chore(core): update third-party libs

13 files changed, 29 insertions, 34 deletions

diff --git a/build.gradle b/build.gradle
index 9d1f3f6b..5f49336f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -88,11 +88,9 @@ subprojects {
 		version = version
 		pdfasversion = version
 		revision = getCheckedOutGitCommitHash()
-		//tomcatVersion = '7.0.54';
-		//tomcatVersion = '8.0.36';
-		tomcatVersion = '9.0.93';
+		tomcatVersion = '9.0.115';
 		slf4jVersion = '1.7.36'
-		cxfVersion = '3.5.9'
+		cxfVersion = '3.5.11'
 	  }
 	
 	jar { manifest.attributes provider: 'EGIZ', 'Specification-Version': getCheckedOutGitCommitHash(), 'Implementation-Version': project.version  }
diff --git a/pdf-as-common/build.gradle b/pdf-as-common/build.gradle
index 24eeac30..7dfaf71d 100644
--- a/pdf-as-common/build.gradle
+++ b/pdf-as-common/build.gradle
@@ -22,8 +22,8 @@ releases.dependsOn sourcesJar
 dependencies {
 	api group: 'org.slf4j', name: 'slf4j-api', version: slf4jVersion
     api group: 'commons-collections', name: 'commons-collections', version: '3.2.2'
-	api group: 'commons-io', name: 'commons-io', version: '2.16.1'
-	api group: 'ognl', name: 'ognl', version: '3.3.4'
+	api group: 'commons-io', name: 'commons-io', version: '2.21.0'
+	api group: 'ognl', name: 'ognl', version: '3.3.5'
     api group: 'javax.xml.bind', name: 'jaxb-api', version: '2.3.1'
 	api 'commons-codec:commons-codec:1.17.1'
     api group: 'org.glassfish.jaxb', name: 'jaxb-runtime', version: '2.3.3'
diff --git a/pdf-as-legacy/build.gradle b/pdf-as-legacy/build.gradle
index 5f1fe5d4..de310b1c 100644
--- a/pdf-as-legacy/build.gradle
+++ b/pdf-as-legacy/build.gradle
@@ -19,8 +19,8 @@ dependencies {
 	implementation project (':pdf-as-moa')
 	implementation project (':signature-standards:sigs-pkcs7detached')
 	implementation project (':signature-standards:sigs-pades')
-	implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.17.0'
-	implementation group: 'commons-codec', name: 'commons-codec', version: '1.17.1'
+	implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.20.0'
+	implementation group: 'commons-codec', name: 'commons-codec', version: '1.21.0'
 }
 
 task releases(type: Copy) {
diff --git a/pdf-as-lib/build.gradle b/pdf-as-lib/build.gradle
index e95937fa..d02ae9b2 100644
--- a/pdf-as-lib/build.gradle
+++ b/pdf-as-lib/build.gradle
@@ -62,18 +62,18 @@ repositories {
 
 dependencies {
 	api project (':pdf-as-common')
-	api group: 'org.apache.commons', name: 'commons-lang3', version: '3.17.0'
+	api group: 'org.apache.commons', name: 'commons-lang3', version: '3.20.0'
 	api group: 'org.apache.httpcomponents', name: 'httpmime', version: '4.5.14'
 	api group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.14'
-    api group: 'org.bouncycastle', name: 'bcprov-jdk15on', version: '1.70'
+    api group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.82'
 	api group: 'javax.activation', name: 'activation', version: '1.1.1'
 	api group: 'javax.xml.bind', name: 'jaxb-api', version: '2.3.1'
-	api group: 'com.google.code.gson', name: 'gson', version: '2.11.0'
+	api group: 'com.google.code.gson', name: 'gson', version: '2.13.2'
 	api group: 'org.bitbucket.b_c', name: 'jose4j', version: '0.9.6'
-	api group: 'commons-io', name: 'commons-io', version: '2.16.1'
+	api group: 'commons-io', name: 'commons-io', version: '2.21.0'
 	api group: 'org.glassfish.jaxb', name: 'jaxb-runtime', version: '2.3.3'
-	api 'org.apache.commons:commons-collections4:4.4'
-	api group: 'ognl', name: 'ognl', version: '3.3.4'
+	api 'org.apache.commons:commons-collections4:4.5.0'
+	api group: 'ognl', name: 'ognl', version: '3.3.5'
 	api files('libs/iaik_eccelerate_cms-6.02.jar')
 	api files('libs/iaik_eccelerate-6.02.jar')
 	api files('libs/iaik_jce_full-5.63_moa.jar')
diff --git a/pdf-as-moa/build.gradle b/pdf-as-moa/build.gradle
index f9938f88..f7f46a1e 100644
--- a/pdf-as-moa/build.gradle
+++ b/pdf-as-moa/build.gradle
@@ -13,7 +13,7 @@ buildscript {
 		mavenLocal()
 		mavenCentral()
 	}
-	dependencies { classpath("commons-io:commons-io:2.15.1") }
+	dependencies { classpath("commons-io:commons-io:2.21.0") }
 }
 
 sourceSets {
diff --git a/pdf-as-pdfbox-2/build.gradle b/pdf-as-pdfbox-2/build.gradle
index b71f0939..ef71aefe 100644
--- a/pdf-as-pdfbox-2/build.gradle
+++ b/pdf-as-pdfbox-2/build.gradle
@@ -33,11 +33,11 @@ dependencies {
 	implementation project (':pdf-as-lib')
 	implementation group: 'org.slf4j', name: 'slf4j-api', version: slf4jVersion
 	implementation 'org.slf4j:jcl-over-slf4j:1.7.36'
-	api group: 'org.apache.pdfbox', name: 'pdfbox', version: '2.0.32'
-	api group: 'org.apache.pdfbox', name: 'pdfbox-tools', version: '2.0.32'
-	api group: 'org.apache.pdfbox', name: 'preflight', version: '2.0.32'
-	implementation group: 'commons-io', name: 'commons-io', version: '2.16.1'
-	implementation group: 'ognl', name: 'ognl', version: '3.3.4'	
+	api group: 'org.apache.pdfbox', name: 'pdfbox', version: '2.0.35'
+	api group: 'org.apache.pdfbox', name: 'pdfbox-tools', version: '2.0.35'
+	api group: 'org.apache.pdfbox', name: 'preflight', version: '2.0.35'
+	implementation group: 'commons-io', name: 'commons-io', version: '2.21.0'
+	implementation group: 'ognl', name: 'ognl', version: '3.3.5'	
 	api group: 'com.github.jai-imageio', name: 'jai-imageio-jpeg2000', version: '1.4.0'
 	api group: 'com.github.jai-imageio', name: 'jai-imageio-core', version: '1.4.0'
 	api group: 'com.levigo.jbig2', name: 'levigo-jbig2-imageio', version: '2.0'
diff --git a/pdf-as-tests/build.gradle b/pdf-as-tests/build.gradle
index 1ee5e964..95b953d6 100644
--- a/pdf-as-tests/build.gradle
+++ b/pdf-as-tests/build.gradle
@@ -37,9 +37,6 @@ dependencies {
 	implementation group: 'javax.activation', name: 'activation', version: '1.1.1'
 
 	implementation project (':pdf-as-pdfbox-2')
-	//compile group: 'org.apache.pdfbox', name: 'preflight', version: '2.0.21'
-	//compile group: 'org.apache.pdfbox', name: 'pdfbox', version: '2.0.21'
-	//compile group: 'org.apache.pdfbox', name: 'pdfbox-tools', version: '2.0.21'
 
 }
 
diff --git a/pdf-as-web-client/build.gradle b/pdf-as-web-client/build.gradle
index 494f8cb3..781ee45b 100644
--- a/pdf-as-web-client/build.gradle
+++ b/pdf-as-web-client/build.gradle
@@ -13,7 +13,7 @@ repositories {
 }
 
 dependencies {
-    implementation 'org.apache.commons:commons-collections4:4.4'
+    implementation 'org.apache.commons:commons-collections4:4.5.0'
     implementation group: 'javax.xml.ws', name: 'jaxws-api', version: '2.3.1'
 	implementation project (':pdf-as-common')
 }
diff --git a/pdf-as-web-statistic-api/build.gradle b/pdf-as-web-statistic-api/build.gradle
index 10f02252..4b6b8c0a 100644
--- a/pdf-as-web-statistic-api/build.gradle
+++ b/pdf-as-web-statistic-api/build.gradle
@@ -22,7 +22,7 @@ sourceSets.test.runtimeClasspath += configurations.providedCompile
 
 dependencies {
 	implementation group: 'org.slf4j', name: 'slf4j-api', version: slf4jVersion
-	implementation 'org.apache.commons:commons-lang3:3.17.0'
+	implementation 'org.apache.commons:commons-lang3:3.20.0'
 	testImplementation group: 'junit', name: 'junit', version: '4.+'
 }
 
diff --git a/pdf-as-web-status/build.gradle b/pdf-as-web-status/build.gradle
index 550a205c..4f6c222c 100644
--- a/pdf-as-web-status/build.gradle
+++ b/pdf-as-web-status/build.gradle
@@ -22,7 +22,7 @@ sourceSets.test.runtimeClasspath += configurations.providedCompile
 
 dependencies {
 	implementation group: 'org.slf4j', name: 'slf4j-api', version: slf4jVersion
-	implementation 'org.apache.commons:commons-lang3:3.17.0'
+	implementation 'org.apache.commons:commons-lang3:3.20.0'
 	compileOnly 'javax.servlet:javax.servlet-api:3.0.1'
 }
 
diff --git a/pdf-as-web/build.gradle b/pdf-as-web/build.gradle
index 926d19fd..319aa7f8 100644
--- a/pdf-as-web/build.gradle
+++ b/pdf-as-web/build.gradle
@@ -57,7 +57,7 @@ dependencies {
 	api project (':pdf-as-web-statistic-api')
 	api project (':pdf-as-pdfbox-2')
 	api group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'
-	api group: 'commons-io', name: 'commons-io', version: '2.16.1'
+	api group: 'commons-io', name: 'commons-io', version: '2.21.0'
 	api group: 'opensymphony', name: 'sitemesh', version: '2.4.2'
 	api group: 'javax.xml.bind', name: 'jaxb-api', version: '2.3.1'
     api group: 'javax.xml.ws', name: 'jaxws-api', version: '2.3.1'
@@ -65,16 +65,16 @@ dependencies {
     api "commons-codec:commons-codec:1.17.1"
 	api 'org.apache.commons:commons-lang3:3.17.0'
 	api group: 'org.apache.commons', name: 'commons-collections4', version: '4.4'
-	api 'org.apache.cxf:cxf-rt-transports-http:3.5.9'
-	api 'org.apache.cxf:cxf-rt-frontend-jaxws:3.5.9'
+	api 'org.apache.cxf:cxf-rt-transports-http:3.5.11'
+	api 'org.apache.cxf:cxf-rt-frontend-jaxws:3.5.11'
 	api 'com.thetransactioncompany:cors-filter:2.10'
 	api 'ch.qos.logback:logback-classic:1.2.13'
 	api 'ch.qos.logback:logback-core:1.2.13'
-	api 'org.json:json:20240303'
+	api 'org.json:json:20251224'
 	api group: 'javax.jws', name: 'javax.jws-api', version: '1.1'
 	compileOnly 'javax.servlet:javax.servlet-api:3.0.1'
-    testImplementation 'org.springframework:spring-test:5.3.31'
-    testImplementation 'org.springframework:spring-web:5.3.31'
+    testImplementation 'org.springframework:spring-test:5.3.39'
+    testImplementation 'org.springframework:spring-web:5.3.39'
     
 }
 
diff --git a/signature-standards/sigs-pades/build.gradle b/signature-standards/sigs-pades/build.gradle
index d28d5da5..be7777c0 100644
--- a/signature-standards/sigs-pades/build.gradle
+++ b/signature-standards/sigs-pades/build.gradle
@@ -23,7 +23,7 @@ releases.dependsOn sourcesJar
 dependencies {
 	implementation project (':pdf-as-lib')
 	implementation project (':pdf-as-common')
-    implementation 'org.apache.commons:commons-collections4:4.4'
+    implementation 'org.apache.commons:commons-collections4:4.5.0'
     testImplementation group: 'junit', name: 'junit', version: '4.+'
 }
 
diff --git a/signature-standards/sigs-pkcs7detached/build.gradle b/signature-standards/sigs-pkcs7detached/build.gradle
index 6b0e2870..3107252f 100644
--- a/signature-standards/sigs-pkcs7detached/build.gradle
+++ b/signature-standards/sigs-pkcs7detached/build.gradle
@@ -23,7 +23,7 @@ releases.dependsOn sourcesJar
 dependencies {
 	implementation project (':pdf-as-lib')
 	implementation project (':pdf-as-common')
-    implementation 'org.apache.commons:commons-collections4:4.4'
+    implementation 'org.apache.commons:commons-collections4:4.5.0'
     testImplementation group: 'junit', name: 'junit', version: '4.+'
 }