chore(core): update third-party libs to latest versions

2 files changed, 119 insertions, 14 deletions

diff --git a/connector/pom.xml b/connector/pom.xml
index 63a39346..2b2c0925 100644
--- a/connector/pom.xml
+++ b/connector/pom.xml
@@ -33,6 +33,16 @@
     <dependency>
       <groupId>at.gv.egiz.eaaf</groupId>
       <artifactId>eaaf_module_pvp2_idp</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcpkix-jdk15on</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcprov-jdk15on</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>at.asitplus.eidas.ms_specific</groupId>
diff --git a/pom.xml b/pom.xml
index 90f073e7..f227d2e5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,30 +24,36 @@
     <egiz-eventlog-slf4jBackend>0.4</egiz-eventlog-slf4jBackend>
     <eaaf-core.version>1.2.1-SNAPSHOT</eaaf-core.version>
 
-    <spring-boot-starter-web.version>2.5.7</spring-boot-starter-web.version>
+    <spring-boot-starter-web.version>2.5.8</spring-boot-starter-web.version>
     <spring-boot-admin-starter-client.version>2.5.4</spring-boot-admin-starter-client.version>
-    <org.springframework.version>5.3.13</org.springframework.version>
+    <org.springframework.version>5.3.14</org.springframework.version>
     <org.thymeleaf-spring5.version>3.0.14.RELEASE</org.thymeleaf-spring5.version>
-    <cxf.version>3.4.5</cxf.version>
+    <apache.cxf.version>3.5.0</apache.cxf.version>
 
     <eidas-ref.version>2.5.0</eidas-ref.version>
 
     <org.apache.commons-lang3.version>3.12.0</org.apache.commons-lang3.version>
     <org.apache.commons-text.version>1.9</org.apache.commons-text.version>
     <commons-collections4.version>4.4</commons-collections4.version>
-    <com.google.guava.version>30.1.1-jre</com.google.guava.version>
+    <com.google.guava.version>31.0.1-jre</com.google.guava.version>
     <joda-time.version>2.10.13</joda-time.version>
     
-    <org.slf4j.version>1.7.30</org.slf4j.version>
-    <log4j.version>2.15.0</log4j.version>    
+    <org.slf4j.version>1.7.32</org.slf4j.version>
+    <log4j.version>2.17.1</log4j.version>    
+    <ch.qos.logback.version>1.2.10</ch.qos.logback.version>
   
-    <jackson-datatype-jsr310.version>2.12.5</jackson-datatype-jsr310.version>
+    <jackson-datatype-jsr310.version>2.13.1</jackson-datatype-jsr310.version>
     <!-- org.xerial.sqlite-jdbc.version>3.34.0</org.xerial.sqlite-jdbc.version -->
 
     <javax.validation-api.version>2.0.1.Final</javax.validation-api.version>
     <hibernate-validator.version>6.1.5.Final</hibernate-validator.version>
     <org.bitbucket.b_c.jose4j.version>0.7.9</org.bitbucket.b_c.jose4j.version>
 
+
+    <!-- For software testing only -->
+    <json-path.version>2.6.0</json-path.version>
+    <jetty.version>10.0.7</jetty.version>
+
     <!-- testing -->
     <junit.version>4.13.2</junit.version>
     <surefire.version>2.22.2</surefire.version>
@@ -256,7 +262,12 @@
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-to-slf4j</artifactId>
         <version>${log4j.version}</version>
-      </dependency>      
+      </dependency>
+      <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-classic</artifactId>
+        <version>${ch.qos.logback.version}</version>
+      </dependency>            
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
@@ -280,17 +291,47 @@
       <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-core</artifactId>
-        <version>${cxf.version}</version>
-      </dependency>      
+        <version>${apache.cxf.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-rt-frontend-jaxws</artifactId>
-        <version>${cxf.version}</version>
+        <version>${apache.cxf.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-rt-transports-http</artifactId>
-        <version>${cxf.version}</version>
+        <version>${apache.cxf.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-features-clustering</artifactId>
+        <version>${apache.cxf.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-features-logging</artifactId>
+        <version>${apache.cxf.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-databinding-jaxb</artifactId>
+        <version>${apache.cxf.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-bindings-soap</artifactId>
+        <version>${apache.cxf.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-frontend-jaxrs</artifactId>
+        <version>${apache.cxf.version}</version>
+      </dependency>      
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-testutils</artifactId>
+        <version>${apache.cxf.version}</version>
       </dependency>
       <dependency>
         <groupId>javax.servlet</groupId>
@@ -351,6 +392,54 @@
         <scope>test</scope>
       </dependency>
       <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-transports-http-jetty</artifactId>
+        <version>${apache.cxf.version}</version>
+        <scope>test</scope>      
+      </dependency>            
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-transports-local</artifactId>
+        <version>${apache.cxf.version}</version>
+        <scope>test</scope>      
+      </dependency>
+      <dependency>
+        <groupId>org.apache.cxf</groupId>
+        <artifactId>cxf-rt-rs-extension-providers</artifactId>
+        <version>${apache.cxf.version}</version>
+        <scope>test</scope>      
+      </dependency>      
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-http</artifactId>
+        <version>${jetty.version}</version>
+        <scope>test</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-server</artifactId>
+        <version>${jetty.version}</version>
+        <scope>test</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-io</artifactId>
+        <version>${jetty.version}</version>
+        <scope>test</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-util</artifactId>
+        <version>${jetty.version}</version>
+        <scope>test</scope>
+      </dependency>      
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-security</artifactId>
+        <version>${jetty.version}</version>
+        <scope>test</scope>
+      </dependency>      
+      <dependency>
         <groupId>at.gv.egiz.eaaf</groupId>
         <artifactId>eaaf_core_utils</artifactId>
         <version>${eaaf-core.version}</version>
@@ -402,7 +491,13 @@
         <artifactId>powermock-api-mockito2</artifactId>
         <version>${org.powermock.version}</version>
         <scope>test</scope>
-      </dependency>            
+      </dependency>
+      <dependency>
+        <groupId>com.jayway.jsonpath</groupId>
+        <artifactId>json-path</artifactId>
+        <version>${json-path.version}</version>
+        <scope>test</scope>
+      </dependency>  
     </dependencies>
   </dependencyManagement>
   <dependencies>
@@ -451,7 +546,7 @@
         <plugin>
           <groupId>org.apache.cxf</groupId>
           <artifactId>cxf-codegen-plugin</artifactId>
-          <version>${cxf.version}</version>
+          <version>${apache.cxf.version}</version>
         </plugin>