updating several dependencies

Signed-off-by: Amit Galitzky <[email protected]>

.github/workflows/benchmark.yml

@@ -38,7 +38,7 @@ jobs:
 
  steps:
  - name: Setup Java
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: 21

.github/workflows/draft-release-notes-workflow.yml

@@ -14,7 +14,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Update draft release notes
- uses: release-drafter/release-drafter@v5
+ uses: release-drafter/release-drafter@v6
  with:
  config-name: draft-release-notes-config.yml
  name: Version (set here)

.github/workflows/long_running.yml

@@ -38,7 +38,7 @@ jobs:
 
  steps:
  - name: Setup Java
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: 21

.github/workflows/maven-publish.yml

@@ -23,7 +23,7 @@ jobs:
  contents: write
 
  steps:
- - uses: actions/setup-java@v3
+ - uses: actions/setup-java@v4
  with:
  distribution: temurin # Temurin is a distribution of adoptium
  java-version: 21

.github/workflows/test_build_multi_platform.yml

@@ -39,7 +39,7 @@ jobs:
  JENKINS_URL: build.ci.opensearch.org
  steps:
  - name: Setup Java ${{ matrix.java }}
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java }}
@@ -76,7 +76,7 @@ jobs:
 
  steps:
  - name: Setup Java ${{ matrix.java }}
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java }}
@@ -106,7 +106,7 @@ jobs:
 
  steps:
  - name: Setup Java ${{ matrix.java }}
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java }}

.github/workflows/test_bwc.yml

@@ -34,7 +34,7 @@ jobs:
 
  steps:
  - name: Setup Java ${{ matrix.java }}
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java }}

.github/workflows/test_security.yml

@@ -22,7 +22,7 @@ jobs:
 
  steps:
  - name: Setup Java ${{ matrix.java }}
- uses: actions/setup-java@v3
+ uses: actions/setup-java@v4
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java }}

build.gradle

@@ -45,7 +45,7 @@ buildscript {
  bwcFilePath = "src/test/resources/org/opensearch/ad/bwc/"
  bwcJobSchedulerPath = bwcFilePath + "job-scheduler/"
  bwcAnomalyDetectionPath = bwcFilePath + "anomaly-detection/"
-
+ jacksonVersion = "2.18.0"
  // gradle build won't print logs during test by default unless there is a failure.
  // It is useful to record intermediately information like prediction precision and recall.
  // This option turn on log printing during tests. 
@@ -68,7 +68,7 @@ plugins {
  id 'com.netflix.nebula.ospackage' version "11.5.0"
  id "com.diffplug.spotless" version "6.25.0"
  id 'java-library'
- id 'org.gradle.test-retry' version '1.5.7'
+ id 'org.gradle.test-retry' version '1.6.0'
 }
 
 tasks.withType(JavaCompile) {
@@ -119,7 +119,6 @@ dependencies {
  implementation "org.opensearch.client:opensearch-rest-client:${opensearch_version}"
  compileOnly group: 'com.google.guava', name: 'guava', version:'32.1.3-jre'
  compileOnly group: 'com.google.guava', name: 'failureaccess', version:'1.0.1'
- implementation group: 'org.javassist', name: 'javassist', version:'3.28.0-GA'
  implementation group: 'org.apache.commons', name: 'commons-math3', version: '3.6.1'
  implementation group: 'com.google.code.gson', name: 'gson', version: '2.8.9'
  implementation group: 'com.yahoo.datasketches', name: 'sketches-core', version: '0.13.4'
@@ -131,8 +130,8 @@ dependencies {
  implementation 'software.amazon.randomcutforest:randomcutforest-core:4.2.0'
 
  // we inherit jackson-core from opensearch core
- implementation "com.fasterxml.jackson.core:jackson-databind:2.16.1"
- implementation "com.fasterxml.jackson.core:jackson-annotations:2.16.1"
+ implementation("com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}")
+ implementation("com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}")
 
  // used for serializing/deserializing rcf models.
  implementation group: 'io.protostuff', name: 'protostuff-core', version: '1.8.0'
@@ -153,17 +152,17 @@ dependencies {
  implementation group: 'org.owasp.encoder' , name: 'encoder', version: '1.2.3'
 
  testImplementation group: 'pl.pragmatists', name: 'JUnitParams', version: '1.1.1'
- testImplementation group: 'org.mockito', name: 'mockito-core', version: '5.9.0'
+ testImplementation group: 'org.mockito', name: 'mockito-core', version: '5.14.1'
  testImplementation group: 'org.objenesis', name: 'objenesis', version: '3.3'
  testImplementation group: 'net.bytebuddy', name: 'byte-buddy', version: '1.14.9'
  testImplementation group: 'net.bytebuddy', name: 'byte-buddy-agent', version: '1.14.9'
  testCompileOnly 'org.apiguardian:apiguardian-api:1.1.2'
  // jupiter is required to run unit tests not inherited from OpenSearchTestCase (e.g., PreviousValueImputerTests)
- testImplementation 'org.junit.jupiter:junit-jupiter-api:5.10.0'
- testImplementation 'org.junit.jupiter:junit-jupiter-params:5.10.0'
- testImplementation 'org.junit.jupiter:junit-jupiter-engine:5.10.0'
+ testImplementation 'org.junit.jupiter:junit-jupiter-api:5.11.2'
+ testImplementation 'org.junit.jupiter:junit-jupiter-params:5.11.2'
+ testImplementation 'org.junit.jupiter:junit-jupiter-engine:5.11.2'
  testImplementation "org.opensearch:opensearch-core:${opensearch_version}"
- testRuntimeOnly("org.junit.platform:junit-platform-launcher:1.10.0")
+ testRuntimeOnly("org.junit.platform:junit-platform-launcher:1.11.2")
  testCompileOnly 'junit:junit:4.13.2'
 }
 
@@ -219,15 +218,15 @@ configurations.all {
  force "org.apache.httpcomponents.client5:httpclient5:${versions.httpclient5}"
  force "commons-codec:commons-codec:${versions.commonscodec}"
 
- force "org.mockito:mockito-core:5.9.0"
+ force "org.mockito:mockito-core:5.14.1"
  force "org.objenesis:objenesis:3.3"
  force "net.bytebuddy:byte-buddy:1.14.9"
  force "net.bytebuddy:byte-buddy-agent:1.14.9"
  force "com.google.code.gson:gson:2.8.9"
  force "junit:junit:4.13.2"
 
  force "com.google.guava:guava:32.1.3-jre" // CVE for 31.1
- force "com.fasterxml.jackson.core:jackson-core:2.16.0" // CVE for 2.14.1
+ force("com.fasterxml.jackson.core:jackson-core:${jacksonVersion}")
  force "org.eclipse.platform:org.eclipse.core.runtime:3.29.0" // CVE for < 3.29.0 
  }
 }