NIFI-14050 - Dependency housekeeping - Spring Security, AWS, commons-io, Elastic, Mongo, Neo4J, Redis

This closes #9556

- AWS SDK v1 from 1.2.778 to 1.12.779
- AWS SDK v2 from 2.29.15 to 2.29.22
- ZSTD from 1.5.6-7 to 1.5.6-8
- commons-io from 2.17.0 to 2.18.0
- Test containers from 1.20.3 to 1.20.4
- log4j from 2.24.1 to 2.24.2
- Spring Security from 6.4.0 to 6.4.1
- jsoup from 1.18.1 to 1.18.2
- metrics-jvm and metrics-core from 4.2.28 to 4.2.29
- elasticsearch client from 8.15.3 to 8.16.1
- Spring integration from 6.3.5 to 6.4.0
- greenmail from 2.0.1 to 2.1.1
- gremlin from 3.7.2 to 3.7.3
- janusgraph from 1.0.0 to 1.2.0-20241120
- amqp client from 5.22.0 to 5.23.0
- neo4j driver from 5.26.0 to 5.26.3
- mongodb driver from 4.11.4 to 4.11.5
- jackson-datatype-protobuf from 0.9.16 to 0.9.17
- Redis from 3.3.5 to 3.4.0
- Slack bolt from 1.44.1 to 1.44.2
- Spring boot from 3.3.5 to 3.4.0
- datafaker from 2.4.1 to 2.4.2
- Spring retry from 2.0.9 to 2.0.10
- Kotlin from 2.0.21 to 2.1.0

Signed-off-by: Joseph Witt <joewitt@apache.org>

nifi-commons/nifi-metrics/pom.xml

@@ -31,12 +31,12 @@
         <dependency>
             <groupId>io.dropwizard.metrics</groupId>
             <artifactId>metrics-jvm</artifactId>
-            <version>4.2.28</version>
+            <version>4.2.29</version>
         </dependency>
         <dependency>
             <groupId>io.dropwizard.metrics</groupId>
             <artifactId>metrics-core</artifactId>
-            <version>4.2.28</version>
+            <version>4.2.29</version>
         </dependency>
     </dependencies>
 </project>

nifi-extension-bundles/nifi-aws-bundle/pom.xml

@@ -72,6 +72,13 @@
                 <artifactId>protobuf-java</artifactId>
                 <version>3.25.5</version>
             </dependency>
+            <!-- Override kotlin-stdlib-common from amazon-kinesis-client -->
+            <!-- can be removed when not relying on kotlin-stdlib-common:jar anymore -->
+            <dependency>
+                <groupId>org.jetbrains.kotlin</groupId>
+                <artifactId>kotlin-stdlib-common</artifactId>
+                <version>2.0.21</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 </project>

nifi-extension-bundles/nifi-elasticsearch-bundle/pom.xml

@@ -33,7 +33,7 @@ language governing permissions and limitations under the License. -->
     </modules>
 
     <properties>
-        <elasticsearch.client.version>8.15.3</elasticsearch.client.version>
+        <elasticsearch.client.version>8.16.1</elasticsearch.client.version>
     </properties>
 
     <dependencyManagement>

nifi-extension-bundles/nifi-email-bundle/nifi-email-processors/pom.xml

@@ -25,7 +25,7 @@
     <artifactId>nifi-email-processors</artifactId>
     <packaging>jar</packaging>
     <properties>
-        <spring.integration.version>6.3.5</spring.integration.version>
+        <spring.integration.version>6.4.0</spring.integration.version>
     </properties>
 
     <dependencies>
@@ -99,7 +99,7 @@
         <dependency>
             <groupId>com.icegreen</groupId>
             <artifactId>greenmail</artifactId>
-            <version>2.0.1</version>
+            <version>2.1.1</version>
             <scope>test</scope>
         </dependency>
     </dependencies>

nifi-extension-bundles/nifi-graph-bundle/nifi-graph-test-clients/pom.xml

@@ -25,10 +25,10 @@
     <artifactId>nifi-graph-test-clients</artifactId>
     <packaging>jar</packaging>
     <properties>
-        <gremlin.version>3.7.2</gremlin.version>
-        <janusgraph.version>1.0.0</janusgraph.version>
+        <gremlin.version>3.7.3</gremlin.version>
+        <janusgraph.version>1.2.0-20241120-125614.80ef1d9</janusgraph.version>
         <guava.version>33.3.1-jre</guava.version>
-        <amqp-client.version>5.22.0</amqp-client.version>
+        <amqp-client.version>5.23.0</amqp-client.version>
     </properties>
     <dependencyManagement>
         <dependencies>

nifi-extension-bundles/nifi-graph-bundle/nifi-neo4j-cypher-service/pom.xml

@@ -19,7 +19,7 @@
     <packaging>jar</packaging>
 
     <properties>
-        <neo4j.driver.version>5.26.0</neo4j.driver.version>
+        <neo4j.driver.version>5.26.3</neo4j.driver.version>
         <neo4j.docker.version>5.19</neo4j.docker.version>
     </properties>
 

nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/pom.xml

@@ -19,7 +19,7 @@
     <packaging>jar</packaging>
 
     <properties>
-        <gremlin.version>3.7.2</gremlin.version>
+        <gremlin.version>3.7.3</gremlin.version>
     </properties>
 
     <dependencies>

nifi-extension-bundles/nifi-mongodb-bundle/pom.xml

@@ -34,6 +34,6 @@
     </modules>
 
     <properties>
-        <mongo.driver.version>4.11.4</mongo.driver.version>
+        <mongo.driver.version>4.11.5</mongo.driver.version>
     </properties>
 </project>

nifi-extension-bundles/nifi-opentelemetry-bundle/nifi-opentelemetry-processors/pom.xml

@@ -59,7 +59,7 @@
         <dependency>
             <groupId>com.hubspot.jackson</groupId>
             <artifactId>jackson-datatype-protobuf</artifactId>
-            <version>0.9.16</version>
+            <version>0.9.17</version>
             <exclusions>
                 <exclusion>
                     <groupId>com.google.protobuf</groupId>

nifi-extension-bundles/nifi-redis-bundle/pom.xml

@@ -25,7 +25,7 @@
     <packaging>pom</packaging>
 
     <properties>
-        <spring.data.redis.version>3.3.5</spring.data.redis.version>
+        <spring.data.redis.version>3.4.0</spring.data.redis.version>
         <jedis.version>5.2.0</jedis.version>
     </properties>
 

nifi-extension-bundles/nifi-slack-bundle/nifi-slack-processors/pom.xml

@@ -30,7 +30,7 @@
         <dependency>
             <groupId>com.slack.api</groupId>
             <artifactId>bolt-socket-mode</artifactId>
-            <version>1.44.1</version>
+            <version>1.44.2</version>
         </dependency>
         <!-- Required by bolt-socket-mode but the library itself doesn't have the dependency. -->
         <dependency>

nifi-extension-bundles/nifi-standard-bundle/nifi-standard-content-viewer/pom.xml

@@ -26,7 +26,7 @@
     <artifactId>nifi-standard-content-viewer</artifactId>
     <packaging>war</packaging>
     <properties>
-        <spring.boot.version>3.3.5</spring.boot.version>
+        <spring.boot.version>3.4.0</spring.boot.version>
         <standard-content-viewer.ui.working.dir>${project.build.directory}/standard-content-viewer-ui-working-directory</standard-content-viewer.ui.working.dir>
     </properties>
     <dependencies>

nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/pom.xml

@@ -405,7 +405,7 @@
         <dependency>
             <groupId>net.datafaker</groupId>
             <artifactId>datafaker</artifactId>
-            <version>2.4.1</version>
+            <version>2.4.2</version>
             <exclusions>
                 <!-- Exclude snakeyaml with android qualifier -->
                 <exclusion>

nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-bom/pom.xml

@@ -302,10 +302,6 @@
             <groupId>com.squareup.okio</groupId>
             <artifactId>okio-jvm</artifactId>
         </dependency>
-        <dependency>
-            <groupId>org.jetbrains.kotlin</groupId>
-            <artifactId>kotlin-stdlib-common</artifactId>
-        </dependency>
         <dependency>
             <groupId>org.jetbrains.kotlin</groupId>
             <artifactId>kotlin-stdlib</artifactId>

nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-nar/pom.xml

@@ -128,11 +128,6 @@
             <artifactId>okio-jvm</artifactId>
             <scope>compile</scope>
         </dependency>
-        <dependency>
-            <groupId>org.jetbrains.kotlin</groupId>
-            <artifactId>kotlin-stdlib-common</artifactId>
-            <scope>compile</scope>
-        </dependency>
         <dependency>
             <groupId>org.jetbrains.kotlin</groupId>
             <artifactId>kotlin-stdlib</artifactId>

nifi-framework-bundle/nifi-framework-extensions/nifi-questdb-bundle/nifi-questdb/pom.xml

@@ -44,7 +44,7 @@
         <dependency>
             <groupId>org.springframework.retry</groupId>
             <artifactId>spring-retry</artifactId>
-            <version>2.0.9</version>
+            <version>2.0.10</version>
         </dependency>
     </dependencies>
 </project>

pom.xml

@@ -109,26 +109,26 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <inceptionYear>2014</inceptionYear>
-        <com.amazonaws.version>1.12.778</com.amazonaws.version>
-        <software.amazon.awssdk.version>2.29.15</software.amazon.awssdk.version>
+        <com.amazonaws.version>1.12.779</com.amazonaws.version>
+        <software.amazon.awssdk.version>2.29.22</software.amazon.awssdk.version>
         <gson.version>2.11.0</gson.version>
         <io.fabric8.kubernetes.client.version>6.13.4</io.fabric8.kubernetes.client.version>
-        <kotlin.version>2.0.21</kotlin.version>
+        <kotlin.version>2.1.0</kotlin.version>
         <okhttp.version>4.12.0</okhttp.version>
         <okio.version>3.9.1</okio.version>
         <org.apache.commons.cli.version>1.9.0</org.apache.commons.cli.version>
         <org.apache.commons.codec.version>1.17.1</org.apache.commons.codec.version>
         <org.apache.commons.compress.version>1.27.1</org.apache.commons.compress.version>
-        <com.github.luben.zstd-jni.version>1.5.6-7</com.github.luben.zstd-jni.version>
+        <com.github.luben.zstd-jni.version>1.5.6-8</com.github.luben.zstd-jni.version>
         <org.apache.commons.configuration.version>2.11.0</org.apache.commons.configuration.version>
         <org.apache.commons.lang3.version>3.17.0</org.apache.commons.lang3.version>
         <org.apache.commons.net.version>3.11.1</org.apache.commons.net.version>
-        <org.apache.commons.io.version>2.17.0</org.apache.commons.io.version>
+        <org.apache.commons.io.version>2.18.0</org.apache.commons.io.version>
         <org.apache.commons.text.version>1.12.0</org.apache.commons.text.version>
         <org.apache.httpcomponents.httpclient.version>4.5.14</org.apache.httpcomponents.httpclient.version>
         <org.apache.httpcomponents.httpcore.version>4.4.16</org.apache.httpcomponents.httpcore.version>
         <org.bouncycastle.version>1.79</org.bouncycastle.version>
-        <testcontainers.version>1.20.3</testcontainers.version>
+        <testcontainers.version>1.20.4</testcontainers.version>
         <org.slf4j.version>2.0.16</org.slf4j.version>
         <com.jayway.jsonpath.version>2.9.0</com.jayway.jsonpath.version>
         <derby.version>10.17.1.0</derby.version>
@@ -147,7 +147,7 @@
         <gcs.version>2.1.5</gcs.version>
         <aspectj.version>1.9.22.1</aspectj.version>
         <jersey.bom.version>3.1.9</jersey.bom.version>
-        <log4j2.version>2.24.1</log4j2.version>
+        <log4j2.version>2.24.2</log4j2.version>
         <logback.version>1.5.12</logback.version>
         <mockito.version>5.14.2</mockito.version>
         <netty.3.version>3.10.6.Final</netty.3.version>
@@ -155,7 +155,7 @@
         <netty.4.version>4.1.115.Final</netty.4.version>
         <servlet-api.version>6.1.0</servlet-api.version>
         <spring.version>6.2.0</spring.version>
-        <spring.security.version>6.4.0</spring.security.version>
+        <spring.security.version>6.4.1</spring.security.version>
         <swagger.annotations.version>2.2.26</swagger.annotations.version>
         <h2.version>2.3.232</h2.version>
         <zookeeper.version>3.9.3</zookeeper.version>
@@ -532,7 +532,7 @@
             <dependency>
                 <groupId>org.jsoup</groupId>
                 <artifactId>jsoup</artifactId>
-                <version>1.18.1</version>
+                <version>1.18.2</version>
             </dependency>
             <dependency>
                 <groupId>com.github.ben-manes.caffeine</groupId>