fix: P4ADEV-3193 fix cve (#27)

Author: antonioT90

Dockerfile

@@ -8,7 +8,7 @@ ARG IMAGE_VERSION="21-alpine-3.21"
 ARG IMAGE_SHA="cafcfad1d9d3b6e7dd983fa367f085ca1c846ce792da59bcb420ac4424296d56"
 ARG GRADLE_VERSION="8.10.2"
 ARG GRADLE_DOWNLOAD_SHA256="31c55713e40233a8303827ceb42ca48a47267a0ad4bab9177123121e71524c26"
-ARG APPINSIGHTS_VERSION="3.7.2"
+ARG APPINSIGHTS_VERSION="3.7.3"
 
 # 🌍 Timezone Configuration
 ARG TZ="Europe/Rome"

build.gradle.kts

@@ -1,9 +1,9 @@
 plugins {
   java
-  id("org.springframework.boot") version "3.5.0"
+  id("org.springframework.boot") version "3.5.3"
   id("io.spring.dependency-management") version "1.1.7"
   jacoco
-  id("org.sonarqube") version "6.1.0.5360"
+  id("org.sonarqube") version "6.2.0.5505"
   id("com.github.ben-manes.versions") version "0.52.0"
   id("org.openapi.generator") version "7.13.0"
   id("com.gorylenko.gradle-git-properties") version "2.5.0"

gradle.lockfile

@@ -4,23 +4,23 @@
 aopalliance:aopalliance:1.0=compileClasspath
 ch.qos.logback:logback-classic:1.5.18=compileClasspath
 ch.qos.logback:logback-core:1.5.18=compileClasspath
-com.fasterxml.jackson.core:jackson-annotations:2.19.0=compileClasspath
-com.fasterxml.jackson.core:jackson-core:2.19.0=compileClasspath
-com.fasterxml.jackson.core:jackson-databind:2.19.0=compileClasspath
-com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.19.0=compileClasspath
-com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.19.0=compileClasspath
-com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.0=compileClasspath
-com.fasterxml.jackson.module:jackson-module-parameter-names:2.19.0=compileClasspath
-com.fasterxml.jackson:jackson-bom:2.19.0=compileClasspath
+com.fasterxml.jackson.core:jackson-annotations:2.19.1=compileClasspath
+com.fasterxml.jackson.core:jackson-core:2.19.1=compileClasspath
+com.fasterxml.jackson.core:jackson-databind:2.19.1=compileClasspath
+com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.19.1=compileClasspath
+com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.19.1=compileClasspath
+com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.1=compileClasspath
+com.fasterxml.jackson.module:jackson-module-parameter-names:2.19.1=compileClasspath
+com.fasterxml.jackson:jackson-bom:2.19.1=compileClasspath
 com.fasterxml:classmate:1.7.0=compileClasspath
 io.micrometer:context-propagation:1.1.3=compileClasspath
-io.micrometer:micrometer-commons:1.15.0=compileClasspath
-io.micrometer:micrometer-core:1.15.0=compileClasspath
-io.micrometer:micrometer-jakarta9:1.15.0=compileClasspath
-io.micrometer:micrometer-observation:1.15.0=compileClasspath
-io.micrometer:micrometer-registry-prometheus:1.15.0=compileClasspath
+io.micrometer:micrometer-commons:1.15.1=compileClasspath
+io.micrometer:micrometer-core:1.15.1=compileClasspath
+io.micrometer:micrometer-jakarta9:1.15.1=compileClasspath
+io.micrometer:micrometer-observation:1.15.1=compileClasspath
+io.micrometer:micrometer-registry-prometheus:1.15.1=compileClasspath
 io.micrometer:micrometer-tracing-bridge-otel:1.5.1=compileClasspath
-io.micrometer:micrometer-tracing:1.5.0=compileClasspath
+io.micrometer:micrometer-tracing:1.5.1=compileClasspath
 io.opentelemetry.semconv:opentelemetry-semconv:1.32.0=compileClasspath
 io.opentelemetry:opentelemetry-api:1.49.0=compileClasspath
 io.opentelemetry:opentelemetry-context:1.49.0=compileClasspath
@@ -30,10 +30,10 @@ io.opentelemetry:opentelemetry-sdk-logs:1.49.0=compileClasspath
 io.opentelemetry:opentelemetry-sdk-metrics:1.49.0=compileClasspath
 io.opentelemetry:opentelemetry-sdk-trace:1.49.0=compileClasspath
 io.opentelemetry:opentelemetry-sdk:1.49.0=compileClasspath
-io.prometheus:prometheus-metrics-config:1.3.6=compileClasspath
-io.prometheus:prometheus-metrics-core:1.3.6=compileClasspath
-io.prometheus:prometheus-metrics-model:1.3.6=compileClasspath
-io.prometheus:prometheus-metrics-tracer-common:1.3.6=compileClasspath
+io.prometheus:prometheus-metrics-config:1.3.8=compileClasspath
+io.prometheus:prometheus-metrics-core:1.3.8=compileClasspath
+io.prometheus:prometheus-metrics-model:1.3.8=compileClasspath
+io.prometheus:prometheus-metrics-tracer-common:1.3.8=compileClasspath
 io.swagger.core.v3:swagger-annotations-jakarta:2.2.30=compileClasspath
 io.swagger.core.v3:swagger-core-jakarta:2.2.30=compileClasspath
 io.swagger.core.v3:swagger-models-jakarta:2.2.30=compileClasspath
@@ -47,9 +47,9 @@ org.apache.httpcomponents.core5:httpcore5-h2:5.3.4=compileClasspath
 org.apache.httpcomponents.core5:httpcore5:5.3.4=compileClasspath
 org.apache.logging.log4j:log4j-api:2.24.3=compileClasspath
 org.apache.logging.log4j:log4j-to-slf4j:2.24.3=compileClasspath
-org.apache.tomcat.embed:tomcat-embed-core:10.1.41=compileClasspath
-org.apache.tomcat.embed:tomcat-embed-el:10.1.41=compileClasspath
-org.apache.tomcat.embed:tomcat-embed-websocket:10.1.41=compileClasspath
+org.apache.tomcat.embed:tomcat-embed-core:10.1.42=compileClasspath
+org.apache.tomcat.embed:tomcat-embed-el:10.1.42=compileClasspath
+org.apache.tomcat.embed:tomcat-embed-websocket:10.1.42=compileClasspath
 org.hibernate.validator:hibernate-validator:8.0.2.Final=compileClasspath
 org.jboss.logging:jboss-logging:3.6.1.Final=compileClasspath
 org.jspecify:jspecify:1.0.0=compileClasspath
@@ -60,25 +60,25 @@ org.slf4j:slf4j-api:2.0.17=compileClasspath
 org.springdoc:springdoc-openapi-starter-common:2.8.9=compileClasspath
 org.springdoc:springdoc-openapi-starter-webmvc-api:2.8.9=compileClasspath
 org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.9=compileClasspath
-org.springframework.boot:spring-boot-actuator-autoconfigure:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-actuator:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-autoconfigure:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-actuator:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-json:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-logging:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-tomcat:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-validation:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter-web:3.5.0=compileClasspath
-org.springframework.boot:spring-boot-starter:3.5.0=compileClasspath
-org.springframework.boot:spring-boot:3.5.0=compileClasspath
-org.springframework:spring-aop:6.2.7=compileClasspath
-org.springframework:spring-beans:6.2.7=compileClasspath
-org.springframework:spring-context:6.2.7=compileClasspath
-org.springframework:spring-core:6.2.7=compileClasspath
-org.springframework:spring-expression:6.2.7=compileClasspath
-org.springframework:spring-jcl:6.2.7=compileClasspath
-org.springframework:spring-web:6.2.7=compileClasspath
-org.springframework:spring-webmvc:6.2.7=compileClasspath
+org.springframework.boot:spring-boot-actuator-autoconfigure:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-actuator:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-autoconfigure:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-actuator:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-json:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-logging:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-tomcat:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-validation:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter-web:3.5.3=compileClasspath
+org.springframework.boot:spring-boot-starter:3.5.3=compileClasspath
+org.springframework.boot:spring-boot:3.5.3=compileClasspath
+org.springframework:spring-aop:6.2.8=compileClasspath
+org.springframework:spring-beans:6.2.8=compileClasspath
+org.springframework:spring-context:6.2.8=compileClasspath
+org.springframework:spring-core:6.2.8=compileClasspath
+org.springframework:spring-expression:6.2.8=compileClasspath
+org.springframework:spring-jcl:6.2.8=compileClasspath
+org.springframework:spring-web:6.2.8=compileClasspath
+org.springframework:spring-webmvc:6.2.8=compileClasspath
 org.webjars:swagger-ui:5.21.0=compileClasspath
 org.webjars:webjars-locator-lite:1.1.0=compileClasspath
 org.yaml:snakeyaml:2.4=compileClasspath