Update all dependencies

.github/workflows/benchmark.yml

@@ -16,7 +16,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-            - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+            - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
             - name: Setup Java
               uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4

.github/workflows/ci.yml

@@ -44,7 +44,7 @@ jobs:
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - name: Setup Java
         uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -137,7 +137,7 @@ jobs:
         run: ./gradlew codeCoverageReport
 
       - name: Send code coverage report to Codecov.io
-        uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
         with:
             token: ${{ secrets.CODECOV_TOKEN }}
   docs:
@@ -159,7 +159,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - name: Setup Java
         uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -187,6 +187,6 @@ jobs:
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@db19848a5fa7950289d3668fb053140cf3028d43 # v3.3.2
+        uses: gradle/actions/dependency-submission@d9c87d481d55275bb5441eef3fe0e46805f9ef70 # v3.5.0
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}

.github/workflows/codeql.yml

@@ -50,11 +50,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-    - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+    - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+      uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+      uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+      uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/create-pr.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - uses: jenschude/auto-create-pr-action@a5369414c74963e6ec065dab49066d3711b8c1db # v0.3.2
         if: github.ref_name == 'gen-sdk-updates'

.github/workflows/docs.yml

@@ -54,7 +54,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - name: Setup Graphviz
         uses: ts-graphviz/setup-graphviz@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c # v2.0.2

.github/workflows/release-snapshot.yml

@@ -26,7 +26,7 @@ jobs:
         with:
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - name: Setup Java
         uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - name: Setup Java
         uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
@@ -74,7 +74,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/wrapper-validation-action@216d1ad2b3710bf005dc39237337b9673fd8fcd5 # v3.3.2
+      - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
       - run: ./gradlew -Pversion=${{ github.ref_name }} writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
 

.github/workflows/scorecard.yml

@@ -32,12 +32,12 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -59,14 +59,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         with:
           sarif_file: results.sarif

build.gradle

@@ -17,7 +17,7 @@ plugins {
     id 'io.github.gradle-nexus.publish-plugin' version '1.3.0'
     id 'com.github.jk1.dependency-license-report' version '2.0'
 
-    id "me.champeau.jmh" version "0.6.8"
+    id "me.champeau.jmh" version "0.7.2"
     id "jacoco"
 
     id "versioning"
@@ -66,13 +66,13 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2024.5")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2024.8")
         }
     }
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.2.1-jre'
+        taglet 'com.google.guava:guava:33.3.1-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }

commercetools/commercetools-apachehttp-client/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.3.1" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.4.1" version {
         strictly "[5.0,6.0["
         prefer "5.1.3"
     }

commercetools/commercetools-graphql-api/build.gradle

@@ -1,7 +1,7 @@
 import com.commercetools.sdk.plugins.GraphQLPlugin
 
 plugins {
-    id "com.netflix.dgs.codegen" version "6.2.1"
+    id "com.netflix.dgs.codegen" version "6.3.0"
 }
 
 apply plugin:'com.netflix.dgs.codegen'
@@ -16,7 +16,7 @@ dependencies {
     api jackson_core.databind
     api jackson_core.core
     api jackson_core.datatype
-    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:6.2.1'
+    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:6.3.0'
 
 }
 

commercetools/commercetools-monitoring-datadog/build.gradle

@@ -1,7 +1,7 @@
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation "com.datadoghq:java-dogstatsd-client:4.4.2"
-    implementation "com.datadoghq:datadog-api-client:2.25.0"
+    implementation "com.datadoghq:java-dogstatsd-client:4.4.3"
+    implementation "com.datadoghq:datadog-api-client:2.30.0"
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-monitoring-newrelic/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'com.newrelic.agent.java:newrelic-api:8.12.0'
+    implementation 'com.newrelic.agent.java:newrelic-api:8.16.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-monitoring-opentelemetry/build.gradle

@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.38.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.44.1'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }

commercetools/commercetools-okhttp-client3/build.gradle

@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.9.0"
+    implementation "com.squareup.okio:okio:3.9.1"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,4.0["
         prefer "3.14.9"

commercetools/commercetools-okhttp-client4/build.gradle

@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,5.0['
         prefer "4.10.0"
     }
-    implementation "com.squareup.okio:okio:3.9.0"
+    implementation "com.squareup.okio:okio:3.9.1"
 
     implementation javax.validation
 }

commercetools/commercetools-reactornetty-client/build.gradle

@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.1.19"
-    api "io.projectreactor.netty:reactor-netty-core:1.1.19"
+    api "io.projectreactor.netty:reactor-netty-http:1.2.0"
+    api "io.projectreactor.netty:reactor-netty-core:1.2.0"
 
     implementation javax.validation
 }

common-plugins/build.gradle

@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.0.0"
+    id 'org.jetbrains.kotlin.jvm' version "2.1.0"
 }
 
 repositories {

gradle-scripts/extensions.gradle

@@ -14,27 +14,27 @@ ext {
     ]
     commons = [
             text: 'org.apache.commons:commons-text:1.12.0',
-            lang3: 'org.apache.commons:commons-lang3:3.14.0',
-            io: 'commons-io:commons-io:2.16.1',
+            lang3: 'org.apache.commons:commons-lang3:3.17.0',
+            io: 'commons-io:commons-io:2.18.0',
             io_version: {
                     strictly '[2.8.0,)'
                     prefer '2.11.0'
                 }
     ]
 
     slf4j = [
-            api: 'org.slf4j:slf4j-api:2.0.13',
+            api: 'org.slf4j:slf4j-api:2.0.16',
     ]
 
     logback = [
             classic: 'ch.qos.logback:logback-classic:1.3.14',
     ]
 
     jackson_core = [
-            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.18.1',
-            databind: 'com.fasterxml.jackson.core:jackson-databind:2.18.1',
-            core: 'com.fasterxml.jackson.core:jackson-core:2.18.1',
-            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.1',
+            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.18.2',
+            databind: 'com.fasterxml.jackson.core:jackson-databind:2.18.2',
+            core: 'com.fasterxml.jackson.core:jackson-core:2.18.2',
+            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2',
     ]
 
     google = [
@@ -46,23 +46,23 @@ ext {
             java: 'com.graphql-java:graphql-java:19.11'
     ]
     awaitility = [
-            awaitility: 'org.awaitility:awaitility:4.2.1',
+            awaitility: 'org.awaitility:awaitility:4.2.2',
     ]
 
     javax = [
             validation: 'jakarta.validation:jakarta.validation-api:3.1.0',
     ]
 
     junit = [
-            junit: 'org.junit.jupiter:junit-jupiter:5.10.2',
+            junit: 'org.junit.jupiter:junit-jupiter:5.11.3',
             dataprovider: 'com.tngtech.junit.dataprovider:junit-jupiter-dataprovider:2.10',
-            jsonassert: 'org.skyscreamer:jsonassert:1.5.1',
-            assertj: 'org.assertj:assertj-core:3.26.0'
+            jsonassert: 'org.skyscreamer:jsonassert:1.5.3',
+            assertj: 'org.assertj:assertj-core:3.26.3'
     ]
 
     mockito = [
             inline: 'org.mockito:mockito-inline:5.2.0',
-            junit: 'org.mockito:mockito-junit-jupiter:5.12.0',
+            junit: 'org.mockito:mockito-junit-jupiter:5.14.2',
     ]
 
     failsafe = [

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.10.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.11.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME

package.json

@@ -9,10 +9,10 @@
         "node": ">=14.15",
         "npm": ">=5"
     },
-    "packageManager": "yarn@4.2.2",
+    "packageManager": "yarn@4.5.3",
     "dependencies": {
-        "husky": "9.0.11",
-        "lint-staged": "15.2.5"
+        "husky": "9.1.7",
+        "lint-staged": "15.2.10"
     },
     "scripts": {
         "postinstall": "husky install",