updating several dependencies (#1337) (#1340)

Signed-off-by: Amit Galitzky <[email protected]>

.github/workflows/draft-release-notes-workflow.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Update draft release notes
-        uses: release-drafter/release-drafter@v5
+        uses: release-drafter/release-drafter@v6
         with:
           config-name: draft-release-notes-config.yml
           name: Version (set here)

build.gradle

@@ -45,7 +45,7 @@ buildscript {
         bwcFilePath = "src/test/resources/org/opensearch/ad/bwc/"
         bwcJobSchedulerPath = bwcFilePath + "job-scheduler/"
         bwcAnomalyDetectionPath = bwcFilePath + "anomaly-detection/"
-
+        jacksonVersion = "2.18.0"
         // gradle build won't print logs during test by default unless there is a failure.
         // It is useful to record intermediately information like prediction precision and recall.
         // This option turn on log printing during tests. 
@@ -68,7 +68,7 @@ plugins {
     id 'com.netflix.nebula.ospackage' version "11.5.0"
     id "com.diffplug.spotless" version "6.25.0"
     id 'java-library'
-    id 'org.gradle.test-retry' version '1.5.7'
+    id 'org.gradle.test-retry' version '1.6.0'
 }
 
 tasks.withType(JavaCompile) {
@@ -119,7 +119,6 @@ dependencies {
     implementation "org.opensearch.client:opensearch-rest-client:${opensearch_version}"
     compileOnly group: 'com.google.guava', name: 'guava', version:'32.1.3-jre'
     compileOnly group: 'com.google.guava', name: 'failureaccess', version:'1.0.1'
-    implementation group: 'org.javassist', name: 'javassist', version:'3.28.0-GA'
     implementation group: 'org.apache.commons', name: 'commons-math3', version: '3.6.1'
     implementation group: 'com.google.code.gson', name: 'gson', version: '2.8.9'
     implementation group: 'com.yahoo.datasketches', name: 'sketches-core', version: '0.13.4'
@@ -131,8 +130,8 @@ dependencies {
     implementation 'software.amazon.randomcutforest:randomcutforest-core:4.2.0'
 
     // we inherit jackson-core from opensearch core
-    implementation "com.fasterxml.jackson.core:jackson-databind:2.16.1"
-    implementation "com.fasterxml.jackson.core:jackson-annotations:2.16.1"
+    implementation("com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}")
+    implementation("com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}")
 
     // used for serializing/deserializing rcf models.
     implementation group: 'io.protostuff', name: 'protostuff-core', version: '1.8.0'
@@ -153,17 +152,17 @@ dependencies {
     implementation group: 'org.owasp.encoder' , name: 'encoder', version: '1.2.3'
 
     testImplementation group: 'pl.pragmatists', name: 'JUnitParams', version: '1.1.1'
-    testImplementation group: 'org.mockito', name: 'mockito-core', version: '5.9.0'
+    testImplementation group: 'org.mockito', name: 'mockito-core', version: '5.14.1'
     testImplementation group: 'org.objenesis', name: 'objenesis', version: '3.3'
     testImplementation group: 'net.bytebuddy', name: 'byte-buddy', version: '1.14.9'
     testImplementation group: 'net.bytebuddy', name: 'byte-buddy-agent', version: '1.14.9'
     testCompileOnly 'org.apiguardian:apiguardian-api:1.1.2'
     // jupiter is required to run unit tests not inherited from OpenSearchTestCase (e.g., PreviousValueImputerTests)
-    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.10.0'
-    testImplementation  'org.junit.jupiter:junit-jupiter-params:5.10.0'
-    testImplementation 'org.junit.jupiter:junit-jupiter-engine:5.10.0'
+    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.11.2'
+    testImplementation  'org.junit.jupiter:junit-jupiter-params:5.11.2'
+    testImplementation 'org.junit.jupiter:junit-jupiter-engine:5.11.2'
     testImplementation "org.opensearch:opensearch-core:${opensearch_version}"
-    testRuntimeOnly("org.junit.platform:junit-platform-launcher:1.10.0")
+    testRuntimeOnly("org.junit.platform:junit-platform-launcher:1.11.2")
     testCompileOnly 'junit:junit:4.13.2'
 }
 
@@ -219,15 +218,15 @@ configurations.all {
         force "org.apache.httpcomponents.client5:httpclient5:${versions.httpclient5}"
         force "commons-codec:commons-codec:${versions.commonscodec}"
 
-        force "org.mockito:mockito-core:5.9.0"
+        force "org.mockito:mockito-core:5.14.1"
         force "org.objenesis:objenesis:3.3"
         force "net.bytebuddy:byte-buddy:1.14.9"
         force "net.bytebuddy:byte-buddy-agent:1.14.9"
         force "com.google.code.gson:gson:2.8.9"
         force "junit:junit:4.13.2"
 
         force "com.google.guava:guava:32.1.3-jre" // CVE for 31.1
-        force "com.fasterxml.jackson.core:jackson-core:2.16.0" // CVE for 2.14.1
+        force("com.fasterxml.jackson.core:jackson-core:${jacksonVersion}")
         force "org.eclipse.platform:org.eclipse.core.runtime:3.29.0" // CVE for < 3.29.0        
     }
 }