Merge branch 'main' into http5-oauth2

Author: Jonas-Isr

datamodel/openapi/openapi-generator/pom.xml

@@ -38,7 +38,7 @@
 			<dependency>
 				<groupId>org.mozilla</groupId>
 				<artifactId>rhino</artifactId>
-				<version>1.9.0</version>
+				<version>1.9.1</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>

dependency-bundles/bom/pom.xml

@@ -56,13 +56,13 @@
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
 		<scp-cf.xsuaa-client.version>3.6.6</scp-cf.xsuaa-client.version>
-		<java-jwt.version>4.5.0</java-jwt.version>
+		<java-jwt.version>4.5.1</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
 		<lombok.version>1.18.42</lombok.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
-		<vavr.version>0.11.0</vavr.version>
+		<vavr.version>1.0.0</vavr.version>
 		<guava.version>33.5.0-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
 		<commons-io.version>2.21.0</commons-io.version>
@@ -77,7 +77,7 @@
 		<resilience4j.version>2.3.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
 		<gson.version>2.13.2</gson.version>
-		<jackson.version>2.21.0</jackson.version>
+		<jackson.version>2.21.1</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
 		<!-- end of essential versions -->

pom.xml

@@ -88,7 +88,7 @@
 		<codeAnalysisExclusions>**/testclasses/**</codeAnalysisExclusions>
 		<!--  Non-essential dependencies  -->
 		<jco-api.version>4.87.9</jco-api.version>
-		<jackson.version>2.21.0</jackson.version>
+		<jackson.version>2.21.1</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<!--  WordUtils used twice in OData generator  -->
 		<json.version>20251224</json.version>
@@ -98,7 +98,7 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.15</spring.version>
+		<spring.version>6.2.16</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.7</assertj-core.version>
@@ -113,9 +113,9 @@
 		<maven-plugin-annotations.version>3.15.2</maven-plugin-annotations.version>
 		<maven-plugin-testing.version>3.5.1</maven-plugin-testing.version>
 		<caffeine.version>3.2.3</caffeine.version>
-		<openapi-generator.version>7.19.0</openapi-generator.version>
-		<io-swagger-core-v3.version>2.2.42</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.37</io-swagger-parser-v3.version>
+		<openapi-generator.version>7.20.0</openapi-generator.version>
+		<io-swagger-core-v3.version>2.2.43</io-swagger-core-v3.version>
+		<io-swagger-parser-v3.version>2.1.38</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
 		<stax2-api.version>4.2.2</stax2-api.version>
@@ -816,7 +816,7 @@
 				<!-- Needed because GitHub actions uses an old Maven version <3.9.0 -->
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-surefire-plugin</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<configuration>
 					<includes>
 						<include>${surefire.include}</include>