[MRESOLVER-293] Update dependencies, align with Maven

• Type: Dependency upgrade
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.9.1
• Component/s: Resolver
• Assignee: Tamas Cservenak
• Reporter: Tamas Cservenak
• Created: 12/Nov/22 12:05
• Updated: 13/Nov/22 14:24
• Resolved: 13/Nov/22 14:21

Description

Update dependencies, mostly to align with Maven.

Updates:

• Guice to 5.1.0 (align with Maven 3.9,0)
• Hazelcast 5.1.1 -> 5.1.4 (bugfixes)
• Redisson 3.17.5 -> 3.17.7 (bugfixes)
• plexus-utils multiple -> 3.5.0 (runtime dependency)
• http transport used httpClient commons-codec 1.11 -> 1.15 (to get rid of CVEs)
• wagon transport Wagon API 3.5.1 -> 3.5.2
• test dependency Jetty 9.4.46 -> 9.4.49 (to get rid of CVEs, but not affecting us, as this is test dependency)
• test dependency Mockito core 3.7.7 -> 4.8.1

Make sure plexus-utils, guava are NEVER in compile scope, as resolver should not use classes from these (exception is Wagon Transport).

Issue Links

• links to: GitHub Pull Request #220