Merge pull request #40 from spt-development/feature-spring-boot-3.3.5-upgrade

Updated dependencies to align with Spring Boot 3.3.5

Author: SimonTaylor

.github/workflows/build.yml

@@ -21,7 +21,7 @@ jobs:
             ${{ runner.os }}-maven-
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: '17'
           distribution: 'temurin'
@@ -30,7 +30,7 @@ jobs:
         run: ./mvnw clean verify -B
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: '21'
           distribution: 'temurin'

pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>3.3.4</version>
+		<version>3.3.5</version>
 		<relativePath /> <!-- lookup parent from repository -->
 	</parent>
 
@@ -32,36 +32,36 @@
 		<!-- Dependency versions -->
 		<commons-collections.version>4.4</commons-collections.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
-		<spt-development-audit-spring-boot.version>3.3.4</spt-development-audit-spring-boot.version>
-		<spt-development-cid-jms-spring-boot.version>3.3.4</spt-development-cid-jms-spring-boot.version>
-		<spt-development-cid-web-spring-boot.version>3.3.4</spt-development-cid-web-spring-boot.version>
-		<spt-development-logging-spring-boot.version>3.3.4</spt-development-logging-spring-boot.version>
+		<spt-development-audit-spring-boot.version>3.3.5</spt-development-audit-spring-boot.version>
+		<spt-development-cid-jms-spring-boot.version>3.3.5</spt-development-cid-jms-spring-boot.version>
+		<spt-development-cid-web-spring-boot.version>3.3.5</spt-development-cid-web-spring-boot.version>
+		<spt-development-logging-spring-boot.version>3.3.5</spt-development-logging-spring-boot.version>
 
 		<!-- Test dependency versions -->
 		<archunit.version>1.3.0</archunit.version>
 		<awaitility.version>4.2.2</awaitility.version>
-		<cucumber.version>7.19.0</cucumber.version>
-		<junit-platform.version>1.11.0</junit-platform.version>
-		<spt-development-test.version>3.1.11</spt-development-test.version>
-		<testcontainers.version>1.20.1</testcontainers.version>
+		<cucumber.version>7.20.1</cucumber.version>
+		<junit-platform.version>1.11.3</junit-platform.version>
+		<spt-development-test.version>3.1.12</spt-development-test.version>
+		<testcontainers.version>1.20.3</testcontainers.version>
 
 		<!-- Plugin versions -->
-		<checkstyle-maven-plugin.version>3.5.0</checkstyle-maven-plugin.version>
-		<dependency-check-maven.version>10.0.4</dependency-check-maven.version>
+		<checkstyle-maven-plugin.version>3.6.0</checkstyle-maven-plugin.version>
+		<dependency-check-maven.version>11.1.0</dependency-check-maven.version>
 		<jacoco-maven-plugin.version>0.8.12</jacoco-maven-plugin.version>
 		<license-maven-plugin.version>2.4.0</license-maven-plugin.version>
-		<maven-jxr-plugin.version>3.5.0</maven-jxr-plugin.version>
-		<maven-pmd-plugin.version>3.25.0</maven-pmd-plugin.version>
+		<maven-jxr-plugin.version>3.6.0</maven-jxr-plugin.version>
+		<maven-pmd-plugin.version>3.26.0</maven-pmd-plugin.version>
 		<maven-scm-plugin.version>2.1.0</maven-scm-plugin.version>
 		<pitest-maven.version>1.17.0</pitest-maven.version>
-		<spotbugs-plugin.version>4.8.6.4</spotbugs-plugin.version>
+		<spotbugs-plugin.version>4.8.6.5</spotbugs-plugin.version>
 
 		<!-- Plugin dependencies -->
-		<checkstyle.version>10.18.1</checkstyle.version>
+		<checkstyle.version>10.20.0</checkstyle.version>
 		<findbugs-slf4j-bug-pattern.version>1.5.0</findbugs-slf4j-bug-pattern.version>
-		<findbugs-sec-bug-pattern.version>1.12.0</findbugs-sec-bug-pattern.version>
+		<findbugs-sec-bug-pattern.version>1.13.0</findbugs-sec-bug-pattern.version>
 		<pitest-junit5-plugin.version>1.2.1</pitest-junit5-plugin.version>
-		<pmd.version>7.5.0</pmd.version>
+		<pmd.version>7.7.0</pmd.version>
 	</properties>
 
 	<dependencyManagement>
@@ -523,6 +523,19 @@
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
 				<version>${spotbugs-plugin.version}</version>
+				<dependencies>
+					<!-- Included as dependencies as well as plugins so that versions plugins picks up new versions -->
+					<dependency>
+						<groupId>jp.skypencil.findbugs.slf4j</groupId>
+						<artifactId>bug-pattern</artifactId>
+						<version>${findbugs-slf4j-bug-pattern.version}</version>
+					</dependency>
+					<dependency>
+						<groupId>com.h3xstream.findsecbugs</groupId>
+						<artifactId>findsecbugs-plugin</artifactId>
+						<version>${findbugs-sec-bug-pattern.version}</version>
+					</dependency>
+				</dependencies>
 				<configuration>
 					<effort>Max</effort>
 					<threshold>Low</threshold>