fix some medium/low vulnerabilities

Author: jhua-vmware

.github/workflows/main.yml

@@ -76,19 +76,17 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@main
       - name: Run Codacy Analysis CLI
-        uses: codacy/codacy-analysis-cli-action@master  
+        uses: codacy/codacy-analysis-cli-action@master
         with:
           output: results.sarif
           format: sarif
           gh-code-scanning-compat: true
           max-allowed-issues: 2147483647  
-      - name: Clean duplicates
-        run: |
-          jq '.runs |= unique_by({tool, invocations, results})' results.sarif > final-results.sarif
       - name: Upload SARIF results file
-        uses: github/codeql-action/upload-sarif@main
+        uses: github/codeql-action/upload-sarif@v3
         with:
-          sarif_file: final-results.sarif  
+          sarif_file: results.sarif  
+          category: my-analysis-tool
 
   smoke-test:
     name: Smoke Test

g11n-ws/build.gradle

@@ -3,7 +3,7 @@
 
 buildscript {
     ext {
-     springBootVersion = '3.3.11'
+     springBootVersion = '3.3.13'
     }
     repositories {
         mavenLocal()
@@ -50,7 +50,7 @@ subprojects{
         httpclient='4.5.13'
         jacksonVersion = '2.16.0'
         springdocVersion='2.6.0'
-        tomcatVersion= '10.1.42'
+        tomcatVersion= '10.1.43'
         springWebMvcVersion= '6.1.16'
 
     	ehCacheVersion = '3.10.8'
@@ -59,7 +59,7 @@ subprojects{
     	junitVersion = '4.13.2'
     	jsonSimpleVersion = '1.1.1'
     	commonsCollectionsVersion = '3.2.2'
-    	commonsLangVersion = '3.12.0'
+    	commonsLangVersion = '3.18.0'
     	commonsIoVersion = '2.17.0'
     	commonsCodecVersion='1.15'
 

g11n-ws/modules/md-service-authen/build.gradle

@@ -39,7 +39,7 @@ dependencies {
     compileOnly("io.jsonwebtoken:jjwt:$jjwtVersion")
     compileOnly("org.apache.commons:commons-lang3:$commonsLangVersion")
     compileOnly("org.springdoc:springdoc-openapi-starter-webmvc-api:$springdocVersion")
-    implementation("com.nimbusds:nimbus-jose-jwt:9.37.3")
+    implementation("com.nimbusds:nimbus-jose-jwt:9.37.4")
 }
 
 bootJar {