X-Git-Url: https://git.opendaylight.org/gerrit/gitweb?a=blobdiff_plain;f=odlparent%2Fpom.xml;h=707fbb67ad2b88a1f36de6b51ad6cefe543cd2f2;hb=b13c4b88eb334651cb4201eebf43510e459b5fe9;hp=f4f93495920f88e7c67cef1332f24649138bb073;hpb=479674db2e21a74d4a850f768800677d87ebbace;p=odlparent.git

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index f4f934959..ba783bda1 100644
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -13,7 +13,7 @@
   <parent>
     <groupId>org.opendaylight.odlparent</groupId>
     <artifactId>odlparent-lite</artifactId>
-    <version>13.0.5-SNAPSHOT</version>
+    <version>13.1.1</version>
     <relativePath>../odlparent-lite</relativePath>
   </parent>
 
@@ -38,11 +38,11 @@
     <nexus.repository.snapshot>opendaylight.snapshot</nexus.repository.snapshot>
 
     <!-- Used in controller, genius, infrautils, netconf, netvirt, ovsdb, serviceutils -->
-    <karaf.version>4.4.4</karaf.version>
+    <karaf.version>4.4.6</karaf.version>
 
     <!-- Supporting Libraries -->
     <!-- Only used internally -->
-    <bouncycastle.version>1.76</bouncycastle.version>
+    <bouncycastle.version>1.77</bouncycastle.version>
 
     <!-- JaCoCo configuration, by default tied to Sonar configuration, but can be overridden separately
          to allow projects to report Sonar values from the entire project. -->
@@ -82,6 +82,8 @@
          to true. Set to 'false' in pom.xml of project which desires to not enforce
          no reported violations. -->
     <odlparent.spotbugs.enforce>true</odlparent.spotbugs.enforce>
+    <!-- Do not for a new JVM for spotbugs execution -->
+    <spotbugs.fork>false</spotbugs.fork>
 
     <!-- Opt-in into maven-dependency-plugin dependency declaration consistency
          enforcement. Defaults to false. Set to 'true' in pom.xml of a project which
@@ -100,7 +102,7 @@
       <dependency>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>odlparent-artifacts</artifactId>
-        <version>13.0.5-SNAPSHOT</version>
+        <version>13.1.1</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -123,7 +125,7 @@
         <groupId>com.puppycrawl.tools</groupId>
         <artifactId>checkstyle</artifactId>
         <!-- This should match the plugin management on maven-checkstyle-plugin below -->
-        <version>10.12.3</version>
+        <version>10.15.0</version>
       </dependency>
 
       <!-- Testing Dependencies -->
@@ -131,14 +133,14 @@
       <dependency>
         <groupId>org.junit</groupId>
         <artifactId>junit-bom</artifactId>
-        <version>5.10.0</version>
+        <version>5.10.2</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-bom</artifactId>
-        <version>5.5.0</version>
+        <version>5.11.0</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -171,7 +173,7 @@
       <dependency>
         <groupId>org.awaitility</groupId>
         <artifactId>awaitility</artifactId>
-        <version>4.1.1</version>
+        <version>4.2.1</version>
         <scope>test</scope>
       </dependency>
 
@@ -184,7 +186,7 @@
         <artifactId>value</artifactId>
         <classifier>annotations</classifier>
         <!-- Keep this version in sync with annotationProcessorPaths declaration below -->
-        <version>2.9.3</version>
+        <version>2.10.1</version>
         <optional>true</optional>
       </dependency>
 
@@ -200,23 +202,31 @@
 
       <!--
            Supporting Libraries
-       -->
+      -->
+      <dependency>
+        <groupId>org.slf4j</groupId>
+        <artifactId>slf4j-bom</artifactId>
+        <version>2.0.9</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-core</artifactId>
-        <version>1.2.11</version>
+        <version>1.3.14</version>
       </dependency>
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-        <version>1.2.11</version>
+        <version>1.3.14</version>
       </dependency>
 
       <!-- log4j2 -->
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-bom</artifactId>
-        <version>2.17.1</version>
+        <version>2.23.1</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -225,7 +235,7 @@
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>32.1.2-jre</version>
+        <version>32.1.3-jre</version>
         <exclusions>
           <exclusion>
             <!-- Do not leak JSR305 onto the classpath by default -->
@@ -238,7 +248,7 @@
         <groupId>com.google.guava</groupId>
         <artifactId>guava-testlib</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite and docs -->
-        <version>32.1.2-jre</version>
+        <version>32.1.3-jre</version>
         <scope>test</scope>
         <exclusions>
           <exclusion>
@@ -251,12 +261,12 @@
       <dependency>
         <groupId>org.checkerframework</groupId>
         <artifactId>checker-qual</artifactId>
-        <version>3.38.0</version>
+        <version>3.42.0</version>
       </dependency>
       <dependency>
         <groupId>com.google.errorprone</groupId>
         <artifactId>error_prone_annotations</artifactId>
-        <version>2.21.1</version>
+        <version>2.26.1</version>
       </dependency>
 
       <dependency>
@@ -267,12 +277,12 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
-        <version>3.13.0</version>
+        <version>3.14.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-text</artifactId>
-        <version>1.10.0</version>
+        <version>1.11.0</version>
       </dependency>
 
       <!-- Jersey for JAXRS -->
@@ -284,7 +294,7 @@
       <dependency>
         <groupId>org.glassfish.jersey</groupId>
         <artifactId>jersey-bom</artifactId>
-        <version>2.40</version>
+        <version>2.42</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -320,23 +330,23 @@
       </dependency>
 
       <!-- These three need to be consistent:
-        jackson-2.15.2 needs woodstox-6.4.0+
+        jackson-2.16.2 needs woodstox-6.6.0+
         woodstox-5.3+ needs stax2-api-4.2.x
         -->
       <dependency>
         <groupId>org.codehaus.woodstox</groupId>
         <artifactId>stax2-api</artifactId>
-        <version>4.2.1</version>
+        <version>4.2.2</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>6.5.1</version>
+        <version>6.6.2</version>
       </dependency>
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
-        <version>2.15.2</version>
+        <version>2.16.2</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -344,7 +354,7 @@
       <dependency>
         <groupId>com.github.spotbugs</groupId>
         <artifactId>spotbugs-annotations</artifactId>
-        <version>4.7.3</version>
+        <version>4.8.3</version>
         <!-- Contains retention=RUNTIME annotations, which are not really needed -->
         <optional>true</optional>
         <exclusions>
@@ -358,7 +368,7 @@
       <dependency>
         <groupId>org.eclipse.jdt</groupId>
         <artifactId>org.eclipse.jdt.annotation</artifactId>
-        <version>2.2.700</version>
+        <version>2.3.0</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.gson</groupId>
@@ -368,7 +378,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.13.0</version>
+        <version>2.16.0</version>
       </dependency>
 
       <!-- Netty -->
@@ -376,7 +386,7 @@
         <groupId>io.netty</groupId>
         <artifactId>netty-bom</artifactId>
         <!-- When bumping this version, remember to also change the JavaDoc link in odlparent-lite -->
-        <version>4.1.99.Final</version>
+        <version>4.1.108.Final</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -405,7 +415,7 @@
       <dependency>
         <groupId>org.javassist</groupId>
         <artifactId>javassist</artifactId>
-        <version>3.29.2-GA</version>
+        <version>3.30.2-GA</version>
       </dependency>
       <dependency>
         <groupId>org.jboss.spec.javax.transaction</groupId>
@@ -644,7 +654,7 @@
       <dependency>
         <groupId>org.assertj</groupId>
         <artifactId>assertj-core</artifactId>
-        <version>3.24.2</version>
+        <version>3.25.3</version>
         <scope>test</scope>
         <exclusions>
           <exclusion>
@@ -656,7 +666,7 @@
       <dependency>
         <groupId>org.assertj</groupId>
         <artifactId>assertj-guava</artifactId>
-        <version>3.24.2</version>
+        <version>3.25.3</version>
         <scope>test</scope>
       </dependency>
 
@@ -672,7 +682,7 @@
       <dependency>
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-bom</artifactId>
-        <version>9.4.52.v20230823</version>
+        <version>9.4.54.v20240208</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -721,7 +731,7 @@
       <dependency>
         <groupId>io.dropwizard.metrics</groupId>
         <artifactId>metrics-bom</artifactId>
-        <version>4.2.20</version>
+        <version>4.2.25</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -830,18 +840,18 @@
              We do not need to specify the groupId. -->
         <plugin>
           <artifactId>maven-checkstyle-plugin</artifactId>
-          <version>3.3.0</version>
+          <version>3.3.1</version>
           <dependencies>
             <dependency>
               <groupId>com.puppycrawl.tools</groupId>
               <artifactId>checkstyle</artifactId>
               <!-- This should match the dependency management on com.puppycrawl.tools:checkstyle above -->
-              <version>10.12.3</version>
+              <version>10.15.0</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>checkstyle</artifactId>
-              <version>13.0.5-SNAPSHOT</version>
+              <version>13.1.1</version>
             </dependency>
             <dependency>
               <groupId>com.github.sevntu-checkstyle</groupId>
@@ -925,7 +935,7 @@
                 <groupId>org.immutables</groupId>
                 <artifactId>value</artifactId>
                 <!-- Keep this version in sync with dependency declaration above -->
-                <version>2.9.3</version>
+                <version>2.10.1</version>
               </dependency>
               <dependency>
                 <groupId>org.kohsuke.metainf-services</groupId>
@@ -938,11 +948,11 @@
         </plugin>
         <plugin>
           <artifactId>maven-failsafe-plugin</artifactId>
-          <version>3.1.2</version>
+          <version>3.2.5</version>
         </plugin>
         <plugin>
           <artifactId>maven-invoker-plugin</artifactId>
-          <version>3.6.0</version>
+          <version>3.6.1</version>
         </plugin>
         <plugin>
           <artifactId>maven-dependency-plugin</artifactId>
@@ -958,7 +968,7 @@
                   <artifactItem>
                     <groupId>org.opendaylight.odlparent</groupId>
                     <artifactId>odl-license</artifactId>
-                    <version>13.0.5-SNAPSHOT</version>
+                    <version>13.1.1</version>
                     <type>license</type>
                     <outputDirectory>${project.build.outputDirectory}</outputDirectory>
                     <destFileName>LICENSE</destFileName>
@@ -984,20 +994,20 @@
 
         <plugin>
           <artifactId>maven-plugin-plugin</artifactId>
-          <version>3.8.2</version>
+          <version>3.12.0</version>
         </plugin>
 
         <plugin>
           <artifactId>maven-remote-resources-plugin</artifactId>
-          <version>3.1.0</version>
+          <version>3.2.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-shade-plugin</artifactId>
-          <version>3.5.1</version>
+          <version>3.5.2</version>
         </plugin>
         <plugin>
           <artifactId>maven-source-plugin</artifactId>
-          <version>3.3.0</version>
+          <version>3.3.1</version>
           <executions>
             <execution>
               <id>attach-sources</id>
@@ -1010,7 +1020,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.1.2</version>
+          <version>3.2.5</version>
           <configuration>
             <redirectTestOutputToFile>${maven.test.redirectTestOutputToFile}</redirectTestOutputToFile>
             <trimStackTrace>false</trimStackTrace>
@@ -1121,29 +1131,17 @@
         <plugin>
           <groupId>com.github.spotbugs</groupId>
           <artifactId>spotbugs-maven-plugin</artifactId>
-          <version>4.7.3.6</version>
+          <version>4.8.3.1</version>
           <dependencies>
             <dependency>
               <groupId>com.github.spotbugs</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>4.7.3</version>
+              <version>4.8.3</version>
             </dependency>
             <dependency>
               <groupId>org.opendaylight.odlparent</groupId>
               <artifactId>spotbugs</artifactId>
-              <version>13.0.5-SNAPSHOT</version>
-            </dependency>
-
-            <!-- The SpotBugs Maven plugin uses SLF4J-2 -->
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-api</artifactId>
-              <version>2.0.0</version>
-            </dependency>
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-simple</artifactId>
-              <version>2.0.0</version>
+              <version>13.1.1</version>
             </dependency>
           </dependencies>
           <configuration>
@@ -1188,7 +1186,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>properties-maven-plugin</artifactId>
-          <version>1.2.0</version>
+          <version>1.2.1</version>
         </plugin>
         <plugin>
           <groupId>org.eclipse.m2e</groupId>
@@ -1456,7 +1454,7 @@
       <plugin>
         <groupId>org.opendaylight.odlparent</groupId>
         <artifactId>copy-files-plugin</artifactId>
-        <version>13.0.5-SNAPSHOT</version>
+        <version>13.1.1</version>
         <executions>
           <execution>
             <phase>prepare-package</phase>