update commons and protobuf

build.gradle

@@ -126,6 +126,8 @@ dependencies {
             "org.springframework.boot:spring-boot-starter-security",
 
             "org.yaml:snakeyaml:${snakeYamlVersion}",
+            // Has to be included, but is transitive to spring
+            "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
 
             // pin Prometheus client to 0.6.0 to prevent auto prefixing counter metrics with "_total"
             // see: https://github.com/prometheus/client_java/issues/640, https://github.com/prometheus/client_java/pull/653
@@ -148,8 +150,6 @@ dependencies {
             "io.opentelemetry:opentelemetry-sdk",
             "io.opentelemetry.proto:opentelemetry-proto:${openTelemetryProtoVersion}",
 
-            "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
-
             "com.google.protobuf:protobuf-java:${protobufVersion}",
             "com.google.protobuf:protobuf-java-util:${protobufVersion}",
 

gradle.properties

@@ -18,15 +18,15 @@ openTelemetryVersion=1.27.0
 openTelemetryAlphaVersion=1.27.0-alpha
 openTelemetryProtoVersion=1.1.0-alpha
 
-protobufVersion=3.22.5
+protobufVersion=3.25.3
 guavaVersion=33.0.0-jre
 geoip2Version=4.2.0
 
 httpClientVersion=4.5.14
-commonsNetVersion=3.9.0
+commonsNetVersion=3.10.0
 commonsMath3Version=3.6.1
-commonsLang3Version=3.13.0
-commonsIoVersion=2.11.0
+commonsLang3Version=3.14.0
+commonsIoVersion=2.14.0
 
 # If indluxdb-java is updated, check new version of the transitive dependency okio-jvm
 # If there is a higher new version, remove the dependency override of okio-jvm