Upgrade stale dependencies

Author: tobias

dependabot/deps-list.txt

@@ -7,8 +7,8 @@ buddy/buddy-core 1.12.0-430  (Apache-2.0)
 buddy/buddy-hashers 1.4.0  (Apache-2.0)
 buddy/buddy-sign 3.1.0  (Apache-2.0)
 camel-snake-kebab/camel-snake-kebab 0.4.3  (EPL-1.0)
-ch.qos.logback/logback-classic 1.5.23  (EPL-1.0)
-ch.qos.logback/logback-core 1.5.23  (EPL-1.0)
+ch.qos.logback/logback-classic 1.5.25  (EPL-1.0)
+ch.qos.logback/logback-core 1.5.25  (EPL-1.0)
 cheshire/cheshire 6.1.0  (MIT)
 clj-commons/clj-yaml 0.7.108  (EPL-1.0)
 clj-http/clj-http 3.13.1  (MIT)
@@ -22,21 +22,21 @@ com.cemerick/friend 0.2.3  (EPL-1.0)
 com.cognitect/transit-clj 1.0.329  (Apache-2.0)
 com.cognitect/transit-java 1.0.362  (Apache-2.0)
 com.cognitect.aws/api 0.8.774  (Apache-2.0)
-com.cognitect.aws/endpoints 871.2.40.17  (Apache-2.0)
+com.cognitect.aws/endpoints 871.2.41.10  (Apache-2.0)
 com.cognitect.aws/s3 871.2.40.9  (Apache-2.0)
 com.cognitect.aws/sqs 871.2.34.1  (Apache-2.0)
 com.cognitect.aws/ssm 871.2.38.3  (Apache-2.0)
-com.fasterxml.jackson.core/jackson-annotations 2.20  (Apache-2.0)
-com.fasterxml.jackson.core/jackson-core 2.20.1  (Apache-2.0)
-com.fasterxml.jackson.core/jackson-databind 2.20.1  (Apache-2.0)
+com.fasterxml.jackson.core/jackson-annotations 2.21  (Apache-2.0)
+com.fasterxml.jackson.core/jackson-core 2.21.0  (Apache-2.0)
+com.fasterxml.jackson.core/jackson-databind 2.21.0  (Apache-2.0)
 com.fasterxml.jackson.dataformat/jackson-dataformat-cbor 2.20.0  (Apache-2.0)
 com.fasterxml.jackson.dataformat/jackson-dataformat-smile 2.20.0  (Apache-2.0)
 com.github.kenglxn.qrgen/core 2.6.0  (Apache License v2)
 com.github.kenglxn.qrgen/javase 2.6.0  (Apache License v2)
 com.github.scribejava/scribejava-apis 8.3.3  (MIT)
 com.github.scribejava/scribejava-core 8.3.3  (MIT)
 com.github.scribejava/scribejava-java8 8.3.3  (MIT)
-com.github.seancorfield/honeysql 2.7.1364  (EPL-1.0)
+com.github.seancorfield/honeysql 2.7.1368  (EPL-1.0)
 com.github.seancorfield/next.jdbc 1.3.1086  (EPL-1.0)
 com.google.inject/guice 2.0  (Apache-2.0)
 com.google.zxing/core 3.5.0  (Apache-2.0)
@@ -98,7 +98,7 @@ org.apache.maven/maven-repository-metadata 3.9.12  (Apache-2.0)
 org.bouncycastle/bcpkix-jdk18on 1.83  (Bouncy Castle Licence)
 org.bouncycastle/bcprov-jdk18on 1.83  (Bouncy Castle Licence)
 org.bouncycastle/bcutil-jdk18on 1.83  (Bouncy Castle Licence)
-org.checkerframework/checker-qual 3.49.5  (MIT)
+org.checkerframework/checker-qual 3.52.0  (MIT)
 org.clj-commons/clj-http-lite 1.0.13  (MIT)
 org.clojure/clojure 1.12.4  (EPL-1.0)
 org.clojure/core.async 1.8.741  (EPL-1.0)
@@ -140,7 +140,7 @@ org.javassist/javassist 3.18.1-GA  (MPL 1.1)
 org.mindrot/jbcrypt 0.4  (ISC)
 org.msgpack/msgpack 0.6.12  (Apache-2.0)
 org.ow2.asm/asm 9.2  (BSD-3-Clause)
-org.postgresql/postgresql 42.7.8  (BSD-2-Clause)
+org.postgresql/postgresql 42.7.9  (BSD-2-Clause)
 org.ring-clojure/ring-core-protocols 1.15.3  (MIT)
 org.ring-clojure/ring-jakarta-servlet 1.13.1  (MIT)
 org.ring-clojure/ring-websocket-middleware 0.2.1  (MIT)

dependabot/deps-tree.txt

@@ -19,15 +19,15 @@ com.cognitect.aws/api 0.8.774
           . org.clojure/data.priority-map 1.2.0
       . org.ow2.asm/asm 9.2
       X org.clojure/tools.reader 1.5.0 :older-version
-com.cognitect.aws/endpoints 871.2.40.17
+com.cognitect.aws/endpoints 871.2.41.10
 org.clojure/tools.logging 1.3.1
 duct/hikaricp-component 0.1.2
   X com.stuartsierra/component 0.3.2 :use-top
   . com.zaxxer/HikariCP-java6 2.3.13
     X org.slf4j/slf4j-api 1.7.10 :older-version
-com.fasterxml.jackson.core/jackson-databind 2.20.1
-  . com.fasterxml.jackson.core/jackson-annotations 2.20
-  . com.fasterxml.jackson.core/jackson-core 2.20.1
+com.fasterxml.jackson.core/jackson-databind 2.21.0
+  . com.fasterxml.jackson.core/jackson-annotations 2.21
+  . com.fasterxml.jackson.core/jackson-core 2.21.0
 valip/valip 0.2.0
   . commons-validator/commons-validator 1.3.1
     X commons-beanutils/commons-beanutils 1.7.0 :use-top
@@ -110,9 +110,9 @@ com.stuartsierra/component 1.2.0
 org.apache.commons/commons-email 1.6.0
   . com.sun.mail/jakarta.mail 1.6.7
     . com.sun.activation/jakarta.activation 1.2.1
-org.postgresql/postgresql 42.7.8
-  . org.checkerframework/checker-qual 3.49.5
-com.github.seancorfield/honeysql 2.7.1364
+org.postgresql/postgresql 42.7.9
+  . org.checkerframework/checker-qual 3.52.0
+com.github.seancorfield/honeysql 2.7.1368
 org.yaml/snakeyaml 1.33
 aero/aero 1.1.6
 clj-http/clj-http 3.13.1
@@ -263,8 +263,8 @@ com.cognitect.aws/s3 871.2.40.9
 clj-stacktrace/clj-stacktrace 0.2.8
 org.apache.maven/maven-model 3.9.12
   . org.codehaus.plexus/plexus-utils 3.6.0
-ch.qos.logback/logback-classic 1.5.23
-  . ch.qos.logback/logback-core 1.5.23
+ch.qos.logback/logback-classic 1.5.25
+  . ch.qos.logback/logback-core 1.5.25
   . org.slf4j/slf4j-api 2.0.17
 org.apache.maven/maven-repository-metadata 3.9.12
   . org.codehaus.plexus/plexus-utils 3.6.0

dependabot/pom.xml

@@ -30,7 +30,7 @@
     <dependency>
       <groupId>com.cognitect.aws</groupId>
       <artifactId>endpoints</artifactId>
-      <version>871.2.40.17</version>
+      <version>871.2.41.10</version>
     </dependency>
     <dependency>
       <groupId>org.clojure</groupId>
@@ -51,7 +51,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>2.20.1</version>
+      <version>2.21.0</version>
     </dependency>
     <dependency>
       <groupId>valip</groupId>
@@ -106,12 +106,12 @@
     <dependency>
       <groupId>org.postgresql</groupId>
       <artifactId>postgresql</artifactId>
-      <version>42.7.8</version>
+      <version>42.7.9</version>
     </dependency>
     <dependency>
       <groupId>com.github.seancorfield</groupId>
       <artifactId>honeysql</artifactId>
-      <version>2.7.1364</version>
+      <version>2.7.1368</version>
     </dependency>
     <dependency>
       <groupId>org.yaml</groupId>
@@ -276,7 +276,7 @@
     <dependency>
       <groupId>ch.qos.logback</groupId>
       <artifactId>logback-classic</artifactId>
-      <version>1.5.23</version>
+      <version>1.5.25</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven</groupId>

deps.edn

@@ -11,7 +11,7 @@
 
   buddy/buddy-core {:mvn/version "1.12.0-430"}
 
-  ch.qos.logback/logback-classic {:mvn/version "1.5.23"}
+  ch.qos.logback/logback-classic {:mvn/version "1.5.25"}
   cheshire/cheshire {:mvn/version "6.1.0"}
   clj-http/clj-http {:mvn/version "3.13.1"}
   clj-stacktrace/clj-stacktrace {:mvn/version "0.2.8"}
@@ -21,12 +21,12 @@
                                     ;; not used, excluded to address CVE-2012-0881, CVE-2013-4002, CVE-2009-2625
                                     net.sourceforge.nekohtml/nekohtml]}
   com.cognitect.aws/api {:mvn/version "0.8.774"}
-  com.cognitect.aws/endpoints {:mvn/version "871.2.40.17"}
+  com.cognitect.aws/endpoints {:mvn/version "871.2.41.10"}
   com.cognitect.aws/s3 {:mvn/version "871.2.40.9"}
   com.cognitect.aws/sqs {:mvn/version "871.2.34.1"}
   com.cognitect.aws/ssm {:mvn/version "871.2.38.3"}
   com.github.scribejava/scribejava-apis {:mvn/version "8.3.3"}
-  com.github.seancorfield/honeysql {:mvn/version "2.7.1364"}
+  com.github.seancorfield/honeysql {:mvn/version "2.7.1368"}
   com.github.seancorfield/next.jdbc {:mvn/version "1.3.1086"}
   com.stuartsierra/component {:mvn/version "1.2.0"}
   ;; Override the version brought in by aging-session to address CVE-2020-24164
@@ -67,7 +67,7 @@
   org.clojure/data.xml {:mvn/version "0.2.0-alpha10"}
   org.clojure/tools.logging {:mvn/version "1.3.1"}
   org.clojure/tools.nrepl {:mvn/version "0.2.13"}
-  org.postgresql/postgresql {:mvn/version "42.7.8"}
+  org.postgresql/postgresql {:mvn/version "42.7.9"}
 
   raven-clj/raven-clj {:mvn/version "1.7.0"}
   ring/ring-core {:mvn/version "1.15.3"}
@@ -84,7 +84,7 @@
 
   ;; # Address CVEs
   ;; Addresses CVE-2022-42004, CVE-2022-42003, CVE-2021-46877, CVE-2020-36518
-  com.fasterxml.jackson.core/jackson-databind {:mvn/version "2.20.1"}
+  com.fasterxml.jackson.core/jackson-databind {:mvn/version "2.21.0"}
   ;; Addresses CVE-2019-10086, CVE-2014-0114, CVE-2025-48734
   commons-beanutils/commons-beanutils {:mvn/version "1.11.0"}
   ;; Addresses CVE-2015-6420
@@ -96,7 +96,7 @@
   ;; Addresses CVE-2022-25857, CVE-2022-38749, CVE-2022-41854, CVE-2022-38751, CVE-2022-38752, CVE-2022-38750
   org.yaml/snakeyaml {:mvn/version "1.33"}}
 
- :aliases {:build {:deps {io.github.clojure/tools.build {:mvn/version "0.10.11"}}
+ :aliases {:build {:deps {io.github.clojure/tools.build {:mvn/version "0.10.12"}}
                    :ns-default build}
 
            :check {:extra-deps {athos/clj-check {:git/url "https://github.com/athos/clj-check.git"
@@ -112,7 +112,7 @@
                   net.polyc0l0r/bote {:mvn/version "0.1.0"}
                   nubank/matcher-combinators {:mvn/version "3.9.2"}
 
-                  org.clojure/tools.namespace {:mvn/version "1.5.0"}
+                  org.clojure/tools.namespace {:mvn/version "1.5.1"}
 
                   reloaded.repl/reloaded.repl {:mvn/version "0.2.4"}