Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

As a developer, I want dependency updates #403

Closed
8 tasks done
epag opened this issue Feb 5, 2025 · 11 comments · Fixed by #405
Closed
8 tasks done

As a developer, I want dependency updates #403

epag opened this issue Feb 5, 2025 · 11 comments · Fixed by #405
Assignees
@epag
Milestone
v6.29

Comments

@epag
Copy link
Collaborator

epag commented Feb 5, 2025 •
edited
Loading

  • Libraries having update available
  • Libraries marked vulnerable by scan
  • Jetty
  • Artemis
  • Redis
  • RabbitMQ
  • Java Runtime Environment
  • Anything else

Known Issues:
#100

CVEs flagged by the github bot, which we can use alongside the gradle task, dependencyCheckAnalyze

https://github.com/NOAA-OWP/wres/security/dependabot
@epag
Copy link
Collaborator Author

epag commented Feb 5, 2025

Forgot to create the ticket

@epag epag self-assigned this Feb 5, 2025
@epag epag added this to the v6.29 milestone Feb 5, 2025
@epag
Copy link
Collaborator Author

epag commented Feb 5, 2025

Here is the dependencyCheck output

Starting a Gradle Daemon (subsequent builds will be faster)

> Configure project :
Set wres-writing version: 20250205-a526026
20250205-a526026
20250205-a526026

> Task :dependencyUpdates

------------------------------------------------------------
: Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.adarshr.test-logger:com.adarshr.test-logger.gradle.plugin:4.0.0
 - com.atlassian.commonmark:commonmark:0.17.0
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.google.jimfs:jimfs:1.3.0
 - com.h2database:h2:2.3.232
 - com.hubspot.jackson:jackson-datatype-protobuf:0.9.17
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - com.netflix.nebula:gradle-aggregate-javadocs-plugin:3.0.1
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - commons-io:commons-io:2.18.0
 - de.undercouch.download:de.undercouch.download.gradle.plugin:5.6.0
 - io.swagger.core.v3:swagger-jaxrs2:2.2.26
 - jakarta.jms:jakarta.jms-api:3.1.0
 - javax.measure:unit-api:2.2
 - javax.servlet:javax.servlet-api:3.1.0
 - javax.ws.rs:javax.ws.rs-api:2.1
 - junit:junit:4.13.2
 - org.ajoberstar.grgit:org.ajoberstar.grgit.gradle.plugin:5.3.0
 - org.apache.commons:commons-compress:1.27.1
 - org.apache.commons:commons-configuration2:2.11.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.commons:commons-math3:3.6.1
 - org.apache.qpid:qpid-broker-core:9.2.0
 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol:9.2.0
 - org.apache.qpid:qpid-broker-plugins-memory-store:9.2.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.eclipse.jetty:jetty-webapp:11.0.24
 - org.glassfish:javax.json:1.1.4
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jfree:jfreechart:1.5.5
 - org.jvnet.jaxb2_commons:jaxb2-basics-annotate:1.1.0
 - org.kordamp.gradle.markdown:org.kordamp.gradle.markdown.gradle.plugin:2.2.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-inline:5.2.0
 - org.projectlombok:lombok:1.18.36
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1
 - org.slf4j:log4j-over-slf4j:2.1.0-alpha1
 - systems.uom:systems-quantity:2.1
 - systems.uom:systems-ucum:2.1

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.11 -> 1.5.16]
     http://logback.qos.ch
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.fasterxml.jackson:jackson-bom [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-bom
 - com.fasterxml.jackson.core:jackson-annotations [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.fasterxml.jackson.core:jackson-core [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-core
 - com.fasterxml.jackson.core:jackson-databind [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.fasterxml.jackson.dataformat:jackson-dataformat-yaml [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-dataformats-text
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310 [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-modules-java8
 - com.github.ben-manes.caffeine:caffeine [3.1.8 -> 3.2.0]
     https://github.com/ben-manes/caffeine
 - com.github.ben-manes.versions:com.github.ben-manes.versions.gradle.plugin [0.51.0 -> 0.52.0]
 - com.github.sabomichal:immutable-xjc-plugin [1.7.1 -> 2.0.4]
     https://github.com/sabomichal/immutable-xjc
 - com.github.seanrl.jaxb:com.github.seanrl.jaxb.gradle.plugin [2.5.4 -> 2.5.5]
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.google.guava:guava-testlib [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.google.protobuf:com.google.protobuf.gradle.plugin [0.9.1 -> 0.9.4]
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protobuf-java-util [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - com.networknt:json-schema-validator [1.5.4 -> 1.5.5]
     https://github.com/networknt/json-schema-validator
 - com.opencsv:opencsv [5.9 -> 5.10]
     http://opencsv.sf.net
 - com.rabbitmq:amqp-client [5.23.0 -> 5.24.0]
     https://www.rabbitmq.com
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - commons-beanutils:commons-beanutils [1.9.4 -> 1.10.0]
     https://commons.apache.org/proper/commons-beanutils
 - commons-codec:commons-codec [1.17.1 -> 1.18.0]
     https://commons.apache.org/proper/commons-codec/
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - io.soabase.record-builder:record-builder-core [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.soabase.record-builder:record-builder-processor [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.swagger.core.v3:swagger-jaxrs2-jakarta [2.2.26 -> 2.2.28]
     https://github.com/swagger-api/swagger-core
 - io.swagger.core.v3.swagger-gradle-plugin:io.swagger.core.v3.swagger-gradle-plugin.gradle.plugin [2.2.26 -> 2.2.28]
 - jakarta.activation:jakarta.activation-api [1.2.2 -> 2.1.3]
     https://github.com/jakartaee/jaf-api
 - jakarta.annotation:jakarta.annotation-api [2.1.1 -> 3.0.0]
     https://projects.eclipse.org/projects/ee4j.ca
 - jakarta.servlet:jakarta.servlet-api [6.0.0 -> 6.1.0]
     https://projects.eclipse.org/projects/ee4j.servlet
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - jakarta.xml.bind:jakarta.xml.bind-api [3.0.1 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.apache.activemq:artemis-amqp-protocol [2.38.0 -> 2.39.0]
     https://activemq.apache.org/components/artemis/
 - org.apache.activemq:artemis-server [2.38.0 -> 2.39.0]
     https://activemq.apache.org/components/artemis/
 - org.apache.commons:commons-collections4 [4.4 -> 4.5.0-M3]
     https://commons.apache.org/proper/commons-collections/
 - org.apache.commons:commons-lang3 [3.12.0 -> 3.17.0]
     https://commons.apache.org/proper/commons-lang/
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.beryx.jlink:org.beryx.jlink.gradle.plugin [2.26.0 -> 3.1.1]
 - org.bouncycastle:bcpkix-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.bouncycastle:bcprov-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.eclipse.collections:eclipse-collections [11.1.0 -> 12.0.0.M3]
     https://github.com/eclipse/eclipse-collections
 - org.eclipse.jetty:jetty-alpn-java-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty:jetty-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-servlet [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-servlets [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-webapp [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.http2:jetty-http2-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.persistence:org.eclipse.persistence.moxy [2.7.12 -> 5.0.0-B06]
     http://www.eclipse.org/eclipselink
 - org.glassfish.jaxb:jaxb-core [2.3.0.1 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-runtime [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-xjc [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jersey.containers:jersey-container-jetty-http [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.containers:jersey-container-servlet [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.containers:jersey-container-servlet-core [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.core:jersey-server [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.inject:jersey-hk2 [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.media:jersey-media-multipart [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jfree:org.jfree.svg [4.1 -> 5.0.6]
     http://www.jfree.org/jfreesvg
 - org.junit.jupiter:junit-jupiter-api [5.11.2 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.2 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-params [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.jvnet.jaxb2_commons:jaxb2-basics [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-ant [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.liquibase:liquibase-core [4.30.0 -> 4.31.0]
     http://www.liquibase.com
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.owasp.dependencycheck:org.owasp.dependencycheck.gradle.plugin [10.0.2 -> 12.0.2]
 - org.postgresql:postgresql [42.7.4 -> 42.7.5]
     https://jdbc.postgresql.org
 - org.redisson:redisson [3.18.0 -> 3.44.0]
     https://redisson.pro
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org
 - org.sonarqube:org.sonarqube.gradle.plugin [5.1.0.4882 -> 6.0.1.5171]
 - si.uom:si-units [2.1 -> 2.2]
     https://unitsofmeasurement.github.io/
 - tech.units:indriya [2.2.1 -> 2.2.2]
     http://units.tech

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\build\dependencyUpdates\report.txt

> Task :wres-config:dependencyUpdates

------------------------------------------------------------
:wres-config Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.jimfs:jimfs:1.3.0
 - com.hubspot.jackson:jackson-datatype-protobuf:0.9.17
 - commons-io:commons-io:2.18.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jvnet.jaxb2_commons:jaxb2-basics-annotate:1.1.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.fasterxml.jackson:jackson-bom [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-bom
 - com.fasterxml.jackson.core:jackson-annotations [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.fasterxml.jackson.core:jackson-core [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-core
 - com.fasterxml.jackson.core:jackson-databind [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.fasterxml.jackson.dataformat:jackson-dataformat-yaml [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-dataformats-text
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310 [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-modules-java8
 - com.github.sabomichal:immutable-xjc-plugin [1.7.1 -> 2.0.4]
     https://github.com/sabomichal/immutable-xjc
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protobuf-java-util [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.networknt:json-schema-validator [1.5.4 -> 1.5.5]
     https://github.com/networknt/json-schema-validator
 - com.opencsv:opencsv [5.9 -> 5.10]
     http://opencsv.sf.net
 - commons-beanutils:commons-beanutils [1.9.4 -> 1.10.0]
     https://commons.apache.org/proper/commons-beanutils
 - io.soabase.record-builder:record-builder-core [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.soabase.record-builder:record-builder-processor [41 -> 44]
     https://github.com/randgalt/record-builder
 - jakarta.activation:jakarta.activation-api [1.2.2 -> 2.1.3]
     https://github.com/jakartaee/jaf-api
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.eclipse.persistence:org.eclipse.persistence.moxy [2.7.12 -> 5.0.0-B06]
     http://www.eclipse.org/eclipselink
 - org.glassfish.jaxb:jaxb-core [2.3.0.1 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-runtime [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-xjc [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-params [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.jvnet.jaxb2_commons:jaxb2-basics [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-ant [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-config\build\dependencyUpdates\report.txt

> Task :wres-datamodel:dependencyUpdates

------------------------------------------------------------
:wres-datamodel Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - javax.measure:unit-api:2.2
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - systems.uom:systems-quantity:2.1
 - systems.uom:systems-ucum:2.1

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.github.ben-manes.caffeine:caffeine [3.1.8 -> 3.2.0]
     https://github.com/ben-manes/caffeine
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org
 - si.uom:si-units [2.1 -> 2.2]
     https://unitsofmeasurement.github.io/
 - tech.units:indriya [2.2.1 -> 2.2.2]
     http://units.tech

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-datamodel\build\dependencyUpdates\report.txt

> Task :wres-eventdetection:dependencyUpdates

------------------------------------------------------------
:wres-eventdetection Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.11 -> 1.5.16]
     http://logback.qos.ch
 - org.junit.jupiter:junit-jupiter-api [5.11.2 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.2 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-eventdetection\build\dependencyUpdates\report.txt

> Task :wres-events:dependencyUpdates

------------------------------------------------------------
:wres-events Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - jakarta.jms:jakarta.jms-api:3.1.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.github.ben-manes.caffeine:caffeine [3.1.8 -> 3.2.0]
     https://github.com/ben-manes/caffeine
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-events\build\dependencyUpdates\report.txt

> Task :wres-eventsbroker:dependencyUpdates

------------------------------------------------------------
:wres-eventsbroker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - jakarta.jms:jakarta.jms-api:3.1.0
 - org.apache.commons:commons-configuration2:2.11.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - org.apache.activemq:artemis-amqp-protocol [2.38.0 -> 2.39.0]
     https://activemq.apache.org/components/artemis/
 - org.apache.activemq:artemis-server [2.38.0 -> 2.39.0]
     https://activemq.apache.org/components/artemis/
 - org.bouncycastle:bcprov-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-eventsbroker\build\dependencyUpdates\report.txt

> Task :wres-external-services-tests:dependencyUpdates

------------------------------------------------------------
:wres-external-services-tests Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-external-services-tests\build\dependencyUpdates\report.txt

> Task :wres-http:dependencyUpdates

------------------------------------------------------------
:wres-http Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-http\build\dependencyUpdates\report.txt

> Task :wres-io:dependencyUpdates

------------------------------------------------------------
:wres-io Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.google.jimfs:jimfs:1.3.0
 - com.h2database:h2:2.3.232
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - junit:junit:4.13.2
 - org.glassfish:javax.json:1.1.4
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mockito:mockito-inline:5.2.0
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - com.github.ben-manes.caffeine:caffeine [3.1.8 -> 3.2.0]
     https://github.com/ben-manes/caffeine
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.google.guava:guava-testlib [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.liquibase:liquibase-core [4.30.0 -> 4.31.0]
     http://www.liquibase.com
 - org.postgresql:postgresql [42.7.4 -> 42.7.5]
     https://jdbc.postgresql.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-io\build\dependencyUpdates\report.txt

> Task :wres-messages:dependencyUpdates

------------------------------------------------------------
:wres-messages Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - junit:junit:4.13.2
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-messages\build\dependencyUpdates\report.txt

> Task :wres-metrics:dependencyUpdates

------------------------------------------------------------
:wres-metrics Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - junit:junit:4.13.2
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - org.eclipse.collections:eclipse-collections [11.1.0 -> 12.0.0.M3]
     https://github.com/eclipse/eclipse-collections
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-metrics\build\dependencyUpdates\report.txt

> Task :wres-reading:dependencyUpdates

------------------------------------------------------------
:wres-reading Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.jimfs:jimfs:1.3.0
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-compress:1.27.1
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-inline:5.2.0
 - org.projectlombok:lombok:1.18.36

The following dependencies have later milestone versions:
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310 [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-modules-java8
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.google.guava:guava-testlib [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.apache.commons:commons-collections4 [4.4 -> 4.5.0-M3]
     https://commons.apache.org/proper/commons-collections/
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.liquibase:liquibase-core [4.30.0 -> 4.31.0]
     http://www.liquibase.com

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-reading\build\dependencyUpdates\report.txt

> Task :wres-statistics:dependencyUpdates

------------------------------------------------------------
:wres-statistics Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-statistics\build\dependencyUpdates\report.txt

> Task :wres-system:dependencyUpdates

------------------------------------------------------------
:wres-system Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.h2database:h2:2.3.232
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mock-server:mockserver-netty:5.15.0
 - org.projectlombok:lombok:1.18.36
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.postgresql:postgresql [42.7.4 -> 42.7.5]
     https://jdbc.postgresql.org
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-system\build\dependencyUpdates\report.txt

> Task :wres-tasker:dependencyUpdates

------------------------------------------------------------
:wres-tasker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.jimfs:jimfs:1.3.0
 - io.swagger.core.v3:swagger-jaxrs2:2.2.26
 - javax.servlet:javax.servlet-api:3.1.0
 - javax.ws.rs:javax.ws.rs-api:2.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-broker-core:9.2.0
 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol:9.2.0
 - org.apache.qpid:qpid-broker-plugins-memory-store:9.2.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.fasterxml.jackson:jackson-bom [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-bom
 - com.fasterxml.jackson.core:jackson-annotations [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.fasterxml.jackson.core:jackson-core [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson-core
 - com.fasterxml.jackson.core:jackson-databind [2.18.1 -> 2.18.2]
     https://github.com/FasterXML/jackson
 - com.github.ben-manes.caffeine:caffeine [3.1.8 -> 3.2.0]
     https://github.com/ben-manes/caffeine
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.rabbitmq:amqp-client [5.23.0 -> 5.24.0]
     https://www.rabbitmq.com
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - commons-codec:commons-codec [1.17.1 -> 1.18.0]
     https://commons.apache.org/proper/commons-codec/
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - io.swagger.core.v3:swagger-jaxrs2-jakarta [2.2.26 -> 2.2.28]
     https://github.com/swagger-api/swagger-core
 - jakarta.annotation:jakarta.annotation-api [2.1.1 -> 3.0.0]
     https://projects.eclipse.org/projects/ee4j.ca
 - jakarta.servlet:jakarta.servlet-api [6.0.0 -> 6.1.0]
     https://projects.eclipse.org/projects/ee4j.servlet
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - org.apache.commons:commons-lang3 [3.12.0 -> 3.17.0]
     https://commons.apache.org/proper/commons-lang/
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.bouncycastle:bcpkix-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.bouncycastle:bcprov-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.eclipse.jetty:jetty-alpn-java-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty:jetty-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-servlet [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-servlets [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.ee10:jetty-ee10-webapp [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.eclipse.jetty.http2:jetty-http2-server [12.0.16 -> 12.1.0.alpha1]
     https://jetty.org
 - org.glassfish.jersey.containers:jersey-container-servlet-core [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.core:jersey-server [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.inject:jersey-hk2 [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.media:jersey-media-multipart [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.redisson:redisson [3.18.0 -> 3.44.0]
     https://redisson.pro
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-tasker\build\dependencyUpdates\report.txt

> Task :wres-vis:dependencyUpdates

------------------------------------------------------------
:wres-vis Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.jimfs:jimfs:1.3.0
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jfree:jfreechart:1.5.5
 - org.slf4j:log4j-over-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - org.jfree:org.jfree.svg [4.1 -> 5.0.6]
     http://www.jfree.org/jfreesvg
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-vis\build\dependencyUpdates\report.txt

> Task :wres-worker:dependencyUpdates

------------------------------------------------------------
:wres-worker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - junit:junit:4.13.2
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.12 -> 1.5.16]
     http://logback.qos.ch
 - com.rabbitmq:amqp-client [5.23.0 -> 5.24.0]
     https://www.rabbitmq.com
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-worker\build\dependencyUpdates\report.txt

> Task :wres-writing:dependencyUpdates

------------------------------------------------------------
:wres-writing Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.jimfs:jimfs:1.3.0
 - junit:junit:4.13.2
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - com.google.guava:guava [33.3.1-jre -> 33.4.0-jre]
     https://github.com/google/guava
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-writing\build\dependencyUpdates\report.txt

Deprecated Gradle features were used in this build, making it incompatible with Gradle 8.0.

You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins.

See https://docs.gradle.org/7.6.4/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 28s
18 actionable tasks: 18 executed

@epag epag mentioned this issue Feb 5, 2025
Merged
12 tasks
@epag
Copy link
Collaborator Author

epag commented Feb 5, 2025 •
edited
Loading

After updates:


> Configure project :
20250205-3d690e0
20250205-3d690e0

> Task :dependencyUpdates

------------------------------------------------------------
: Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.adarshr.test-logger:com.adarshr.test-logger.gradle.plugin:4.0.0
 - com.atlassian.commonmark:commonmark:0.17.0
 - com.fasterxml.jackson:jackson-bom:2.18.2
 - com.fasterxml.jackson.core:jackson-annotations:2.18.2
 - com.fasterxml.jackson.core:jackson-core:2.18.2
 - com.fasterxml.jackson.core:jackson-databind:2.18.2
 - com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
 - com.github.ben-manes.caffeine:caffeine:3.2.0
 - com.github.ben-manes.versions:com.github.ben-manes.versions.gradle.plugin:0.52.0
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.github.seanrl.jaxb:com.github.seanrl.jaxb.gradle.plugin:2.5.5
 - com.google.guava:guava:33.4.0-jre
 - com.google.guava:guava-testlib:33.4.0-jre
 - com.google.jimfs:jimfs:1.3.0
 - com.h2database:h2:2.3.232
 - com.hubspot.jackson:jackson-datatype-protobuf:0.9.17
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - com.netflix.nebula:gradle-aggregate-javadocs-plugin:3.0.1
 - com.networknt:json-schema-validator:1.5.5
 - com.opencsv:opencsv:5.10
 - com.rabbitmq:amqp-client:5.24.0
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - commons-beanutils:commons-beanutils:1.10.0
 - commons-codec:commons-codec:1.18.0
 - commons-io:commons-io:2.18.0
 - de.undercouch.download:de.undercouch.download.gradle.plugin:5.6.0
 - io.swagger.core.v3:swagger-jaxrs2:2.2.26
 - jakarta.jms:jakarta.jms-api:3.1.0
 - jakarta.servlet:jakarta.servlet-api:6.1.0
 - javax.measure:unit-api:2.2
 - javax.servlet:javax.servlet-api:3.1.0
 - javax.ws.rs:javax.ws.rs-api:2.1
 - junit:junit:4.13.2
 - org.ajoberstar.grgit:org.ajoberstar.grgit.gradle.plugin:5.3.0
 - org.apache.activemq:artemis-amqp-protocol:2.39.0
 - org.apache.activemq:artemis-server:2.39.0
 - org.apache.commons:commons-collections4:4.5.0-M3
 - org.apache.commons:commons-compress:1.27.1
 - org.apache.commons:commons-configuration2:2.11.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.commons:commons-math3:3.6.1
 - org.apache.qpid:qpid-broker-core:9.2.0
 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol:9.2.0
 - org.apache.qpid:qpid-broker-plugins-memory-store:9.2.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.bouncycastle:bcpkix-jdk18on:1.80
 - org.bouncycastle:bcprov-jdk18on:1.80
 - org.eclipse.jetty:jetty-alpn-java-server:12.1.0.alpha1
 - org.eclipse.jetty:jetty-server:12.1.0.alpha1
 - org.eclipse.jetty:jetty-webapp:11.0.24
 - org.eclipse.jetty.ee10:jetty-ee10-servlet:12.1.0.alpha1
 - org.eclipse.jetty.ee10:jetty-ee10-servlets:12.1.0.alpha1
 - org.eclipse.jetty.ee10:jetty-ee10-webapp:12.1.0.alpha1
 - org.eclipse.jetty.http2:jetty-http2-server:12.1.0.alpha1
 - org.glassfish:javax.json:1.1.4
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jfree:jfreechart:1.5.5
 - org.jvnet.jaxb2_commons:jaxb2-basics-annotate:1.1.0
 - org.kordamp.gradle.markdown:org.kordamp.gradle.markdown.gradle.plugin:2.2.0
 - org.liquibase:liquibase-core:4.31.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-core:5.15.2
 - org.mockito:mockito-inline:5.2.0
 - org.postgresql:postgresql:42.7.5
 - org.projectlombok:lombok:1.18.36
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1
 - org.slf4j:log4j-over-slf4j:2.1.0-alpha1
 - systems.uom:systems-quantity:2.1
 - systems.uom:systems-ucum:2.1
 - tech.units:indriya:2.2.2

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.11 -> 1.5.16]
     http://logback.qos.ch
 - com.github.sabomichal:immutable-xjc-plugin [1.7.1 -> 2.0.4]
     https://github.com/sabomichal/immutable-xjc
 - com.google.protobuf:com.google.protobuf.gradle.plugin [0.9.1 -> 0.9.4]
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protobuf-java-util [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - io.soabase.record-builder:record-builder-core [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.soabase.record-builder:record-builder-processor [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.swagger.core.v3:swagger-jaxrs2-jakarta [2.2.26 -> 2.2.28]
     https://github.com/swagger-api/swagger-core
 - io.swagger.core.v3.swagger-gradle-plugin:io.swagger.core.v3.swagger-gradle-plugin.gradle.plugin [2.2.26 -> 2.2.28]
 - jakarta.activation:jakarta.activation-api [1.2.2 -> 2.1.3]
     https://github.com/jakartaee/jaf-api
 - jakarta.annotation:jakarta.annotation-api [2.1.1 -> 3.0.0]
     https://projects.eclipse.org/projects/ee4j.ca
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - jakarta.xml.bind:jakarta.xml.bind-api [3.0.1 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.apache.commons:commons-lang3 [3.12.0 -> 3.17.0]
     https://commons.apache.org/proper/commons-lang/
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.beryx.jlink:org.beryx.jlink.gradle.plugin [2.26.0 -> 3.1.1]
 - org.bouncycastle:bcprov-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.eclipse.collections:eclipse-collections [11.1.0 -> 12.0.0.M3]
     https://github.com/eclipse/eclipse-collections
 - org.eclipse.persistence:org.eclipse.persistence.moxy [2.7.12 -> 5.0.0-B06]
     http://www.eclipse.org/eclipselink
 - org.glassfish.jaxb:jaxb-core [2.3.0.1 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-runtime [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-xjc [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jersey.containers:jersey-container-jetty-http [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.containers:jersey-container-servlet [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.containers:jersey-container-servlet-core [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.core:jersey-server [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.inject:jersey-hk2 [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.media:jersey-media-multipart [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jfree:org.jfree.svg [4.1 -> 5.0.6]
     http://www.jfree.org/jfreesvg
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-params [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.jvnet.jaxb2_commons:jaxb2-basics [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-ant [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.owasp.dependencycheck:org.owasp.dependencycheck.gradle.plugin [10.0.2 -> 12.0.2]
 - org.redisson:redisson [3.18.0 -> 3.44.0]
     https://redisson.pro
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org
 - org.sonarqube:org.sonarqube.gradle.plugin [5.1.0.4882 -> 6.0.1.5171]
 - si.uom:si-units [2.1 -> 2.2]
     https://unitsofmeasurement.github.io/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\build\dependencyUpdates\report.txt

> Task :wres-config:dependencyUpdates

------------------------------------------------------------
:wres-config Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.fasterxml.jackson:jackson-bom:2.18.2
 - com.fasterxml.jackson.core:jackson-annotations:2.18.2
 - com.fasterxml.jackson.core:jackson-core:2.18.2
 - com.fasterxml.jackson.core:jackson-databind:2.18.2
 - com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
 - com.google.guava:guava:33.4.0-jre
 - com.google.jimfs:jimfs:1.3.0
 - com.hubspot.jackson:jackson-datatype-protobuf:0.9.17
 - com.networknt:json-schema-validator:1.5.5
 - com.opencsv:opencsv:5.10
 - commons-beanutils:commons-beanutils:1.10.0
 - commons-io:commons-io:2.18.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jvnet.jaxb2_commons:jaxb2-basics-annotate:1.1.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0

The following dependencies have later milestone versions:
 - com.github.sabomichal:immutable-xjc-plugin [1.7.1 -> 2.0.4]
     https://github.com/sabomichal/immutable-xjc
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protobuf-java-util [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - io.soabase.record-builder:record-builder-core [41 -> 44]
     https://github.com/randgalt/record-builder
 - io.soabase.record-builder:record-builder-processor [41 -> 44]
     https://github.com/randgalt/record-builder
 - jakarta.activation:jakarta.activation-api [1.2.2 -> 2.1.3]
     https://github.com/jakartaee/jaf-api
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.eclipse.persistence:org.eclipse.persistence.moxy [2.7.12 -> 5.0.0-B06]
     http://www.eclipse.org/eclipselink
 - org.glassfish.jaxb:jaxb-core [2.3.0.1 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-runtime [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.glassfish.jaxb:jaxb-xjc [2.3.8 -> 4.0.5]
     https://eclipse-ee4j.github.io/jaxb-ri/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-params [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.jvnet.jaxb2_commons:jaxb2-basics [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-ant [0.13.1 -> 1.11.1]
     https://github.com/highsource/jaxb2-basics
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-config\build\dependencyUpdates\report.txt

> Task :wres-datamodel:dependencyUpdates

------------------------------------------------------------
:wres-datamodel Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.github.ben-manes.caffeine:caffeine:3.2.0
 - javax.measure:unit-api:2.2
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - systems.uom:systems-quantity:2.1
 - systems.uom:systems-ucum:2.1
 - tech.units:indriya:2.2.2

The following dependencies have later milestone versions:
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org
 - si.uom:si-units [2.1 -> 2.2]
     https://unitsofmeasurement.github.io/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-datamodel\build\dependencyUpdates\report.txt

> Task :wres-eventdetection:dependencyUpdates

------------------------------------------------------------
:wres-eventdetection Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - ch.qos.logback:logback-classic [1.5.11 -> 1.5.16]
     http://logback.qos.ch
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-eventdetection\build\dependencyUpdates\report.txt

> Task :wres-events:dependencyUpdates

------------------------------------------------------------
:wres-events Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.github.ben-manes.caffeine:caffeine:3.2.0
 - jakarta.jms:jakarta.jms-api:3.1.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-events\build\dependencyUpdates\report.txt

> Task :wres-eventsbroker:dependencyUpdates

------------------------------------------------------------
:wres-eventsbroker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.google.guava:guava:33.4.0-jre
 - jakarta.jms:jakarta.jms-api:3.1.0
 - org.apache.activemq:artemis-amqp-protocol:2.39.0
 - org.apache.activemq:artemis-server:2.39.0
 - org.apache.commons:commons-configuration2:2.11.0
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-jms-client:2.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - org.bouncycastle:bcprov-jdk18on [1.79 -> 1.80]
     https://www.bouncycastle.org/download/bouncy-castle-java/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-eventsbroker\build\dependencyUpdates\report.txt

> Task :wres-external-services-tests:dependencyUpdates

------------------------------------------------------------
:wres-external-services-tests Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-external-services-tests\build\dependencyUpdates\report.txt

> Task :wres-http:dependencyUpdates

------------------------------------------------------------
:wres-http Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-http\build\dependencyUpdates\report.txt

> Task :wres-io:dependencyUpdates

------------------------------------------------------------
:wres-io Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.github.ben-manes.caffeine:caffeine:3.2.0
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.google.guava:guava:33.4.0-jre
 - com.google.guava:guava-testlib:33.4.0-jre
 - com.google.jimfs:jimfs:1.3.0
 - com.h2database:h2:2.3.232
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - junit:junit:4.13.2
 - org.glassfish:javax.json:1.1.4
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.liquibase:liquibase-core:4.31.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mockito:mockito-inline:5.2.0
 - org.postgresql:postgresql:42.7.5
 - org.slf4j:jcl-over-slf4j:2.1.0-alpha1
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-io\build\dependencyUpdates\report.txt

> Task :wres-messages:dependencyUpdates

------------------------------------------------------------
:wres-messages Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - junit:junit:4.13.2
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-messages\build\dependencyUpdates\report.txt

> Task :wres-metrics:dependencyUpdates

------------------------------------------------------------
:wres-metrics Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - junit:junit:4.13.2
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mockito:mockito-core:5.15.2

The following dependencies have later milestone versions:
 - org.eclipse.collections:eclipse-collections [11.1.0 -> 12.0.0.M3]
     https://github.com/eclipse/eclipse-collections
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-metrics\build\dependencyUpdates\report.txt

> Task :wres-reading:dependencyUpdates

------------------------------------------------------------
:wres-reading Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
 - com.google.guava:guava:33.4.0-jre
 - com.google.guava:guava-testlib:33.4.0-jre
 - com.google.jimfs:jimfs:1.3.0
 - com.mattbertolini:liquibase-slf4j:5.1.0
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-collections4:4.5.0-M3
 - org.apache.commons:commons-compress:1.27.1
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.liquibase:liquibase-core:4.31.0
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-inline:5.2.0
 - org.projectlombok:lombok:1.18.36

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-reading\build\dependencyUpdates\report.txt

> Task :wres-statistics:dependencyUpdates

------------------------------------------------------------
:wres-statistics Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.google.protobuf:protoc [3.25.5 -> 21.0-rc-1]
     https://developers.google.com/protocol-buffers/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-statistics\build\dependencyUpdates\report.txt

> Task :wres-system:dependencyUpdates

------------------------------------------------------------
:wres-system Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.github.marschall:jfr-jdbc:0.4.0
 - com.h2database:h2:2.3.232
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mock-server:mockserver-netty:5.15.0
 - org.postgresql:postgresql:42.7.5
 - org.projectlombok:lombok:1.18.36
 - org.slf4j:jul-to-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - com.zaxxer:HikariCP [5.1.0 -> 6.2.1]
     https://github.com/brettwooldridge/HikariCP
 - jakarta.xml.bind:jakarta.xml.bind-api [2.3.3 -> 4.0.2]
     https://github.com/jakartaee/jaxb-api
 - org.jvnet.jaxb2_commons:jaxb2-basics-runtime [0.13.1 -> 2.0.12]
     https://github.com/highsource/jaxb-tools
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-system\build\dependencyUpdates\report.txt

> Task :wres-tasker:dependencyUpdates

------------------------------------------------------------
:wres-tasker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.fasterxml.jackson:jackson-bom:2.18.2
 - com.fasterxml.jackson.core:jackson-annotations:2.18.2
 - com.fasterxml.jackson.core:jackson-core:2.18.2
 - com.fasterxml.jackson.core:jackson-databind:2.18.2
 - com.github.ben-manes.caffeine:caffeine:3.2.0
 - com.google.jimfs:jimfs:1.3.0
 - com.rabbitmq:amqp-client:5.24.0
 - commons-codec:commons-codec:1.18.0
 - io.swagger.core.v3:swagger-jaxrs2:2.2.26
 - jakarta.servlet:jakarta.servlet-api:6.1.0
 - javax.servlet:javax.servlet-api:3.1.0
 - javax.ws.rs:javax.ws.rs-api:2.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.apache.qpid:qpid-broker-core:9.2.0
 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol:9.2.0
 - org.apache.qpid:qpid-broker-plugins-memory-store:9.2.0
 - org.bouncycastle:bcpkix-jdk18on:1.80
 - org.bouncycastle:bcprov-jdk18on:1.80
 - org.eclipse.jetty:jetty-alpn-java-server:12.1.0.alpha1
 - org.eclipse.jetty:jetty-server:12.1.0.alpha1
 - org.eclipse.jetty.ee10:jetty-ee10-servlet:12.1.0.alpha1
 - org.eclipse.jetty.ee10:jetty-ee10-servlets:12.1.0.alpha1
 - org.eclipse.jetty.ee10:jetty-ee10-webapp:12.1.0.alpha1
 - org.eclipse.jetty.http2:jetty-http2-server:12.1.0.alpha1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8

The following dependencies have later milestone versions:
 - com.google.protobuf:protobuf-java [3.25.5 -> 4.30.0-RC1]
     https://developers.google.com/protocol-buffers/
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - io.netty:netty-all [4.1.115.Final -> 5.0.0.Alpha2]
     http://netty.io/
 - io.swagger.core.v3:swagger-jaxrs2-jakarta [2.2.26 -> 2.2.28]
     https://github.com/swagger-api/swagger-core
 - jakarta.annotation:jakarta.annotation-api [2.1.1 -> 3.0.0]
     https://projects.eclipse.org/projects/ee4j.ca
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - org.apache.commons:commons-lang3 [3.12.0 -> 3.17.0]
     https://commons.apache.org/proper/commons-lang/
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.glassfish.jersey.containers:jersey-container-servlet-core [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.core:jersey-server [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.inject:jersey-hk2 [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.glassfish.jersey.media:jersey-media-multipart [3.1.9 -> 4.0.0-M2]
     https://projects.eclipse.org/projects/ee4j.jersey
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.redisson:redisson [3.18.0 -> 3.44.0]
     https://redisson.pro
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-tasker\build\dependencyUpdates\report.txt

> Task :wres-vis:dependencyUpdates

------------------------------------------------------------
:wres-vis Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.google.jimfs:jimfs:1.3.0
 - com.sun.xml.fastinfoset:FastInfoset:2.1.1
 - junit:junit:4.13.2
 - org.apache.commons:commons-lang3:3.17.0
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.jfree:jfreechart:1.5.5
 - org.slf4j:log4j-over-slf4j:2.1.0-alpha1

The following dependencies have later milestone versions:
 - org.jfree:org.jfree.svg [4.1 -> 5.0.6]
     http://www.jfree.org/jfreesvg
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.vintage:junit-vintage-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.mockito:mockito-core [5.14.2 -> 5.15.2]
     https://github.com/mockito/mockito
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-vis\build\dependencyUpdates\report.txt

> Task :wres-worker:dependencyUpdates

------------------------------------------------------------
:wres-worker Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - ch.qos.logback:logback-classic:1.5.16
 - com.rabbitmq:amqp-client:5.24.0
 - junit:junit:4.13.2
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.mock-server:mockserver-netty:5.15.0
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - jakarta.ws.rs:jakarta.ws.rs-api [3.1.0 -> 4.0.0]
     https://github.com/jakartaee/rest
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.slf4j:slf4j-api [2.0.13 -> 2.1.0-alpha1]
     http://www.slf4j.org

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-worker\build\dependencyUpdates\report.txt

> Task :wres-writing:dependencyUpdates

------------------------------------------------------------
:wres-writing Project Dependency Updates (report to plain text file)
------------------------------------------------------------

The following dependencies are using the latest milestone version:
 - com.google.guava:guava:33.4.0-jre
 - com.google.jimfs:jimfs:1.3.0
 - junit:junit:4.13.2
 - org.apache.commons:commons-math3:3.6.1
 - org.jacoco:org.jacoco.agent:0.8.8
 - org.jacoco:org.jacoco.ant:0.8.8
 - org.locationtech.jts:jts-core:1.20.0
 - org.locationtech.jts:jts-io:1.20.0
 - org.mockito:mockito-inline:5.2.0

The following dependencies have later milestone versions:
 - com.squareup.okhttp3:okhttp [4.12.0 -> 5.0.0-alpha.14]
     https://square.github.io/okhttp/
 - edu.ucar:cdm-core [5.4.2 -> 6.0.0-beta1]
 - org.apache.tika:tika-core [2.9.2 -> 3.1.0]
     https://tika.apache.org/
 - org.jetbrains.kotlin:kotlin-stdlib [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk7 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.jetbrains.kotlin:kotlin-stdlib-jdk8 [1.9.23 -> 2.1.20-Beta2]
     https://kotlinlang.org/
 - org.junit.jupiter:junit-jupiter-api [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/
 - org.junit.jupiter:junit-jupiter-engine [5.11.3 -> 5.12.0-M1]
     https://junit.org/junit5/

Failed to determine the latest version for the following dependencies (use --info for details):
 - net.jcip:jcip-annotations

Gradle release-candidate updates:
 - Gradle: [7.6.4 -> 8.12.1]

Generated report file C:\Users\epagr\IdeaProjects\wres\wres-writing\build\dependencyUpdates\report.txt

Deprecated Gradle features were used in this build, making it incompatible with Gradle 8.0.

You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins.

See https://docs.gradle.org/7.6.4/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 8s
18 actionable tasks: 18 executed

@epag epag closed this as completed Feb 5, 2025
@epag
Copy link
Collaborator Author

epag commented Feb 6, 2025

Output from dependencyCheckAnalyze

$ ./gradlew.bat dependencyCheckAnalyze
Starting a Gradle Daemon (subsequent builds will be faster)

> Configure project :
20250205-3d690e0-dev
20250205-3d690e0-dev

> Task :dependencyCheckAnalyze
Verifying dependencies for project wres
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres
Found 10 vulnerabilities in project wres


One or more dependencies were identified with known vulnerabilities in wres:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335
jackson-databind-2.13.4.2.jar (pkg:maven/com.fasterxml.jackson.core/[email protected], cpe:2.3:a:fasterxml:jackson-databind:2.13.4.2:*:*:*:*:*:*:*) : CVE-202
3-35116
javax.json-1.1.4.jar (pkg:maven/org.glassfish/[email protected]) : CVE-2023-7272
jetty-servlet-11.0.24.jar (pkg:maven/org.eclipse.jetty/[email protected], cpe:2.3:a:eclipse:jetty:11.0.24:*:*:*:*:*:*:*, cpe:2.3:a:jetty:jetty:11.0.24:*:*:*:*:*:
*:*, cpe:2.3:a:mortbay_jetty:jetty:11.0.24:*:*:*:*:*:*:*) : CVE-2024-6763
jetty-webapp-11.0.24.jar (pkg:maven/org.eclipse.jetty/[email protected], cpe:2.3:a:eclipse:jetty:11.0.24:*:*:*:*:*:*:*, cpe:2.3:a:jetty:jetty:11.0.24:*:*:*:*:*:*:
*, cpe:2.3:a:mortbay_jetty:jetty:11.0.24:*:*:*:*:*:*:*) : CVE-2024-6763
jetty-xml-11.0.24.jar (pkg:maven/org.eclipse.jetty/[email protected], cpe:2.3:a:eclipse:jetty:11.0.24:*:*:*:*:*:*:*, cpe:2.3:a:jetty:jetty:11.0.24:*:*:*:*:*:*:*, cpe
:2.3:a:mortbay_jetty:jetty:11.0.24:*:*:*:*:*:*:*) : CVE-2024-6763
jodd-bean-5.1.6.jar (pkg:maven/org.jodd/[email protected], cpe:2.3:a:jodd:jodd:5.1.6:*:*:*:*:*:*:*, cpe:2.3:a:jodd:jodd_http:5.1.6:*:*:*:*:*:*:*) : CVE-2022-29631
jodd-core-5.1.6.jar (pkg:maven/org.jodd/[email protected], cpe:2.3:a:jodd:jodd:5.1.6:*:*:*:*:*:*:*, cpe:2.3:a:jodd:jodd_http:5.1.6:*:*:*:*:*:*:*) : CVE-2022-29631
redisson-3.18.0.jar (pkg:maven/org.redisson/[email protected], cpe:2.3:a:redisson:redisson:3.18.0:*:*:*:*:*:*:*) : CVE-2023-42809
snakeyaml-1.33.jar (pkg:maven/org.yaml/[email protected], cpe:2.3:a:snakeyaml_project:snakeyaml:1.33:*:*:*:*:*:*:*) : CVE-2022-1471


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-config:dependencyCheckAnalyze
Verifying dependencies for project wres-config
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-config
Found 0 vulnerabilities in project wres-config

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-datamodel:dependencyCheckAnalyze
Verifying dependencies for project wres-datamodel
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-datamodel
Found 0 vulnerabilities in project wres-datamodel

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-eventdetection:dependencyCheckAnalyze
Verifying dependencies for project wres-eventdetection
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-eventdetection
Found 0 vulnerabilities in project wres-eventdetection

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-events:dependencyCheckAnalyze
Verifying dependencies for project wres-events
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-events
Found 0 vulnerabilities in project wres-events

> Task :wres-eventsbroker:dependencyCheckAnalyze
Verifying dependencies for project wres-eventsbroker
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-eventsbroker
Found 0 vulnerabilities in project wres-eventsbroker

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-external-services-tests:dependencyCheckAnalyze
Verifying dependencies for project wres-external-services-tests
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-external-services-tests
Found 1 vulnerabilities in project wres-external-services-tests


One or more dependencies were identified with known vulnerabilities in wres-external-services-tests:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-http:dependencyCheckAnalyze
Verifying dependencies for project wres-http
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-http
Found 0 vulnerabilities in project wres-http

> Task :wres-io:dependencyCheckAnalyze
Verifying dependencies for project wres-io
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-io
Found 2 vulnerabilities in project wres-io


One or more dependencies were identified with known vulnerabilities in wres-io:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335
javax.json-1.1.4.jar (pkg:maven/org.glassfish/[email protected]) : CVE-2023-7272


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-messages:dependencyCheckAnalyze
Verifying dependencies for project wres-messages
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-messages
Found 0 vulnerabilities in project wres-messages

> Task :wres-metrics:dependencyCheckAnalyze
Verifying dependencies for project wres-metrics
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-metrics
Found 0 vulnerabilities in project wres-metrics

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-reading:dependencyCheckAnalyze
Verifying dependencies for project wres-reading
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-reading
Found 1 vulnerabilities in project wres-reading


One or more dependencies were identified with known vulnerabilities in wres-reading:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-statistics:dependencyCheckAnalyze
Verifying dependencies for project wres-statistics
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-statistics
Found 0 vulnerabilities in project wres-statistics
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-system:dependencyCheckAnalyze
Verifying dependencies for project wres-system
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-system
Found 1 vulnerabilities in project wres-system


One or more dependencies were identified with known vulnerabilities in wres-system:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335


See the dependency-check report for more details.



> Task :wres-tasker:dependencyCheckAnalyze
Verifying dependencies for project wres-tasker
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-tasker
Found 3 vulnerabilities in project wres-tasker


One or more dependencies were identified with known vulnerabilities in wres-tasker:

jodd-bean-5.1.6.jar (pkg:maven/org.jodd/[email protected], cpe:2.3:a:jodd:jodd:5.1.6:*:*:*:*:*:*:*, cpe:2.3:a:jodd:jodd_http:5.1.6:*:*:*:*:*:*:*) : CVE-2022-29631
jodd-core-5.1.6.jar (pkg:maven/org.jodd/[email protected], cpe:2.3:a:jodd:jodd:5.1.6:*:*:*:*:*:*:*, cpe:2.3:a:jodd:jodd_http:5.1.6:*:*:*:*:*:*:*) : CVE-2022-29631
redisson-3.18.0.jar (pkg:maven/org.redisson/[email protected], cpe:2.3:a:redisson:redisson:3.18.0:*:*:*:*:*:*:*) : CVE-2023-42809


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-vis:dependencyCheckAnalyze
Verifying dependencies for project wres-vis
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-vis
Found 0 vulnerabilities in project wres-vis

Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM
Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

> Task :wres-worker:dependencyCheckAnalyze
Verifying dependencies for project wres-worker
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-worker
Found 0 vulnerabilities in project wres-worker

> Task :wres-writing:dependencyCheckAnalyze
Verifying dependencies for project wres-writing
Checking for updates and analyzing dependencies for vulnerabilities
Generating report for project wres-writing
Found 1 vulnerabilities in project wres-writing


One or more dependencies were identified with known vulnerabilities in wres-writing:

h2-2.3.232.jar (pkg:maven/com.h2database/[email protected], cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:*) : CVE-2018-14335


See the dependency-check report for more details.



Region [NODEAUDIT] : Not alive and dispose was called, filename: NODEAUDIT
Region [CENTRAL] : Not alive and dispose was called, filename: CENTRAL
Region [POM] : Not alive and dispose was called, filename: POM

Deprecated Gradle features were used in this build, making it incompatible with Gradle 8.0.

You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins.

See https://docs.gradle.org/7.6.4/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 1m 35s
18 actionable tasks: 18 executed

@epag epag reopened this Feb 6, 2025
@epag
Copy link
Collaborator Author

epag commented Feb 6, 2025

I don't see anything new introduced, but I may pick up a task after im done with the rhel8 stuff to address some of these stuck versions and presistent CVEs

@james-d-brown
Copy link
Collaborator

Some of these are FPs, notably CVE-2018-14335. On the whole, we don't allow true CVEs to hang around for very long, so most/all of those prior to 2024 are probably FPs, based on prior analysis, but no harm to recheck...

@epag
Copy link
Collaborator Author

epag commented Feb 6, 2025

Some of these are FPs, notably CVE-2018-14335. On the whole, we don't allow true CVEs to hang around for very long, so most/all of those prior to 2024 are probably FPs, based on prior analysis, but no harm to recheck...

Yeah, I believe they are FP, mostly just don't like them showing up at all hahaha. Mostly this was targeted at our version of reddisson being stuck for far too long

@james-d-brown
Copy link
Collaborator

Yes, reddisson does need an update.

@epag
Copy link
Collaborator Author

epag commented Feb 6, 2025

Alright, deployed the containers locally and things look good.

Question for you all. Do we feel that bumping the liquibase version a valid reason to test the database migration validity (This is automated so it just adds some wait time is all)

@epag
Copy link
Collaborator Author

epag commented Feb 6, 2025

Wait, actually I think we always test the database migration step as part of the deploy, so no reason to run it extra in addition to that. Think we are good on updates now

@epag epag closed this as completed in #405 Feb 6, 2025
@james-d-brown
Copy link
Collaborator

Yeah, migration happens on deployment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@epag epag

Labels
None yet
Projects
None yet
Milestone
v6.29
Development

Successfully merging a pull request may close this issue.

6.29 dependency update NOAA-OWP/wres
2 participants
@epag @james-d-brown