fix(deps): update all dependencies

Author: renovate[bot]

.github/workflows/codeql.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/semgrep.yml

@@ -36,7 +36,7 @@ jobs:
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+              uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
               with:
                   sarif_file: semgrep.sarif
               if: always()

build.gradle

@@ -78,7 +78,7 @@ allprojects {
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.6.0-jre'
+        taglet 'com.google.guava:guava:33.7.1-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }

commercetools/commercetools-graphql-api/build.gradle

@@ -33,15 +33,15 @@ dependencies {
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'com.graphql-java:graphql-java:19.11'
-    api 'tools.jackson.core:jackson-databind:3.1.5'
-    api 'tools.jackson.core:jackson-core:3.2.1'
+    api 'tools.jackson.core:jackson-databind:3.2.2'
+    api 'tools.jackson.core:jackson-core:3.2.2'
     //api jackson_core.datatype
     api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.6.0'
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.2") {
             because("security update")
         }
     }

commercetools/commercetools-monitoring-datadog/build.gradle

@@ -1,12 +1,12 @@
 dependencies {
     api project(":rmf:rmf-java-base")
     implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
-    implementation "com.datadoghq:datadog-api-client:2.56.0"
+    implementation "com.datadoghq:datadog-api-client:2.59.0"
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.2") {
             because("security update")
         }
     }

commercetools/commercetools-okhttp-client5/build.gradle

@@ -11,7 +11,7 @@ jmh {
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "com.squareup.okhttp3:okhttp:5.4.0" version {
+    api "com.squareup.okhttp3:okhttp:5.5.0" version {
         strictly '[5.0,5.99999]'
         prefer "5.4.0"
     }

commercetools/commercetools-sdk-java-api/build.gradle

@@ -3,7 +3,7 @@ dependencies {
     api project(':rmf:rmf-java-base')
     api project(':commercetools:commercetools-money')
     api 'com.fasterxml.jackson.core:jackson-annotations:2.22'
-    api 'tools.jackson.core:jackson-databind:3.1.5'
+    api 'tools.jackson.core:jackson-databind:3.2.2'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'org.apache.commons:commons-lang3:3.20.0'

commercetools/commercetools-sdk-java-checkout/build.gradle

@@ -2,7 +2,7 @@
 dependencies {
     api project(':rmf:rmf-java-base')
     api 'com.fasterxml.jackson.core:jackson-annotations:2.22'
-    api 'tools.jackson.core:jackson-databind:3.1.5'
+    api 'tools.jackson.core:jackson-databind:3.2.2'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'org.apache.commons:commons-lang3:3.20.0'

commercetools/commercetools-sdk-java-history/build.gradle

@@ -2,7 +2,7 @@
 dependencies {
     api project(':rmf:rmf-java-base')
     api 'com.fasterxml.jackson.core:jackson-annotations:2.22'
-    api 'tools.jackson.core:jackson-databind:3.1.5'
+    api 'tools.jackson.core:jackson-databind:3.2.2'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'org.apache.commons:commons-lang3:3.20.0'

commercetools/commercetools-sdk-java-importapi/build.gradle

@@ -2,7 +2,7 @@
 dependencies {
     api project(':rmf:rmf-java-base')
     api 'com.fasterxml.jackson.core:jackson-annotations:2.22'
-    api 'tools.jackson.core:jackson-databind:3.1.5'
+    api 'tools.jackson.core:jackson-databind:3.2.2'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'org.apache.commons:commons-lang3:3.20.0'