Updated some dependency versions for security

Author: jamesfwood

.github/workflows/ldap.yml

@@ -1,11 +1,8 @@
 name: CWS CI LDAP
 
-# Triggers the workflow on push
+# Workflow disabled - manual trigger only
 on:
-  push:
-  schedule:
-    # trigger a build and test of CWS weekly on Monday at 5 AM PST / 12 PM UTC
-    - cron: '0 12 * * 1'
+  workflow_dispatch:
 
 env:
   TEAM: ("jamesfwood" "jdrodjpl" "jl-0")

cws-ui/src/main/webapp/WEB-INF/web.xml

@@ -45,6 +45,11 @@
 		<servlet-name>springmvc</servlet-name>
 		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
 		<load-on-startup>1</load-on-startup>
+		<multipart-config>
+			<max-file-size>10485760</max-file-size>
+			<max-request-size>10485760</max-request-size>
+			<file-size-threshold>0</file-size-threshold>
+		</multipart-config>
 	</servlet>
 
 	<servlet>

pom.xml

@@ -21,7 +21,7 @@
 
 	<properties>
 		<activemq.version>2.42.0</activemq.version>
-		<assertj.version>3.27.6</assertj.version>
+		<assertj.version>3.27.7</assertj.version>
 		<bootstrap.version>5.3.8</bootstrap.version>
 		<graalvm.js.version>21.3.17</graalvm.js.version>
 		<springdoc.version>2.8.13</springdoc.version>
@@ -31,7 +31,7 @@
 		<commons-compress.version>1.28.0</commons-compress.version>
 		<commons-configuration.version>2.12.0</commons-configuration.version>
 		<commons-exec.version>1.5.0</commons-exec.version>
-		<commons-fileupload.version>1.5</commons-fileupload.version>
+		<commons-fileupload.version>1.6.0</commons-fileupload.version>
 		<commons-io.version>2.17.0</commons-io.version>
 		<commons-lang3.version>3.19.0</commons-lang3.version>
 		<commons-text.version>1.14.0</commons-text.version>
@@ -46,7 +46,7 @@
 		<cws.engine.version>${cws.version}</cws.engine.version>
         <greenmail.version>2.1.5</greenmail.version>
 		<freemarker.version>2.3.33</freemarker.version>
-		<jetty.version>12.1.1</jetty.version>
+		<jetty.version>12.1.6</jetty.version>
 		<gson.version>2.8.9</gson.version>
 		<jersey.version>3.1.11</jersey.version>
 		<guava.version>33.5.0-jre</guava.version>
@@ -84,13 +84,13 @@
 		<quartz.version>2.5.0</quartz.version>
 		<selenium.version>4.35.0</selenium.version>
 		<servlet-api.version>6.1.0</servlet-api.version>
-		<log4j.version>2.25.2</log4j.version>
+		<log4j.version>2.25.3</log4j.version>
 		<slf4j.version>1.7.36</slf4j.version>
 		<commons-logging.version>1.3.5</commons-logging.version>
 		<skip.integration.tests>false</skip.integration.tests>
 		<spring.framework.version>7.0.6</spring.framework.version>
 		<spring-web.version>7.0.6</spring-web.version>
-		<jackson.version>2.15.2</jackson.version>
+		<jackson.version>2.18.6</jackson.version>
 		<surefire.version>2.22.2</surefire.version>
 		<tomcat-catalina.version>11.0.20</tomcat-catalina.version>
 		<urlrewritefilter.version>5.1.3</urlrewritefilter.version>