59,11 +59,10 @@
       <artifactId>spring-boot-starter-security</artifactId>
       <scope>provided</scope>
     </dependency>    
-    <dependency>
-		<groupId>ch.qos.logback.access</groupId>
-        <artifactId>common</artifactId>
-      <scope>provided</scope>
-    </dependency>
+	<dependency>
+      <groupId>ch.qos.logback.access</groupId>
+      <artifactId>logback-access-common</artifactId>
+    </dependency>  
     <dependency>
 	  <groupId>ch.qos.logback.access</groupId>
       <artifactId>logback-access-tomcat</artifactId>
diff --git a/pom.xml b/pom.xml
index 0aa60421..2c7ec03e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,46 +47,46 @@
     <io.grpc-core.version>1.53.0</io.grpc-core.version>
 
     <!-- Other third-party libs -->
-    <spring-boot-starter-web.version>3.3.4</spring-boot-starter-web.version>
-    <org.springframework.version>6.1.14</org.springframework.version>
-    <org.apache.tomcat.embed.version>10.1.31</org.apache.tomcat.embed.version>
-    <org.opensaml.version>5.0.0</org.opensaml.version>
-    <org.apache.santuario.xmlsec.version>3.0.4</org.apache.santuario.xmlsec.version>
-    <org.cryptacular.version>1.2.6</org.cryptacular.version>
+    <spring-boot-starter-web.version>3.4.5</spring-boot-starter-web.version>
+    <org.springframework.version>6.2.6</org.springframework.version>
+    <org.apache.tomcat.embed.version>10.1.40</org.apache.tomcat.embed.version>
+    <org.opensaml.version>5.1.2</org.opensaml.version>
+    <org.apache.santuario.xmlsec.version>4.0.4</org.apache.santuario.xmlsec.version>
+    <org.cryptacular.version>1.2.7</org.cryptacular.version>
     <org.bouncycastle.bcprov-jdk18on.version>1.76</org.bouncycastle.bcprov-jdk18on.version>
     <!-- currently, SSL Client authentication with re-recognition doesn't work with bctls-jdk18o > 1.71.1  -->
     <org.bouncycastle.bctls-jdk18on.version>1.71.1</org.bouncycastle.bctls-jdk18on.version>
 
     <org.slf4j.version>2.0.16</org.slf4j.version>
     <log4j.version>2.24.1</log4j.version>
-    <ch.qos.logback.version>1.5.11</ch.qos.logback.version>
-    <logback.access.common.version>2.0.3</logback.access.common.version>
-    <logback-access-tomcat.version>2.0.4</logback-access-tomcat.version>
+    <ch.qos.logback.version>1.5.18</ch.qos.logback.version>
+    <logback.access.common.version>2.0.6</logback.access.common.version>
+    <logback-access-tomcat.version>2.0.6</logback-access-tomcat.version>
     <org.owasp.encoder.version>1.2.3</org.owasp.encoder.version>    
     
     <org.apache.commons-lang3.version>3.17.0</org.apache.commons-lang3.version>
-    <org.apache.commons-text.version>1.12.0</org.apache.commons-text.version>
+    <org.apache.commons-text.version>1.13.1</org.apache.commons-text.version>
     <org.apache.commons-collections4>4.4</org.apache.commons-collections4>
-    <commons-io.version>2.17.0</commons-io.version>
+    <commons-io.version>2.19.0</commons-io.version>
     <commons-codec.version>1.17.1</commons-codec.version>
     <commons-fileupload2.version>2.0.0-M1</commons-fileupload2.version>
 
     <jakarta.servlet-api>6.0.0</jakarta.servlet-api>
     <jakarta.annotation-api.version>2.1.1</jakarta.annotation-api.version>
 
-    <joda-time.version>2.13.0</joda-time.version>
-    <org.apache.velocity.version>2.3</org.apache.velocity.version>
-	<com.google.guava.version>33.3.1-jre</com.google.guava.version>
+    <joda-time.version>2.14.0</joda-time.version>
+    <org.apache.velocity.version>2.4.1</org.apache.velocity.version>
+	<com.google.guava.version>33.4.8-jre</com.google.guava.version>
 	<org.bitbucket.b_c.jose4j.version>0.9.6</org.bitbucket.b_c.jose4j.version>
     
     <jsr305.version>3.0.2</jsr305.version>
     
-    <httpcore5.version>5.3.1</httpcore5.version>
-    <httpclient.version>5.4</httpclient.version>
+    <httpcore5.version>5.3.4</httpcore5.version>
+    <httpclient.version>5.4.4</httpclient.version>
 
-    <com.fasterxml.jackson.core.version>2.17.0</com.fasterxml.jackson.core.version>
-    <com.fasterxml.jackson.databind.version>2.17.0</com.fasterxml.jackson.databind.version>
-    <gson.version>2.11.0</gson.version>
+    <com.fasterxml.jackson.core.version>2.19.0</com.fasterxml.jackson.core.version>
+    <com.fasterxml.jackson.databind.version>2.19.0</com.fasterxml.jackson.databind.version>
+    <gson.version>2.13.1</gson.version>
        
     <jaxen.jaxen.version>2.0.0</jaxen.jaxen.version>
     <xerces.version>2.12.2</xerces.version>
@@ -549,14 +549,14 @@
       </dependency>      
 	  <dependency>
         <groupId>ch.qos.logback.access</groupId>
-        <artifactId>common</artifactId>
-        <version>${logback.access.common.version}</version>
-      </dependency>
-	  <dependency>
-        <groupId>ch.qos.logback.access</groupId>
         <artifactId>logback-access-tomcat</artifactId>
         <version>${logback-access-tomcat.version}</version>
-      </dependency>      
+      </dependency>
+	  <dependency>
+		<groupId>ch.qos.logback.access</groupId>
+    	<artifactId>logback-access-common</artifactId>
+        <version>${logback.access.common.version}</version>
+      </dependency>              
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-- 
cgit v1.2.3