chore(deps): update all dependencies

.github/workflows/benchmark.yml

@@ -16,7 +16,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4

.github/workflows/ci.yml

@@ -44,7 +44,7 @@ jobs:
  # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
  # https://github.saobby.my.eu.orgmunity/t/action-does-not-trigger-another-on-push-tag-action/17148/8
  token: ${{ steps.generate_github_token.outputs.token }}
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -137,7 +137,7 @@ jobs:
  run: ./gradlew codeCoverageReport
 
  - name: Send code coverage report to Codecov.io
- uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
+ uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
  with:
  token: ${{ secrets.CODECOV_TOKEN }}
  docs:
@@ -159,7 +159,7 @@ jobs:
  with:
  token: ${{ steps.generate_github_token.outputs.token }}
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -187,6 +187,6 @@ jobs:
  uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
  - name: Generate and submit dependency graph
  if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
- uses: gradle/actions/dependency-submission@db19848a5fa7950289d3668fb053140cf3028d43 # v3.3.2
+ uses: gradle/actions/dependency-submission@d9c87d481d55275bb5441eef3fe0e46805f9ef70 # v3.5.0
  with:
  github-token: ${{ steps.generate_github_token.outputs.token }}

.github/workflows/codeql.yml

@@ -50,11 +50,11 @@ jobs:
  - name: Checkout repository
  uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL
- uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+ uses: github/codeql-action/init@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
  with:
  languages: ${{ matrix.language }}
  # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
  # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
  # If this step fails, then you should remove it and run the build manually (see below)
  - name: Autobuild
- uses: github/codeql-action/autobuild@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+ uses: github/codeql-action/autobuild@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
 
  # ℹ️ Command-line programs to run using the OS shell.
  # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
  # ./location_of_script_within_repo/buildscript.sh
 
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+ uses: github/codeql-action/analyze@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
  with:
  category: "/language:${{matrix.language}}"

.github/workflows/create-pr.yml

@@ -36,7 +36,7 @@ jobs:
  with:
  token: ${{ steps.generate_github_token.outputs.token }}
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - uses: jenschude/auto-create-pr-action@a5369414c74963e6ec065dab49066d3711b8c1db # v0.3.2
  if: github.ref_name == 'gen-sdk-updates'

.github/workflows/docs.yml

@@ -54,7 +54,7 @@ jobs:
  distribution: 'temurin'
  java-version: '17'
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Graphviz
  uses: ts-graphviz/setup-graphviz@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c # v2.0.2

.github/workflows/release-snapshot.yml

@@ -26,7 +26,7 @@ jobs:
  with:
  token: ${{ steps.generate_github_token.outputs.token }}
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - name: Setup Java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -74,7 +74,7 @@ jobs:
  ref: main
  token: ${{ steps.generate_github_token.outputs.token }}
 
- - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+ - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
  - run: ./gradlew -Pversion=${{ github.ref_name }} writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
 

.github/workflows/scorecard.yml

@@ -32,12 +32,12 @@ jobs:
 
  steps:
  - name: "Checkout code"
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+ uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
  with:
  persist-credentials: false
 
  - name: "Run analysis"
- uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+ uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
  with:
  results_file: results.sarif
  results_format: sarif
@@ -59,14 +59,14 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+ uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: SARIF file
  path: results.sarif
  retention-days: 5
 
  # Upload the results to GitHub's code scanning dashboard.
  - name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+ uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
  with:
  sarif_file: results.sarif

build.gradle

@@ -63,13 +63,13 @@ allprojects {
 
  configurations {
  taglet {
- resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2024.5")
+ resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2024.7")
  }
  }
 
  dependencies {
  taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
- taglet 'com.google.guava:guava:33.2.1-jre'
+ taglet 'com.google.guava:guava:33.3.1-jre'
  taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
  }
 }

buildSrc/build.gradle

@@ -1,5 +1,5 @@
 plugins {
- id 'org.jetbrains.kotlin.jvm' version "2.0.0"
+ id 'org.jetbrains.kotlin.jvm' version "2.0.20"
 }
 
 repositories {
@@ -13,7 +13,7 @@ java {
 }
 
 dependencies {
- implementation "com.github.javaparser:javaparser-symbol-solver-core:3.26.0"
+ implementation "com.github.javaparser:javaparser-symbol-solver-core:3.26.2"
  implementation "com.google.code.gson:gson:2.11.0"
  implementation 'com.squareup:javapoet:1.13.0'
 }

commercetools/commercetools-apachehttp-client/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
  api project(":rmf:rmf-java-base")
- api "org.apache.httpcomponents.client5:httpclient5:5.3.1" version {
+ api "org.apache.httpcomponents.client5:httpclient5:5.4" version {
  strictly "[5.0,6.0["
  prefer "5.1.3"
  }

commercetools/commercetools-graphql-api/build.gradle

@@ -1,7 +1,7 @@
 import com.commercetools.sdk.plugins.GraphQLPlugin
 
 plugins {
- id "com.netflix.dgs.codegen" version "6.2.1"
+ id "com.netflix.dgs.codegen" version "6.3.0"
 }
 
 apply plugin:'com.netflix.dgs.codegen'
@@ -16,7 +16,7 @@ dependencies {
  api jackson_core.databind
  api jackson_core.core
  api jackson_core.datatype
- api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:6.2.1'
+ api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:6.3.0'
 
 }
 

commercetools/commercetools-monitoring-datadog/build.gradle

@@ -1,7 +1,7 @@
 dependencies {
  api project(":rmf:rmf-java-base")
  implementation "com.datadoghq:java-dogstatsd-client:4.4.2"
- implementation "com.datadoghq:datadog-api-client:2.25.0"
+ implementation "com.datadoghq:datadog-api-client:2.28.0"
 
  testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-monitoring-newrelic/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
  api project(":rmf:rmf-java-base")
- implementation 'com.newrelic.agent.java:newrelic-api:8.12.0'
+ implementation 'com.newrelic.agent.java:newrelic-api:8.14.0'
 
  testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-monitoring-opentelemetry/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
  api project(":rmf:rmf-java-base")
- implementation 'io.opentelemetry:opentelemetry-api:1.38.0'
+ implementation 'io.opentelemetry:opentelemetry-api:1.42.1'
 
  testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-okhttp-client3/build.gradle

@@ -2,7 +2,7 @@
 dependencies {
  api project(":rmf:rmf-java-base")
 
- api "com.squareup.okio:okio:3.9.0"
+ api "com.squareup.okio:okio:3.9.1"
  api "com.squareup.okhttp3:okhttp:3.14.9" version {
  strictly "[3.0,4.0["
  prefer "3.14.9"

commercetools/commercetools-okhttp-client4/build.gradle

@@ -5,7 +5,7 @@ dependencies {
  strictly '[4.0,5.0['
  prefer "4.10.0"
  }
- implementation "com.squareup.okio:okio:3.9.0"
+ implementation "com.squareup.okio:okio:3.9.1"
 
  implementation javax.validation
 }

commercetools/commercetools-reactornetty-client/build.gradle

@@ -2,8 +2,8 @@
 dependencies {
  api project(":rmf:rmf-java-base")
 
- api "io.projectreactor.netty:reactor-netty-http:1.1.19"
- api "io.projectreactor.netty:reactor-netty-core:1.1.19"
+ api "io.projectreactor.netty:reactor-netty-http:1.1.22"
+ api "io.projectreactor.netty:reactor-netty-core:1.1.22"
 
  implementation javax.validation
 }

gradle-scripts/extensions.gradle

@@ -14,27 +14,27 @@ ext {
  ]
  commons = [
  text: 'org.apache.commons:commons-text:1.12.0',
- lang3: 'org.apache.commons:commons-lang3:3.14.0',
- io: 'commons-io:commons-io:2.16.1',
+ lang3: 'org.apache.commons:commons-lang3:3.17.0',
+ io: 'commons-io:commons-io:2.17.0',
  io_version: {
  strictly '[2.8.0,)'
  prefer '2.11.0'
  }
  ]
 
  slf4j = [
- api: 'org.slf4j:slf4j-api:2.0.13',
+ api: 'org.slf4j:slf4j-api:2.0.16',
  ]
 
  logback = [
  classic: 'ch.qos.logback:logback-classic:1.3.14',
  ]
 
  jackson_core = [
- annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.17.1',
- databind: 'com.fasterxml.jackson.core:jackson-databind:2.17.1',
- core: 'com.fasterxml.jackson.core:jackson-core:2.17.1',
- datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.17.1',
+ annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.18.0',
+ databind: 'com.fasterxml.jackson.core:jackson-databind:2.18.0',
+ core: 'com.fasterxml.jackson.core:jackson-core:2.18.0',
+ datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.0',
  ]
 
  google = [
@@ -46,23 +46,23 @@ ext {
  java: 'com.graphql-java:graphql-java:19.11'
  ]
  awaitility = [
- awaitility: 'org.awaitility:awaitility:4.2.1',
+ awaitility: 'org.awaitility:awaitility:4.2.2',
  ]
 
  javax = [
  validation: 'jakarta.validation:jakarta.validation-api:3.1.0',
  ]
 
  junit = [
- junit: 'org.junit.jupiter:junit-jupiter:5.10.2',
+ junit: 'org.junit.jupiter:junit-jupiter:5.11.1',
  dataprovider: 'com.tngtech.junit.dataprovider:junit-jupiter-dataprovider:2.10',
- jsonassert: 'org.skyscreamer:jsonassert:1.5.1',
- assertj: 'org.assertj:assertj-core:3.26.0'
+ jsonassert: 'org.skyscreamer:jsonassert:1.5.3',
+ assertj: 'org.assertj:assertj-core:3.26.3'
  ]
 
  mockito = [
  inline: 'org.mockito:mockito-inline:5.2.0',
- junit: 'org.mockito:mockito-junit-jupiter:5.12.0',
+ junit: 'org.mockito:mockito-junit-jupiter:5.14.1',
  ]
 
  failsafe = [

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.8-all.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.10.2-all.zip
 networkTimeout=10000
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

package.json

@@ -9,10 +9,10 @@
  "node": ">=14.15",
  "npm": ">=5"
  },
- "packageManager": "yarn@4.2.2",
+ "packageManager": "yarn@4.5.0",
  "dependencies": {
- "husky": "9.0.11",
- "lint-staged": "15.2.5"
+ "husky": "9.1.6",
+ "lint-staged": "15.2.10"
  },
  "scripts": {
  "postinstall": "husky install",