From e9a539dc1ce938f51eaa3c91494c19ce81730c26 Mon Sep 17 00:00:00 2001
From: Stefan Weil <sw@weilnetz.de>
Date: Mon, 28 Oct 2024 09:58:05 +0100
Subject: [PATCH 1/3] Update all dependencies to latest bugfix versions

All dependencies were updated to the latest bugfix versions with
`mvn versions:use-latest-releases -DallowMajorUpdates=false -DallowMinorUpdates=false`.

Signed-off-by: Stefan Weil <sw@weilnetz.de>
---
 Kitodo/pom.xml |  2 +-
 pom.xml        | 16 ++++++++--------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/Kitodo/pom.xml b/Kitodo/pom.xml
index da974cb8e30..f5fde9e9192 100644
--- a/Kitodo/pom.xml
+++ b/Kitodo/pom.xml
@@ -149,7 +149,7 @@
         <dependency>
             <groupId>org.apache.pdfbox</groupId>
             <artifactId>pdfbox</artifactId>
-            <version>2.0.26</version>
+            <version>2.0.32</version>
             <exclusions>
                 <exclusion>
                     <groupId>commons-logging</groupId>
diff --git a/pom.xml b/pom.xml
index 06b842ab129..06b78cade5b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -137,7 +137,7 @@
             <dependency>
                 <groupId>com.xebialabs.restito</groupId>
                 <artifactId>restito</artifactId>
-                <version>0.9.3</version>
+                <version>0.9.5</version>
                 <exclusions>
                     <exclusion>
                         <groupId>junit</groupId>
@@ -205,7 +205,7 @@
             <dependency>
                 <groupId>javax.el</groupId>
                 <artifactId>javax.el-api</artifactId>
-                <version>3.0.0</version>
+                <version>3.0.1-b06</version>
                 <scope>provided</scope>
             </dependency>
             <dependency>
@@ -265,7 +265,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.apache.activemq</groupId>
                 <artifactId>activemq-client</artifactId>
-                <version>5.18.5</version>
+                <version>5.18.6</version>
                 <exclusions>
                     <exclusion>
                         <groupId>org.slf4j</groupId>
@@ -424,12 +424,12 @@ from system library in Java 11+ -->
 	    <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-core</artifactId>
-                <version>2.17.1</version>
+                <version>2.17.2</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.17.1</version>
+                <version>2.17.2</version>
             </dependency>
             <dependency>
                 <groupId>org.codehaus.plexus</groupId>
@@ -485,7 +485,7 @@ from system library in Java 11+ -->
                 <!-- hibernate caching dependency -->
                 <groupId>org.ehcache</groupId>
                 <artifactId>ehcache</artifactId>
-                <version>3.8.1</version>
+                <version>3.8.2.1</version>
                 <scope>runtime</scope>
             </dependency>
             <dependency>
@@ -613,7 +613,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.omnifaces</groupId>
                 <artifactId>omnifaces</artifactId>
-                <version>3.13.3</version>
+                <version>3.13.4</version>
             </dependency>
             <dependency>
                 <groupId>org.openpreservation.jhove</groupId>
@@ -633,7 +633,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.passay</groupId>
                 <artifactId>passay</artifactId>
-                <version>1.6.5</version>
+                <version>1.6.6</version>
             </dependency>
             <dependency>
                 <groupId>org.primefaces.extensions</groupId>

From d019c01f84d17497bf72d4ac6bca94399a4ec308 Mon Sep 17 00:00:00 2001
From: Stefan Weil <sw@weilnetz.de>
Date: Mon, 28 Oct 2024 09:58:05 +0100
Subject: [PATCH 2/3] Update properties to correspond to latest bugfix versions

The properties were updated with
`mvn versions:update-properties --no-snapshot-updates -DallowMajorUpdates=false -DallowMinorUpdates=false`

Signed-off-by: Stefan Weil <sw@weilnetz.de>
---
 pom.xml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pom.xml b/pom.xml
index 06b78cade5b..84e84902325 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,8 +42,8 @@
         <maven.compiler.debuglevel>lines,vars,source</maven.compiler.debuglevel>
         <maxAllowedViolations>0</maxAllowedViolations>
         <tomcat.baseversion>9</tomcat.baseversion>
-        <tomcat.version>9.0.65</tomcat.version>
-        <awaitility.version>4.0.1</awaitility.version>
+        <tomcat.version>9.0.96</tomcat.version>
+        <awaitility.version>4.0.3</awaitility.version>
         <com.h2database.h2.version>2.2.224</com.h2database.h2.version>
         <commons-codec.version>1.15</commons-codec.version>
         <commons-io.version>2.14.0</commons-io.version>
@@ -51,7 +51,7 @@
         <commons-net.version>3.9.0</commons-net.version>
         <org.apache.xmlgraphics.version>2.8</org.apache.xmlgraphics.version>
         <org.apache.avalon.framework.version>4.3.1</org.apache.avalon.framework.version>
-        <hamcrest.version>2.2-rc1</hamcrest.version>
+        <hamcrest.version>2.2</hamcrest.version>
         <hibernate.version>5.6.15.Final</hibernate.version>
         <jaxb.api.version>2.3.3</jaxb.api.version>
         <jaxb.glassfish-runtime.version>2.3.9</jaxb.glassfish-runtime.version>
@@ -64,8 +64,8 @@
         <primefaces.extensions.version>8.0.5</primefaces.extensions.version>
         <saxon.version>9.9.1-8</saxon.version>
         <log4j.version>2.19.0</log4j.version>
-        <junit.version>5.9.2</junit.version>
-        <elasticsearch.version>7.17.24</elasticsearch.version>
+        <junit.version>5.9.3</junit.version>
+        <elasticsearch.version>7.17.25</elasticsearch.version>
         <maven-failsafe-plugin.version>2.22.2</maven-failsafe-plugin.version>
 
         <!-- maven-resources-plugin versions greater 3.2.0 introduce changes that
@@ -77,11 +77,11 @@
         <mockito.version>5.9.0</mockito.version>
         <properties-maven-plugin.version>1.2.1</properties-maven-plugin.version>
         <selenium.version>3.141.59</selenium.version>
-        <spring.security.version>5.7.11</spring.security.version>
+        <spring.security.version>5.7.13</spring.security.version>
         <flyway-maven-plugin.version>8.4.4</flyway-maven-plugin.version>
         <spotbugs-maven-plugin.version>4.3.0</spotbugs-maven-plugin.version>
         <pitest.version>1.4.10</pitest.version>
-        <mariadb-java-client.version>2.7.6</mariadb-java-client.version>
+        <mariadb-java-client.version>2.7.12</mariadb-java-client.version>
         <maven-javadoc-plugin.version>3.3.0</maven-javadoc-plugin.version>
     </properties>
 

From 329f2361f8a1aba803e334e4fb9d563ca0a45a3b Mon Sep 17 00:00:00 2001
From: Stefan Weil <sw@weilnetz.de>
Date: Tue, 29 Oct 2024 09:57:27 +0100
Subject: [PATCH 3/3] Restore old version for javax.el-api

This was suggested in the code review.

Signed-off-by: Stefan Weil <sw@weilnetz.de>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 84e84902325..768f8d8456d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -205,7 +205,7 @@
             <dependency>
                 <groupId>javax.el</groupId>
                 <artifactId>javax.el-api</artifactId>
-                <version>3.0.1-b06</version>
+                <version>3.0.0</version>
                 <scope>provided</scope>
             </dependency>
             <dependency>