From 741fd941c955cc1579852d271477e1a94e3c5fe6 Mon Sep 17 00:00:00 2001
From: Chenyang Ji <cyji@amazon.com>
Date: Fri, 4 Aug 2023 15:34:02 -0700
Subject: [PATCH] [CVE-2023] fix multiple CVE issues (#519)

* [CVE-2023] fix multiple cve issues

Signed-off-by: Chenyang Ji <cyji@amazon.com>

* remove checkstyle

Signed-off-by: Chenyang Ji <cyji@amazon.com>

---------

Signed-off-by: Chenyang Ji <cyji@amazon.com>
---
 build.gradle                                  |  16 +-
 checkstyle/checkstyle.xml                     | 263 ------------------
 checkstyle/findbugs-exclude.xml               |   9 -
 licenses/bcpkix-jdk15on-1.70.jar.sha1         |   1 -
 licenses/bcpkix-jdk15to18-1.74.jar.sha1       |   1 +
 licenses/bcprov-jdk15on-1.70.jar.sha1         |   1 -
 licenses/bcprov-jdk15to18-1.74.jar.sha1       |   1 +
 licenses/bcutil-jdk15on-1.70.jar.sha1         |   1 -
 licenses/bcutil-jdk15to18-1.74.jar.sha1       |   1 +
 licenses/checker-qual-3.33.0.jar.sha1         |   1 +
 licenses/checker-qual-3.5.0.jar.sha1          |   1 -
 licenses/commons-lang3-3.12.0.jar.sha1        |   1 +
 licenses/commons-lang3-3.9.jar.sha1           |   1 -
 licenses/guava-30.1-jre.jar.sha1              |   1 -
 licenses/guava-32.0.1-jre.jar.sha1            |   1 +
 licenses/j2objc-annotations-1.3.jar.sha1      |   1 -
 licenses/j2objc-annotations-2.8.jar.sha1      |   1 +
 licenses/jackson-annotations-2.14.1.jar.sha1  |   1 -
 licenses/jackson-annotations-2.14.2.jar.sha1  |   1 +
 licenses/jackson-databind-2.14.1.jar.sha1     |   1 -
 licenses/jackson-databind-2.14.2.jar.sha1     |   1 +
 .../jackson-module-paranamer-2.14.1.jar.sha1  |   1 -
 .../jackson-module-paranamer-2.14.2.jar.sha1  |   1 +
 licenses/netty-buffer-4.1.84.Final.jar.sha1   |   1 -
 licenses/netty-buffer-4.1.96.Final.jar.sha1   |   1 +
 licenses/netty-codec-4.1.84.Final.jar.sha1    |   1 -
 licenses/netty-codec-4.1.96.Final.jar.sha1    |   1 +
 .../netty-codec-http-4.1.84.Final.jar.sha1    |   1 -
 .../netty-codec-http-4.1.96.Final.jar.sha1    |   1 +
 .../netty-codec-http2-4.1.84.Final.jar.sha1   |   1 -
 .../netty-codec-http2-4.1.96.Final.jar.sha1   |   1 +
 .../netty-codec-socks-4.1.84.Final.jar.sha1   |   1 -
 .../netty-codec-socks-4.1.96.Final.jar.sha1   |   1 +
 licenses/netty-common-4.1.84.Final.jar.sha1   |   1 -
 licenses/netty-common-4.1.96.Final.jar.sha1   |   1 +
 licenses/netty-handler-4.1.84.Final.jar.sha1  |   1 -
 licenses/netty-handler-4.1.96.Final.jar.sha1  |   1 +
 .../netty-handler-proxy-4.1.84.Final.jar.sha1 |   1 -
 .../netty-handler-proxy-4.1.96.Final.jar.sha1 |   1 +
 licenses/netty-resolver-4.1.84.Final.jar.sha1 |   1 -
 licenses/netty-resolver-4.1.96.Final.jar.sha1 |   1 +
 .../netty-transport-4.1.84.Final.jar.sha1     |   1 -
 .../netty-transport-4.1.96.Final.jar.sha1     |   1 +
 ...t-native-unix-common-4.1.84.Final.jar.sha1 |   1 -
 ...t-native-unix-common-4.1.96.Final.jar.sha1 |   1 +
 ...nceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1 |   1 +
 ...anceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1 |   1 -
 licenses/sqlite-jdbc-3.32.3.2.jar.sha1        |   1 -
 licenses/sqlite-jdbc-3.41.2.2.jar.sha1        |   1 +
 licenses/tools.jar.sha1                       |   2 +-
 50 files changed, 27 insertions(+), 309 deletions(-)
 delete mode 100644 checkstyle/checkstyle.xml
 delete mode 100644 checkstyle/findbugs-exclude.xml
 delete mode 100644 licenses/bcpkix-jdk15on-1.70.jar.sha1
 create mode 100644 licenses/bcpkix-jdk15to18-1.74.jar.sha1
 delete mode 100644 licenses/bcprov-jdk15on-1.70.jar.sha1
 create mode 100644 licenses/bcprov-jdk15to18-1.74.jar.sha1
 delete mode 100644 licenses/bcutil-jdk15on-1.70.jar.sha1
 create mode 100644 licenses/bcutil-jdk15to18-1.74.jar.sha1
 create mode 100644 licenses/checker-qual-3.33.0.jar.sha1
 delete mode 100644 licenses/checker-qual-3.5.0.jar.sha1
 create mode 100644 licenses/commons-lang3-3.12.0.jar.sha1
 delete mode 100644 licenses/commons-lang3-3.9.jar.sha1
 delete mode 100644 licenses/guava-30.1-jre.jar.sha1
 create mode 100644 licenses/guava-32.0.1-jre.jar.sha1
 delete mode 100644 licenses/j2objc-annotations-1.3.jar.sha1
 create mode 100644 licenses/j2objc-annotations-2.8.jar.sha1
 delete mode 100644 licenses/jackson-annotations-2.14.1.jar.sha1
 create mode 100644 licenses/jackson-annotations-2.14.2.jar.sha1
 delete mode 100644 licenses/jackson-databind-2.14.1.jar.sha1
 create mode 100644 licenses/jackson-databind-2.14.2.jar.sha1
 delete mode 100644 licenses/jackson-module-paranamer-2.14.1.jar.sha1
 create mode 100644 licenses/jackson-module-paranamer-2.14.2.jar.sha1
 delete mode 100644 licenses/netty-buffer-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-buffer-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-codec-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-codec-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-codec-http-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-codec-http-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-codec-http2-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-codec-http2-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-codec-socks-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-codec-socks-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-common-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-common-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-handler-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-handler-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-handler-proxy-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-handler-proxy-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-resolver-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-resolver-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-transport-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-transport-4.1.96.Final.jar.sha1
 delete mode 100644 licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1
 create mode 100644 licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1
 create mode 100644 licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1
 delete mode 100644 licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1
 delete mode 100644 licenses/sqlite-jdbc-3.32.3.2.jar.sha1
 create mode 100644 licenses/sqlite-jdbc-3.41.2.2.jar.sha1

diff --git a/build.gradle b/build.gradle
index 4b64a29f..7191c762 100644
--- a/build.gradle
+++ b/build.gradle
@@ -29,16 +29,9 @@ plugins {
     id 'com.github.spotbugs' version '4.8.0'
     id 'jacoco'
     id 'com.diffplug.spotless' version '5.11.0'
-    id 'checkstyle'
-}
-
-checkstyle {
-    toolVersion = '9.3'
-    configFile file("checkstyle/checkstyle.xml")
 }
 
 spotbugsMain {
-    excludeFilter = file("checkstyle/findbugs-exclude.xml")
     effort = 'max'
     ignoreFailures = true
 
@@ -205,9 +198,6 @@ jacocoTestCoverageVerification {
 // to run coverage verification during the build (and fail when appropriate)
 check.dependsOn jacocoTestCoverageVerification
 
-checkstyleMain.enabled = false
-checkstyleTest.enabled = false
-
 dependencies {
     if (JavaVersion.current() <= JavaVersion.VERSION_1_8) {
         compile files("${System.properties['java.home']}/../lib/tools.jar")
@@ -240,13 +230,13 @@ dependencies {
         }
     }
 
-    compile('com.google.guava:guava:30.1-jre') {
+    compile('com.google.guava:guava:32.0.1-jre') {
         force = 'true'
     }
     compile 'org.jooq:jooq:3.10.8'
     compile 'org.apache.commons:commons-lang3:3.9'
-    compile 'org.bouncycastle:bcprov-jdk15on:1.70'
-    compile 'org.bouncycastle:bcpkix-jdk15on:1.70'
+    compile 'org.bouncycastle:bcprov-jdk15to18:1.74'
+    compile 'org.bouncycastle:bcpkix-jdk15to18:1.74'
     compile "org.opensearch:performanceanalyzer-rca:${version}"
     compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
     compile "com.fasterxml.jackson.core:jackson-databind:${jacksonDataBindVersion}"
diff --git a/checkstyle/checkstyle.xml b/checkstyle/checkstyle.xml
deleted file mode 100644
index 81083381..00000000
--- a/checkstyle/checkstyle.xml
+++ /dev/null
@@ -1,263 +0,0 @@
-<?xml version="1.0"?>
-<!DOCTYPE module PUBLIC
-        "-//Checkstyle//DTD Checkstyle Configuration 1.3//EN"
-        "https://checkstyle.org/dtds/configuration_1_3.dtd">
-
-<!--
-    Checkstyle configuration that checks the Google coding conventions from Google Java Style
-    that can be found at https://google.github.io/styleguide/javaguide.html.
-    Checkstyle is very configurable. Be sure to read the documentation at
-    http://checkstyle.sf.net (or in your downloaded distribution).
-    To completely disable a check, just comment it out or delete it from the file.
-    Authors: Max Vetrenko, Ruslan Diachenko, Roman Ivanov.
- -->
-
-<module name = "Checker">
-  <property name="charset" value="UTF-8"/>
-
-  <property name="severity" value="error"/>
-
-  <property name="fileExtensions" value="java, properties, xml"/>
-  <!-- Excludes all 'module-info.java' files              -->
-  <!-- See https://checkstyle.org/config_filefilters.html -->
-  <module name="BeforeExecutionExclusionFileFilter">
-    <property name="fileNamePattern" value="module\-info\.java$"/>
-  </module>
-  <!-- https://checkstyle.org/config_filters.html#SuppressionFilter -->
-  <module name="SuppressionFilter">
-    <property name="file" value="${org.checkstyle.google.suppressionfilter.config}"
-              default="checkstyle-suppressions.xml" />
-    <property name="optional" value="true"/>
-  </module>
-  <!-- Checks for whitespace                               -->
-  <!-- See http://checkstyle.sf.net/config_whitespace.html -->
-  <module name="FileTabCharacter">
-    <property name="eachLine" value="true"/>
-  </module>
-  <module name="LineLength">
-    <property name="max" value="100"/>
-    <property name="ignorePattern" value="^package.*|^import.*|a href|href|http://|https://|ftp://"/>
-  </module>
-  <module name="TreeWalker">
-    <module name="OuterTypeFilename"/>
-    <module name="IllegalTokenText">
-      <property name="tokens" value="STRING_LITERAL, CHAR_LITERAL"/>
-      <property name="format"
-                value="\\u00(09|0(a|A)|0(c|C)|0(d|D)|22|27|5(C|c))|\\(0(10|11|12|14|15|42|47)|134)"/>
-      <property name="message"
-                value="Consider using special escape sequence instead of octal value or Unicode escaped value."/>
-    </module>
-    <module name="AvoidEscapedUnicodeCharacters">
-      <property name="allowEscapesForControlCharacters" value="true"/>
-      <property name="allowByTailComment" value="true"/>
-      <property name="allowNonPrintableEscapes" value="true"/>
-    </module>
-    <module name="AvoidStarImport"/>
-    <module name="OneTopLevelClass"/>
-    <module name="NoLineWrap"/>
-    <module name="EmptyBlock">
-      <property name="option" value="TEXT"/>
-      <property name="tokens"
-                value="LITERAL_TRY, LITERAL_FINALLY, LITERAL_IF, LITERAL_ELSE, LITERAL_SWITCH"/>
-    </module>
-    <module name="NeedBraces"/>
-    <module name="LeftCurly"/>
-    <module name="RightCurly">
-      <property name="id" value="RightCurlySame"/>
-      <property name="tokens"
-                value="LITERAL_TRY, LITERAL_CATCH, LITERAL_FINALLY, LITERAL_IF, LITERAL_ELSE,
-                    LITERAL_DO"/>
-    </module>
-    <module name="RightCurly">
-      <property name="id" value="RightCurlyAlone"/>
-      <property name="option" value="alone"/>
-      <property name="tokens"
-                value="CLASS_DEF, METHOD_DEF, CTOR_DEF, LITERAL_FOR, LITERAL_WHILE, STATIC_INIT,
-                    INSTANCE_INIT"/>
-    </module>
-    <module name="WhitespaceAround">
-      <property name="allowEmptyConstructors" value="true"/>
-      <property name="allowEmptyLambdas" value="true"/>
-      <property name="allowEmptyMethods" value="true"/>
-      <property name="allowEmptyTypes" value="true"/>
-      <property name="allowEmptyLoops" value="true"/>
-      <message key="ws.notFollowed"
-               value="WhitespaceAround: ''{0}'' is not followed by whitespace. Empty blocks may only be represented as '{}' when not part of a multi-block statement (4.1.3)"/>
-      <message key="ws.notPreceded"
-               value="WhitespaceAround: ''{0}'' is not preceded with whitespace."/>
-    </module>
-    <module name="OneStatementPerLine"/>
-    <module name="MultipleVariableDeclarations"/>
-    <module name="ArrayTypeStyle"/>
-    <module name="MissingSwitchDefault"/>
-    <module name="FallThrough"/>
-    <module name="UpperEll"/>
-    <module name="ModifierOrder"/>
-    <module name="EmptyLineSeparator">
-      <property name="allowNoEmptyLineBetweenFields" value="true"/>
-    </module>
-    <module name="SeparatorWrap">
-      <property name="id" value="SeparatorWrapDot"/>
-      <property name="tokens" value="DOT"/>
-      <property name="option" value="nl"/>
-    </module>
-    <module name="SeparatorWrap">
-      <property name="id" value="SeparatorWrapComma"/>
-      <property name="tokens" value="COMMA"/>
-      <property name="option" value="EOL"/>
-    </module>
-    <module name="SeparatorWrap">
-      <!-- ELLIPSIS is EOL until https://github.com/google/styleguide/issues/258 -->
-      <property name="id" value="SeparatorWrapEllipsis"/>
-      <property name="tokens" value="ELLIPSIS"/>
-      <property name="option" value="EOL"/>
-    </module>
-    <module name="SeparatorWrap">
-      <!-- ARRAY_DECLARATOR is EOL until https://github.com/google/styleguide/issues/259 -->
-      <property name="id" value="SeparatorWrapArrayDeclarator"/>
-      <property name="tokens" value="ARRAY_DECLARATOR"/>
-      <property name="option" value="EOL"/>
-    </module>
-    <module name="SeparatorWrap">
-      <property name="id" value="SeparatorWrapMethodRef"/>
-      <property name="tokens" value="METHOD_REF"/>
-      <property name="option" value="nl"/>
-    </module>
-    <module name="PackageName">
-      <property name="format" value="^[a-z]+(\.[a-z][a-z0-9]*)*$"/>
-      <message key="name.invalidPattern"
-               value="Package name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="TypeName">
-      <message key="name.invalidPattern"
-               value="Type name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="MemberName">
-      <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
-      <message key="name.invalidPattern"
-               value="Member name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="ParameterName">
-      <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-      <message key="name.invalidPattern"
-               value="Parameter name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="LambdaParameterName">
-      <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-      <message key="name.invalidPattern"
-               value="Lambda parameter name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="CatchParameterName">
-      <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-      <message key="name.invalidPattern"
-               value="Catch parameter name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="LocalVariableName">
-      <property name="tokens" value="VARIABLE_DEF"/>
-      <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-      <message key="name.invalidPattern"
-               value="Local variable name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="ClassTypeParameterName">
-      <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-      <message key="name.invalidPattern"
-               value="Class type name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="MethodTypeParameterName">
-      <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-      <message key="name.invalidPattern"
-               value="Method type name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="InterfaceTypeParameterName">
-      <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-      <message key="name.invalidPattern"
-               value="Interface type name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="NoFinalizer"/>
-    <module name="GenericWhitespace">
-      <message key="ws.followed"
-               value="GenericWhitespace ''{0}'' is followed by whitespace."/>
-      <message key="ws.preceded"
-               value="GenericWhitespace ''{0}'' is preceded with whitespace."/>
-      <message key="ws.illegalFollow"
-               value="GenericWhitespace ''{0}'' should followed by whitespace."/>
-      <message key="ws.notPreceded"
-               value="GenericWhitespace ''{0}'' is not preceded with whitespace."/>
-    </module>
-    <module name="Indentation">
-      <property name="basicOffset" value="2"/>
-      <property name="braceAdjustment" value="0"/>
-      <property name="caseIndent" value="2"/>
-      <property name="throwsIndent" value="4"/>
-      <property name="lineWrappingIndentation" value="4"/>
-      <property name="arrayInitIndent" value="2"/>
-    </module>
-    <module name="AbbreviationAsWordInName">
-      <property name="ignoreFinal" value="false"/>
-      <property name="allowedAbbreviationLength" value="9"/>
-    </module>
-    <module name="OverloadMethodsDeclarationOrder"/>
-    <module name="VariableDeclarationUsageDistance"/>
-    <module name="CustomImportOrder">
-      <property name="sortImportsInGroupAlphabetically" value="true"/>
-      <property name="separateLineBetweenGroups" value="true"/>
-      <property name="customImportOrderRules" value="STATIC###THIRD_PARTY_PACKAGE"/>
-    </module>
-    <module name="MethodParamPad"/>
-    <module name="NoWhitespaceBefore">
-      <property name="tokens"
-                value="COMMA, SEMI, POST_INC, POST_DEC, DOT, ELLIPSIS, METHOD_REF"/>
-      <property name="allowLineBreaks" value="true"/>
-    </module>
-    <module name="ParenPad"/>
-    <module name="OperatorWrap">
-      <property name="option" value="NL"/>
-      <property name="tokens"
-                value="BAND, BOR, BSR, BXOR, DIV, EQUAL, GE, GT, LAND, LE, LITERAL_INSTANCEOF, LOR,
-                    LT, MINUS, MOD, NOT_EQUAL, PLUS, QUESTION, SL, SR, STAR, METHOD_REF "/>
-    </module>
-    <module name="AnnotationLocation">
-      <property name="id" value="AnnotationLocationMostCases"/>
-      <property name="tokens"
-                value="CLASS_DEF, INTERFACE_DEF, ENUM_DEF, METHOD_DEF, CTOR_DEF"/>
-    </module>
-    <module name="AnnotationLocation">
-      <property name="id" value="AnnotationLocationVariables"/>
-      <property name="tokens" value="VARIABLE_DEF"/>
-      <property name="allowSamelineMultipleAnnotations" value="true"/>
-    </module>
-    <module name="NonEmptyAtclauseDescription"/>
-    <module name="JavadocTagContinuationIndentation"/>
-    <module name="SummaryJavadoc">
-      <property name="forbiddenSummaryFragments"
-                value="^@return the *|^This method returns |^A [{]@code [a-zA-Z0-9]+[}]( is a )"/>
-    </module>
-    <module name="JavadocParagraph"/>
-    <module name="AtclauseOrder">
-      <property name="tagOrder" value="@param, @return, @throws, @deprecated"/>
-      <property name="target"
-                value="CLASS_DEF, INTERFACE_DEF, ENUM_DEF, METHOD_DEF, CTOR_DEF, VARIABLE_DEF"/>
-    </module>
-    <module name="JavadocMethod">
-      <property name="scope" value="public"/>
-      <property name="allowMissingParamTags" value="true"/>
-      <property name="allowMissingThrowsTags" value="true"/>
-      <property name="allowMissingReturnTag" value="true"/>
-      <property name="minLineCount" value="2"/>
-      <property name="allowedAnnotations" value="Override, Test"/>
-      <property name="allowThrowsTagsForSubclasses" value="true"/>
-    </module>
-    <module name="MethodName">
-      <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9_]*$"/>
-      <message key="name.invalidPattern"
-               value="Method name ''{0}'' must match pattern ''{1}''."/>
-    </module>
-    <module name="SingleLineJavadoc">
-      <property name="ignoreInlineTags" value="false"/>
-    </module>
-    <module name="EmptyCatchBlock">
-      <property name="exceptionVariableName" value="expected"/>
-    </module>
-    <module name="CommentsIndentation"/>
-  </module>
-</module>
diff --git a/checkstyle/findbugs-exclude.xml b/checkstyle/findbugs-exclude.xml
deleted file mode 100644
index e137fb21..00000000
--- a/checkstyle/findbugs-exclude.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<FindBugsFilter>
-    <Match>
-        <Bug pattern="DM_DEFAULT_ENCODING" />
-    </Match>
-    <Match>
-        <Class name="org.opensearch.performanceanalyzer.collectors.ThreadPoolMetricsCollector"/>
-        <Bug pattern="REC_CATCH_EXCEPTION"/>
-    </Match>
-</FindBugsFilter>
diff --git a/licenses/bcpkix-jdk15on-1.70.jar.sha1 b/licenses/bcpkix-jdk15on-1.70.jar.sha1
deleted file mode 100644
index e348463a..00000000
--- a/licenses/bcpkix-jdk15on-1.70.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-f81e5af49571a9d5a109a88f239a73ce87055417
\ No newline at end of file
diff --git a/licenses/bcpkix-jdk15to18-1.74.jar.sha1 b/licenses/bcpkix-jdk15to18-1.74.jar.sha1
new file mode 100644
index 00000000..a52fc5e2
--- /dev/null
+++ b/licenses/bcpkix-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+a29da9d05899555ecc567a3b4ffb03fe656d6084
\ No newline at end of file
diff --git a/licenses/bcprov-jdk15on-1.70.jar.sha1 b/licenses/bcprov-jdk15on-1.70.jar.sha1
deleted file mode 100644
index f5e89c0f..00000000
--- a/licenses/bcprov-jdk15on-1.70.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-4636a0d01f74acaf28082fb62b317f1080118371
\ No newline at end of file
diff --git a/licenses/bcprov-jdk15to18-1.74.jar.sha1 b/licenses/bcprov-jdk15to18-1.74.jar.sha1
new file mode 100644
index 00000000..d0d132e6
--- /dev/null
+++ b/licenses/bcprov-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+b1a91d0d102042e4ec02084384e1b52b73f125ab
\ No newline at end of file
diff --git a/licenses/bcutil-jdk15on-1.70.jar.sha1 b/licenses/bcutil-jdk15on-1.70.jar.sha1
deleted file mode 100644
index b082ef33..00000000
--- a/licenses/bcutil-jdk15on-1.70.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-54280e7195a7430d7911ded93fc01e07300b9526
\ No newline at end of file
diff --git a/licenses/bcutil-jdk15to18-1.74.jar.sha1 b/licenses/bcutil-jdk15to18-1.74.jar.sha1
new file mode 100644
index 00000000..ac40ca58
--- /dev/null
+++ b/licenses/bcutil-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+d5596e3018ae86eb72b7e3deefcdf096f173d0d3
\ No newline at end of file
diff --git a/licenses/checker-qual-3.33.0.jar.sha1 b/licenses/checker-qual-3.33.0.jar.sha1
new file mode 100644
index 00000000..88bdfb20
--- /dev/null
+++ b/licenses/checker-qual-3.33.0.jar.sha1
@@ -0,0 +1 @@
+de2b60b62da487644fc11f734e73c8b0b431238f
\ No newline at end of file
diff --git a/licenses/checker-qual-3.5.0.jar.sha1 b/licenses/checker-qual-3.5.0.jar.sha1
deleted file mode 100644
index 08e76eb0..00000000
--- a/licenses/checker-qual-3.5.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-2f50520c8abea66fbd8d26e481d3aef5c673b510
\ No newline at end of file
diff --git a/licenses/commons-lang3-3.12.0.jar.sha1 b/licenses/commons-lang3-3.12.0.jar.sha1
new file mode 100644
index 00000000..9273d8c0
--- /dev/null
+++ b/licenses/commons-lang3-3.12.0.jar.sha1
@@ -0,0 +1 @@
+c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e
\ No newline at end of file
diff --git a/licenses/commons-lang3-3.9.jar.sha1 b/licenses/commons-lang3-3.9.jar.sha1
deleted file mode 100644
index 2adcfd37..00000000
--- a/licenses/commons-lang3-3.9.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-0122c7cee69b53ed4a7681c03d4ee4c0e2765da5
\ No newline at end of file
diff --git a/licenses/guava-30.1-jre.jar.sha1 b/licenses/guava-30.1-jre.jar.sha1
deleted file mode 100644
index 4aa531de..00000000
--- a/licenses/guava-30.1-jre.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-00d0c3ce2311c9e36e73228da25a6e99b2ab826f
\ No newline at end of file
diff --git a/licenses/guava-32.0.1-jre.jar.sha1 b/licenses/guava-32.0.1-jre.jar.sha1
new file mode 100644
index 00000000..80dc9e93
--- /dev/null
+++ b/licenses/guava-32.0.1-jre.jar.sha1
@@ -0,0 +1 @@
+6e5d51a72d142f2d40a57dfb897188b36a95b489
\ No newline at end of file
diff --git a/licenses/j2objc-annotations-1.3.jar.sha1 b/licenses/j2objc-annotations-1.3.jar.sha1
deleted file mode 100644
index 0332207a..00000000
--- a/licenses/j2objc-annotations-1.3.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-ba035118bc8bac37d7eff77700720999acd9986d
\ No newline at end of file
diff --git a/licenses/j2objc-annotations-2.8.jar.sha1 b/licenses/j2objc-annotations-2.8.jar.sha1
new file mode 100644
index 00000000..dd70876c
--- /dev/null
+++ b/licenses/j2objc-annotations-2.8.jar.sha1
@@ -0,0 +1 @@
+c85270e307e7b822f1086b93689124b89768e273
\ No newline at end of file
diff --git a/licenses/jackson-annotations-2.14.1.jar.sha1 b/licenses/jackson-annotations-2.14.1.jar.sha1
deleted file mode 100644
index e43faef9..00000000
--- a/licenses/jackson-annotations-2.14.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-2a6ad504d591a7903ffdec76b5b7252819a2d162
\ No newline at end of file
diff --git a/licenses/jackson-annotations-2.14.2.jar.sha1 b/licenses/jackson-annotations-2.14.2.jar.sha1
new file mode 100644
index 00000000..bfa80ea0
--- /dev/null
+++ b/licenses/jackson-annotations-2.14.2.jar.sha1
@@ -0,0 +1 @@
+a7aae9525864930723e3453ab799521fdfd9d873
\ No newline at end of file
diff --git a/licenses/jackson-databind-2.14.1.jar.sha1 b/licenses/jackson-databind-2.14.1.jar.sha1
deleted file mode 100644
index 0e672692..00000000
--- a/licenses/jackson-databind-2.14.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-268524b9056cae1211b9f1f52560ef19347f4d17
\ No newline at end of file
diff --git a/licenses/jackson-databind-2.14.2.jar.sha1 b/licenses/jackson-databind-2.14.2.jar.sha1
new file mode 100644
index 00000000..1e2ec2f7
--- /dev/null
+++ b/licenses/jackson-databind-2.14.2.jar.sha1
@@ -0,0 +1 @@
+01e71fddbc80bb86f71a6345ac1e8ab8a00e7134
\ No newline at end of file
diff --git a/licenses/jackson-module-paranamer-2.14.1.jar.sha1 b/licenses/jackson-module-paranamer-2.14.1.jar.sha1
deleted file mode 100644
index afc61677..00000000
--- a/licenses/jackson-module-paranamer-2.14.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-58f6c8b06f2f0e78e933f9a2594381c058abbd99
\ No newline at end of file
diff --git a/licenses/jackson-module-paranamer-2.14.2.jar.sha1 b/licenses/jackson-module-paranamer-2.14.2.jar.sha1
new file mode 100644
index 00000000..aa7942d8
--- /dev/null
+++ b/licenses/jackson-module-paranamer-2.14.2.jar.sha1
@@ -0,0 +1 @@
+1258e1272442006d5bf67331a3701d6d768bafcb
\ No newline at end of file
diff --git a/licenses/netty-buffer-4.1.84.Final.jar.sha1 b/licenses/netty-buffer-4.1.84.Final.jar.sha1
deleted file mode 100644
index 25a6f9ec..00000000
--- a/licenses/netty-buffer-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-a6b8cf57cfffc28d8e33f8175788a99401f576d9
\ No newline at end of file
diff --git a/licenses/netty-buffer-4.1.96.Final.jar.sha1 b/licenses/netty-buffer-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..7abdb33d
--- /dev/null
+++ b/licenses/netty-buffer-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+4b80fffbe77485b457bf844289bf1801f61b9e91
\ No newline at end of file
diff --git a/licenses/netty-codec-4.1.84.Final.jar.sha1 b/licenses/netty-codec-4.1.84.Final.jar.sha1
deleted file mode 100644
index 032a8f1e..00000000
--- a/licenses/netty-codec-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-4f60f56c4cd17db114f01dc64aa465a2905240f5
\ No newline at end of file
diff --git a/licenses/netty-codec-4.1.96.Final.jar.sha1 b/licenses/netty-codec-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..8fdb32be
--- /dev/null
+++ b/licenses/netty-codec-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+9cfe430f8b14e7ba86969d8e1126aa0aae4d18f0
\ No newline at end of file
diff --git a/licenses/netty-codec-http-4.1.84.Final.jar.sha1 b/licenses/netty-codec-http-4.1.84.Final.jar.sha1
deleted file mode 100644
index 1e985edf..00000000
--- a/licenses/netty-codec-http-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-78628e78087d3da6c3d2b22aa67798d3f3adcd68
\ No newline at end of file
diff --git a/licenses/netty-codec-http-4.1.96.Final.jar.sha1 b/licenses/netty-codec-http-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..dfb0cf39
--- /dev/null
+++ b/licenses/netty-codec-http-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+a4d0d95df5026965c454902ef3d6d84b81f89626
\ No newline at end of file
diff --git a/licenses/netty-codec-http2-4.1.84.Final.jar.sha1 b/licenses/netty-codec-http2-4.1.84.Final.jar.sha1
deleted file mode 100644
index 5fe8c542..00000000
--- a/licenses/netty-codec-http2-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-5a0178b9689493fd612cd40481034469f4bd14cc
\ No newline at end of file
diff --git a/licenses/netty-codec-http2-4.1.96.Final.jar.sha1 b/licenses/netty-codec-http2-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..2fc787ee
--- /dev/null
+++ b/licenses/netty-codec-http2-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+cc8baf4ff67c1bcc0cde60bc5c2bb9447d92d9e6
\ No newline at end of file
diff --git a/licenses/netty-codec-socks-4.1.84.Final.jar.sha1 b/licenses/netty-codec-socks-4.1.84.Final.jar.sha1
deleted file mode 100644
index 1eef1b78..00000000
--- a/licenses/netty-codec-socks-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-8cef741b42de5a1b21a8313fffcf2b518138c00b
\ No newline at end of file
diff --git a/licenses/netty-codec-socks-4.1.96.Final.jar.sha1 b/licenses/netty-codec-socks-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..8e959bda
--- /dev/null
+++ b/licenses/netty-codec-socks-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+f53c52dbddaa4a02a51430405792d3f30a89b147
\ No newline at end of file
diff --git a/licenses/netty-common-4.1.84.Final.jar.sha1 b/licenses/netty-common-4.1.84.Final.jar.sha1
deleted file mode 100644
index beaa2cce..00000000
--- a/licenses/netty-common-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-90c84ec7f1108ae164810cf46694a5ec7ce738fc
\ No newline at end of file
diff --git a/licenses/netty-common-4.1.96.Final.jar.sha1 b/licenses/netty-common-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..85b5f527
--- /dev/null
+++ b/licenses/netty-common-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+d10c167623cbc471753f950846df241d1021655c
\ No newline at end of file
diff --git a/licenses/netty-handler-4.1.84.Final.jar.sha1 b/licenses/netty-handler-4.1.84.Final.jar.sha1
deleted file mode 100644
index afd28b45..00000000
--- a/licenses/netty-handler-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-69cd93e2c321f04fc0a18eb5af519565373d0873
\ No newline at end of file
diff --git a/licenses/netty-handler-4.1.96.Final.jar.sha1 b/licenses/netty-handler-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..fe4f48c6
--- /dev/null
+++ b/licenses/netty-handler-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+7840d7523d709e02961b647546f9d9dde1699306
\ No newline at end of file
diff --git a/licenses/netty-handler-proxy-4.1.84.Final.jar.sha1 b/licenses/netty-handler-proxy-4.1.84.Final.jar.sha1
deleted file mode 100644
index 0c3ed942..00000000
--- a/licenses/netty-handler-proxy-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-8d9f2282f4da2486eed7797bc8622437eda7ce65
\ No newline at end of file
diff --git a/licenses/netty-handler-proxy-4.1.96.Final.jar.sha1 b/licenses/netty-handler-proxy-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..d410208d
--- /dev/null
+++ b/licenses/netty-handler-proxy-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+dcabd63f4aaec2b4cad7588bfdd4cd2c82287e38
\ No newline at end of file
diff --git a/licenses/netty-resolver-4.1.84.Final.jar.sha1 b/licenses/netty-resolver-4.1.84.Final.jar.sha1
deleted file mode 100644
index 07aa37fc..00000000
--- a/licenses/netty-resolver-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-b6f808e331cf843d2a7ff62042cf9b5343e2ff25
\ No newline at end of file
diff --git a/licenses/netty-resolver-4.1.96.Final.jar.sha1 b/licenses/netty-resolver-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..9e93f013
--- /dev/null
+++ b/licenses/netty-resolver-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+0e51db5568a881e0f9b013b35617c597dc32f130
\ No newline at end of file
diff --git a/licenses/netty-transport-4.1.84.Final.jar.sha1 b/licenses/netty-transport-4.1.84.Final.jar.sha1
deleted file mode 100644
index 5e12ada3..00000000
--- a/licenses/netty-transport-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-acd9947d0a951b1f7021c7adc393df936b1ecbf0
\ No newline at end of file
diff --git a/licenses/netty-transport-4.1.96.Final.jar.sha1 b/licenses/netty-transport-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..707285d3
--- /dev/null
+++ b/licenses/netty-transport-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+dbd15ca244be28e1a98ed29b9d755edbfa737e02
\ No newline at end of file
diff --git a/licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1 b/licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1
deleted file mode 100644
index 6273c55f..00000000
--- a/licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-e51601ddb88ee646a97ff04db38d45c22c29aee8
\ No newline at end of file
diff --git a/licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1 b/licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1
new file mode 100644
index 00000000..e911c47d
--- /dev/null
+++ b/licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+daf8578cade63a01525ee9d70371fa78e6e91094
\ No newline at end of file
diff --git a/licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1 b/licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1
new file mode 100644
index 00000000..cfa29c84
--- /dev/null
+++ b/licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1
@@ -0,0 +1 @@
+fa3becdfd7461dcd8928c5d73d14fb7ecf232094
\ No newline at end of file
diff --git a/licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1 b/licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1
deleted file mode 100644
index 2c58d51b..00000000
--- a/licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-7ef4920812ab35c1d4a43d70bec3b5cf56fbd827
\ No newline at end of file
diff --git a/licenses/sqlite-jdbc-3.32.3.2.jar.sha1 b/licenses/sqlite-jdbc-3.32.3.2.jar.sha1
deleted file mode 100644
index 33622164..00000000
--- a/licenses/sqlite-jdbc-3.32.3.2.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-ee9912c1bdec16fe5978b0abd9f4063ce9eedf8b
\ No newline at end of file
diff --git a/licenses/sqlite-jdbc-3.41.2.2.jar.sha1 b/licenses/sqlite-jdbc-3.41.2.2.jar.sha1
new file mode 100644
index 00000000..3226b90c
--- /dev/null
+++ b/licenses/sqlite-jdbc-3.41.2.2.jar.sha1
@@ -0,0 +1 @@
+ddeb8d3a3004f412ed19b4c98b3aec11d9452ab5
\ No newline at end of file
diff --git a/licenses/tools.jar.sha1 b/licenses/tools.jar.sha1
index 0e0f215d..bf0d8c30 100644
--- a/licenses/tools.jar.sha1
+++ b/licenses/tools.jar.sha1
@@ -1 +1 @@
-9b9410a1a8847ae8f81a0ccb3acb4642f9ebe9d1
\ No newline at end of file
+47a38d27933a80f903d917bc79a94fc3ca6f3383
\ No newline at end of file