Update all dependencies

.github/workflows/benchmark.yml

@@ -16,7 +16,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-            - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
             - name: Setup Java
               uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5

.github/workflows/ci.yml

@@ -44,7 +44,7 @@ jobs:
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -59,7 +59,7 @@ jobs:
         if: github.event_name == 'push' && github.ref != 'refs/heads/main'
         run: ./gradlew spotlessApply
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         id: commit_style_fix
         if: github.event_name == 'push' && github.ref != 'refs/heads/main'
         with:
@@ -75,7 +75,7 @@ jobs:
         env:
             HASH: ${{steps.commit_style_fix.outputs.commit_hash}}
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         id: commit_rev_ignore
         if: github.event_name == 'push' && github.ref != 'refs/heads/main'
         with:
@@ -94,7 +94,7 @@ jobs:
         if: ${{ failure() }}
         run: cat licenses/dependencies-without-allowed-license.json
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         id: commit_license_change
         if: github.event_name == 'push' && github.ref != 'refs/heads/main'
         with:
@@ -159,7 +159,7 @@ jobs:
         run: ./gradlew codeCoverageReport
 
       - name: Send code coverage report to Codecov.io
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
             token: ${{ secrets.CODECOV_TOKEN }}
   docs:
@@ -181,7 +181,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -209,6 +209,6 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/dependency-submission@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}

.github/workflows/codeql.yml

@@ -50,11 +50,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-    -   uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+    -   uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/create-pr.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - uses: jenschude/auto-create-pr-action@a5369414c74963e6ec065dab49066d3711b8c1db # v0.3.2
         if: github.ref_name == 'gen-sdk-updates'

.github/workflows/docs.yml

@@ -54,7 +54,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Setup Graphviz
         uses: ts-graphviz/setup-graphviz@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c # v2.0.2
@@ -66,7 +66,7 @@ jobs:
 
       - run: rsync -r sdk/build/docs/javadoc/ doc/javadoc
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         with:
           repository: doc
           commit_message: "Update javadoc"

.github/workflows/release-fix.yml

@@ -37,7 +37,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - run: ./gradlew -Pversion=$VERSION writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
         env:
@@ -62,7 +62,7 @@ jobs:
         run: rm -rf reference.txt
         continue-on-error: true
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         with:
           branch: after-release
           commit_message: "TASK: Updating version in README"
@@ -121,7 +121,7 @@ jobs:
 
       - run: rsync -r sdk/build/docs/javadoc/ doc/javadoc
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         with:
           repository: doc
           commit_message: "Update javadoc"

.github/workflows/release-snapshot.yml

@@ -26,7 +26,7 @@ jobs:
         with:
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -75,7 +75,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - run: ./gradlew -Pversion=$REF_NAME writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
         env:
@@ -100,7 +100,7 @@ jobs:
         run: rm -rf reference.txt
         continue-on-error: true
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         with:
           branch: after-release
           commit_message: "TASK: Updating version in README"
@@ -161,7 +161,7 @@ jobs:
 
       - run: rsync -r sdk/build/docs/javadoc/ doc/javadoc
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1
         with:
           repository: doc
           commit_message: "Update javadoc"

.github/workflows/semgrep.yml

@@ -36,7 +36,7 @@ jobs:
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+              uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
               with:
                   sarif_file: semgrep.sarif
               if: always()

build.gradle

@@ -17,7 +17,7 @@ plugins {
     id 'io.github.gradle-nexus.publish-plugin' version '2.0.0'
     id 'com.github.jk1.dependency-license-report' version '3.1.4'
 
-    id "me.champeau.jmh" version "0.7.3"
+    id "me.champeau.jmh" version "0.7.4"
     id "jacoco"
 
     id "versioning"
@@ -72,13 +72,13 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.6")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.9")
         }
     }
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.7.1-jre'
+        taglet 'com.google.guava:guava:33.7.2-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }

commercetools/commercetools-apachehttp-client/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.6.4" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.6.5" version {
         strictly "[5.4.4,5.99999]"
         prefer "5.6.2"
     }

commercetools/commercetools-async-http-client/build.gradle

@@ -6,10 +6,10 @@ dependencies {
         strictly '[2.8.0,)'
         prefer '2.22.0'
     }
-    api "io.netty:netty-codec:4.2.17.Final"
-    api "io.netty:netty-codec-http:4.2.17.Final"
-    api "io.netty:netty-codec-socks:4.2.17.Final"
-    api "io.netty:netty-handler-proxy:4.2.17.Final"
-    api "io.netty:netty-handler:4.2.17.Final"
+    api "io.netty:netty-codec:4.2.19.Final"
+    api "io.netty:netty-codec-http:4.2.19.Final"
+    api "io.netty:netty-codec-socks:4.2.19.Final"
+    api "io.netty:netty-handler-proxy:4.2.19.Final"
+    api "io.netty:netty-handler:4.2.19.Final"
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }

commercetools/commercetools-graphql-api/build.gradle

@@ -1,7 +1,7 @@
 import com.commercetools.sdk.plugins.GraphQLPlugin
 
 plugins {
-    id "com.netflix.dgs.codegen" version "8.6.0"
+    id "com.netflix.dgs.codegen" version "8.7.0"
     id 'java'
 }
 
@@ -33,15 +33,15 @@ dependencies {
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'com.graphql-java:graphql-java:19.11'
-    api 'tools.jackson.core:jackson-databind:3.2.3'
-    api 'tools.jackson.core:jackson-core:3.2.3'
+    api 'tools.jackson.core:jackson-databind:3.2.4'
+    api 'tools.jackson.core:jackson-core:3.2.4'
     //api jackson_core.datatype
-    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.6.0'
+    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.7.0'
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.22.3") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.4") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.3") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.4") {
             because("security update")
         }
     }

commercetools/commercetools-monitoring-datadog/build.gradle

@@ -1,12 +1,12 @@
 dependencies {
     api project(":rmf:rmf-java-base")
     implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
-    implementation "com.datadoghq:datadog-api-client:2.59.0"
+    implementation "com.datadoghq:datadog-api-client:2.62.0"
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.22.3") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.4") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.3") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.4") {
             because("security update")
         }
     }

commercetools/commercetools-monitoring-newrelic/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'com.newrelic.agent.java:newrelic-api:9.4.0'
+    implementation 'com.newrelic.agent.java:newrelic-api:9.5.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-monitoring-opentelemetry/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.65.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.67.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-okhttp-client3/build.gradle

@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"

commercetools/commercetools-okhttp-client4/build.gradle

@@ -11,11 +11,11 @@ jmh {
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "com.squareup.okhttp3:okhttp:4.12.0" version {
+    api "com.squareup.okhttp3:okhttp:4.12.1" version {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }

commercetools/commercetools-okhttp-client5/build.gradle

@@ -11,11 +11,11 @@ jmh {
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "com.squareup.okhttp3:okhttp:5.5.0" version {
+    api "com.squareup.okhttp3:okhttp:5.5.1" version {
         strictly '[5.0,5.99999]'
         prefer "5.5.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }

commercetools/commercetools-reactornetty-client/build.gradle

@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.3.7"
-    api "io.projectreactor.netty:reactor-netty-core:1.3.7"
+    api "io.projectreactor.netty:reactor-netty-http:1.3.8"
+    api "io.projectreactor.netty:reactor-netty-core:1.3.8"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }

commercetools/commercetools-sdk-compat-v1/build.gradle

@@ -21,8 +21,8 @@ dependencies {
     api project(':commercetools:commercetools-sdk-java-api')
     api ctsdkv1.client version ctsdkv1.version
     api ctsdkv1.models version ctsdkv1.version
-    api "io.netty:netty-codec:4.2.17.Final"
-    api "io.netty:netty-codec-http:4.2.17.Final"
+    api "io.netty:netty-codec:4.2.19.Final"
+    api "io.netty:netty-codec-http:4.2.19.Final"
 
     jmhImplementation project(':commercetools:commercetools-async-http-client')
     jmhImplementation project(':commercetools:commercetools-apachehttp-client')