update dependencies (#59)

* update dependencies

* update workflow

* update OpenTelemetry

* update cyclonedx

Author: EddeCCC

.github/workflows/eumserver_test.yml

@@ -53,7 +53,7 @@ jobs:
             --nvdApiKey ${{ secrets.NVD_API_KEY }}
             --nvdApiDelay 10000
       - name: Upload test results
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: dependency-check-report-eum-server
           path: ${{ github.workspace }}/reports

gradle.properties

@@ -3,27 +3,27 @@ boomerangVersion=1.737.0
 # The OpenTelemetry-Boomerang version to ship with the EUM server
 boomerangOpenTelemetryPluginVersion=0.48.0-5
 
-springBootVersion=3.3.5
+springBootVersion=3.4.2
 snakeYamlVersion=2.3
 
 # Ensure to adapt the netty version (inspectit-ocelot-core/build.gradle) when changing the OpenCensus version
 openCensusVersion=0.31.1
 openCensusInfluxdbExporterVersion=1.2
-grpcVersion=1.68.1
+grpcVersion=1.70.0
 
 # @pin Prometheus client to 0.6.0 to prevent auto prefixing counter metrics with "_total"
 # see: https://github.com/prometheus/client_java/issues/640, https://github.com/prometheus/client_java/pull/653
 # additionally, the version 1.* introduced breaking changes
 prometheusClientVersion = 0.6.0
 # Keep the OpenTelemetry versions consistent
-openTelemetryVersion=1.37.0
-openTelemetryAlphaVersion=1.37.0-alpha
+openTelemetryVersion=1.43.0
+openTelemetryAlphaVersion=1.43.0-alpha
 openTelemetrySemConvVersion=1.30.1-alpha
-openTelemetryProtoVersion=1.3.2-alpha
-# Overwrite transitive dependency of OTel-proto to fix CVE
-protobufVersion=3.25.5
+openTelemetryProtoVersion=1.5.0-alpha
+# Overwrite transitive dependency of OTel-proto to fix CVE - Keep an eye on Spring versions
+protobufVersion=4.28.3
 
-guavaVersion=33.3.1-jre
+guavaVersion=33.4.0-jre
 geoip2Version=4.2.1
 
 httpClientVersion=4.5.14
@@ -34,17 +34,17 @@ commonsIoVersion=2.18.0
 
 influxdbJavaVersion=2.24
 
-armeriaVersion=1.31.0
-testContainersVersion=1.20.3
+armeriaVersion=1.31.3
+testContainersVersion=1.20.4
 
 ### gradle plugin versions
 ### Check for newer version at https://plugins.gradle.org/
 # io.spring.dependency-management
-springDependencyManangementVersion=1.1.6
+springDependencyManangementVersion=1.1.7
 # org.owasp.dependencycheck
-owaspDependencyCheckVersion=11.1.0
+owaspDependencyCheckVersion=12.0.2
 # org.cyclonedx.bom
-cyclonedxBomVersion=1.10.0
+cyclonedxBomVersion=2.0.0
 # com.palantir.docker
 palantirDockerVersion=0.36.0
 versionsPlugin=0.51.0

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.11-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.11.1-bin.zip
 networkTimeout=10000
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists