v0.6.9 dep updates

[eschultink]

Logistics

• Routine v0.6.9 dependency maintenance: bump Java/Maven and npm packages across the build and tooling modules, apply security overrides where needed, and document the updates in the CHANGELOG.

Change implications

• dependencies added/changed? yes — Java dependencies and Maven plugins updated; npm dependencies updated in js-reference, schema-tool, and psoxy-test, including security overrides.
• something important to note in future release notes?
  • NOTE in CHANGELOG.md anything that will show up in terraform plan/apply that isn't obviously a no-op? No — dependency-only updates; no expected Terraform plan/apply changes.
  • breaking changes? No — maintenance release; no breaking API or module changes indicated.

[Copilot]

Pull request overview

Routine v0.6.9 dependency maintenance across the Java Maven modules and the Node-based tooling packages, plus documentation of the upgrades in the changelog.

Changes:

• Bump key Java library versions (e.g., Dagger, Google Cloud BOM, JUnit, OpenNLP, BouncyCastle) and introduce centralized Maven plugin version properties in java/pom.xml.
• Update Node tooling dependencies and security overrides (notably brace-expansion, js-yaml, tar, and cloud SDK packages) across schema-tool, psoxy-test, and js-reference.
• Record the dependency upgrade set in CHANGELOG.md.

Reviewed changes

Copilot reviewed 10 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tools/schema-tool/package.json	Updates direct deps (commander) and security overrides (brace-expansion/js-yaml/tar).
tools/schema-tool/package-lock.json	Lockfile refresh to reflect updated overrides and resolved versions.
tools/psoxy-test/package.json	Updates AWS/GCP client dependencies and refreshes security overrides.
tools/psoxy-test/package-lock.json	Large lockfile refresh reflecting the updated SDK and transitive dependency graph.
tools/js-reference/package.json	Updates security overrides for js-yaml and brace-expansion.
tools/js-reference/package-lock.json	Lockfile update reflecting js-yaml resolution change.
java/pom.xml	Updates Java dependency versions and centralizes Maven plugin versions via properties.
java/impl/gcp/pom.xml	Switches plugin versions to centralized ${plugin.*.version} properties.
java/impl/cmd-line/pom.xml	Updates commons-cli version and switches plugin versions to centralized properties.
java/impl/aws/pom.xml	Updates AWS SDK BOM version and switches plugin versions to centralized properties.
java/gateway-core/pom.xml	Minor library bumps and switches plugin versions to centralized properties.
java/core/pom.xml	Switches flatten plugin version to centralized property.
CHANGELOG.md	Documents the dependency upgrade set for the upcoming release notes.

Files not reviewed (3)

• tools/js-reference/package-lock.json: Generated file
• tools/psoxy-test/package-lock.json: Generated file
• tools/schema-tool/package-lock.json: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.