@ -38,11 +38,8 @@
<pkg.implementationTitle > ${project.name}</pkg.implementationTitle>
<pkg.unixLogFolder > /var/log/${pkg.name}</pkg.unixLogFolder>
<pkg.installFolder > /usr/share/${pkg.name}</pkg.installFolder>
<spring-boot.version > 3.4.13</spring-boot.version>
<tomcat.version > 10.1.52</tomcat.version> <!-- to fix CVE - 2026 - 24734 and CVE - 2025 - 66614. TODO: remove when fixed in spring - boot - dependencies -->
<jackson.version > 2.18.6</jackson.version> <!-- to fix CWE - 770. TODO: remove when fixed in spring - boot - dependencies -->
<spring-boot.version > 3.5.12</spring-boot.version>
<javax.xml.bind-api.version > 2.4.0-b180830.0359</javax.xml.bind-api.version>
<jedis.version > 5.1.5</jedis.version>
<jjwt.version > 0.12.5</jjwt.version>
<rat.version > 0.10</rat.version> <!-- unused -->
<cassandra.version > 4.17.0</cassandra.version>
@ -67,7 +64,7 @@
<protobuf.version > 3.25.5</protobuf.version> <!-- A Major v4 does not support by the pubsub yet -->
<grpc.version > 1.76.0</grpc.version>
<tbel.version > 1.2.9</tbel.version>
<lombok.version > 1.18.38</lombok.version >
<lombok.version > 1.18.44</lombok.version> <!-- must be in sync with spring - boot - dependencies; needed for maven - compiler - plugin annotationProcessorPaths -- >
<paho.client.version > 1.2.5</paho.client.version>
<paho.mqttv5.client.version > 1.2.5</paho.mqttv5.client.version>
<os-maven-plugin.version > 1.7.1</os-maven-plugin.version>
@ -91,7 +88,6 @@
<lz4.version > 1.10.1</lz4.version> <!-- to fix CVE - 2025 - 12183 and CVE - 2025 - 66566 introduced through kafka - clients 3.9.1 TODO: remove when kafka - clients is bumped -->
<bucket4j.version > 8.10.1</bucket4j.version>
<antlr.version > 3.5.3</antlr.version>
<snakeyaml.version > 2.2</snakeyaml.version>
<aws.sdk.version > 1.12.701</aws.sdk.version>
<pubsub.client.version > 1.128.1</pubsub.client.version>
@ -121,7 +117,6 @@
<perfmark-api.version > 0.27.0</perfmark-api.version>
<threetenbp.version > 1.7.0</threetenbp.version>
<!-- TEST SCOPE -->
<assertj.version > 3.27.7</assertj.version> <!-- to fix CVE - 2026 - 24400 (XXE). TODO: remove when fixed in spring - boot - dependencies -->
<dbunit.version > 2.7.3</dbunit.version>
<java-websocket.version > 1.5.6</java-websocket.version>
<mock-server.version > 5.15.0</mock-server.version>
@ -919,43 +914,6 @@
<dependencyManagement >
<dependencies >
<!-- Temporary Tomcat version override -->
<dependency >
<groupId > org.apache.tomcat.embed</groupId>
<artifactId > tomcat-embed-core</artifactId>
<version > ${tomcat.version}</version>
</dependency>
<dependency >
<groupId > org.apache.tomcat.embed</groupId>
<artifactId > tomcat-embed-el</artifactId>
<version > ${tomcat.version}</version>
</dependency>
<dependency >
<groupId > org.apache.tomcat.embed</groupId>
<artifactId > tomcat-embed-websocket</artifactId>
<version > ${tomcat.version}</version>
</dependency>
<!-- End of Tomcat version override -->
<!-- Temporary Jackson version override -->
<dependency >
<groupId > com.fasterxml.jackson</groupId>
<artifactId > jackson-bom</artifactId>
<version > ${jackson.version}</version>
<type > pom</type>
<scope > import</scope>
</dependency>
<!-- End of Jackson version override -->
<!-- Temporary assertj - core version override -->
<dependency >
<groupId > org.assertj</groupId>
<artifactId > assertj-core</artifactId>
<version > ${assertj.version}</version>
<scope > test</scope>
</dependency>
<!-- End of assertj - core version override -->
<dependency >
<groupId > org.springframework.boot</groupId>
<artifactId > spring-boot-dependencies</artifactId>
@ -1229,11 +1187,6 @@
<artifactId > jjwt</artifactId>
<version > ${jjwt.version}</version>
</dependency>
<dependency >
<groupId > org.yaml</groupId>
<artifactId > snakeyaml</artifactId>
<version > ${snakeyaml.version}</version>
</dependency>
<dependency >
<groupId > antlr</groupId>
<artifactId > antlr</artifactId>
@ -1534,12 +1487,6 @@
<version > ${dbunit.version}</version>
<scope > test</scope>
</dependency>
<dependency >
<groupId > org.projectlombok</groupId>
<artifactId > lombok</artifactId>
<version > ${lombok.version}</version>
<scope > provided</scope>
</dependency>
<dependency >
<groupId > org.eclipse.paho</groupId>
<artifactId > org.eclipse.paho.client.mqttv3</artifactId>
@ -1585,11 +1532,6 @@
<artifactId > bcprov-ext-jdk18on</artifactId>
<version > ${bouncycastle.version}</version>
</dependency>
<dependency >
<groupId > redis.clients</groupId>
<artifactId > jedis</artifactId>
<version > ${jedis.version}</version>
</dependency>
<dependency >
<groupId > com.sun.winsw</groupId>
<artifactId > winsw</artifactId>