chore: bump dependencies for release 1.7.0 (part 2)

* Bump netty version from 4.2.13.Final to 4.2.15.Final
* Bump spring-boot version from 3.5.11 to 3.5.12 in tarantool-spring-data-35
* Bump spring-boot version from 4.0.5 to 4.0.6 in tarantool-spring-data-40
* Bump maven-source-plugin from 3.3.1 to 3.4.0
* Bump maven-wrapper from 3.3.2 to 3.3.4 (Maven 3.9.11 to 3.9.16)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: dkasimovskiy

.mvn/wrapper/MavenWrapperDownloader.java

@@ -16,7 +16,7 @@
 import java.util.concurrent.ThreadLocalRandom;
 
 public final class MavenWrapperDownloader {
-  private static final String WRAPPER_VERSION = "@@project.version@@";
+  private static final String WRAPPER_VERSION = "3.3.4";
 
   private static final boolean VERBOSE = Boolean.parseBoolean(System.getenv("MVNW_VERBOSE"));
 
@@ -31,8 +31,11 @@ public static void main(String[] args) {
     try {
       log(" - Downloader started");
       final URL wrapperUrl = URI.create(args[0]).toURL();
-      final String jarPath = args[1].replace("..", ""); // Sanitize path
-      final Path wrapperJarPath = Paths.get(jarPath).toAbsolutePath().normalize();
+      final Path baseDir = Paths.get(".").toAbsolutePath().normalize();
+      final Path wrapperJarPath = baseDir.resolve(args[1]).normalize();
+      if (!wrapperJarPath.startsWith(baseDir)) {
+        throw new IOException("Invalid path: outside of allowed directory");
+      }
       downloadFileFromURL(wrapperUrl, wrapperJarPath);
       log("Done");
     } catch (IOException e) {

.mvn/wrapper/maven-wrapper.jar

@@ -1,20 +1,4 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements.  See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership.  The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License.  You may obtain a copy of the License at
-#
-#   http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied.  See the License for the
-# specific language governing permissions and limitations
-# under the License.
-wrapperVersion=3.3.2
+wrapperVersion=3.3.4
 distributionType=bin
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.11/apache-maven-3.9.11-bin.zip
-wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.16/apache-maven-3.9.16-bin.zip
+wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.4/maven-wrapper-3.3.4.jar

.mvn/wrapper/maven-wrapper.properties

@@ -25,11 +25,11 @@
   Compile:
     * Bump jackson version from 2.18.4 to 2.21.3
     * Bump msgpack version from 0.9.10 to 0.9.12
-    * Bump netty version from 4.2.7.Final to 4.2.13.Final
+    * Bump netty version from 4.2.7.Final to 4.2.15.Final
     * Bump httpclient5 version from 5.5 to 5.5.2
     * Bump httpcore5 version from 5.3.4 to 5.4.2
-    * Bump spring-boot version from 3.5.8 to 3.5.10 in tarantool-spring-data-35
-    * Pin spring-data-keyvalue version to 3.5.10 for tarantool-spring-data-35 and 4.0.4 for tarantool-spring-data-40
+    * Bump spring-boot version from 3.5.8 to 3.5.12 in tarantool-spring-data-35
+    * Add spring-boot version 4.0.6 in tarantool-spring-data-40
     * Bump micrometer version from 1.16.4 to 1.16.5
 
   Tests:
@@ -42,14 +42,17 @@
     * Bump commons-codec version from 1.19.0 to 1.22.0
     * Bump opentelemetry version from 1.48.0 to 1.62.0
 
-  Maven:
+  Maven: 
+    * Bump Maven version from 3.9.11 to 3.9.16
     * Bump maven-enforcer-plugin from 3.6.1 to 3.6.2
     * Bump maven-release-plugin from 3.1.1 to 3.3.1
     * Bump maven-compiler-plugin from 3.14.0 to 3.15.0
     * Bump maven-surefire-plugin from 3.5.4 to 3.5.5
     * Bump maven-pmd-plugin from 3.27.0 to 3.28.0
     * Bump spotbugs-maven-plugin from 4.9.8.1 to 4.9.8.3
     * Bump maven-resources-plugin from 3.3.1 to 3.5.0
+    * Bump maven-source-plugin from 3.3.1 to 3.4.0
+    * Bump maven-wrapper from 3.3.2 to 3.3.4
     * Bump jacoco-maven-plugin from 0.8.13 to 0.8.14
     * Bump maven-antrun-plugin from 3.1.0 to 3.2.0
     * Bump central-publishing-maven-plugin from 0.9.0 to 0.10.0

CHANGELOG.md

@@ -78,7 +78,7 @@
     <logging.logLevel>debug</logging.logLevel>
     <maven.compiler.source>8</maven.compiler.source>
     <maven.compiler.target>8</maven.compiler.target>
-    <netty.version>4.2.13.Final</netty.version>
+    <netty.version>4.2.15.Final</netty.version>
     <slf4j.api.version>2.0.17</slf4j.api.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
@@ -440,7 +440,7 @@
           </plugin>
           <plugin>
             <artifactId>maven-source-plugin</artifactId>
-            <version>3.3.1</version>
+            <version>3.4.0</version>
             <configuration>
               <archive>
                 <manifestEntries>

mvnw

@@ -14,7 +14,7 @@
     <properties>
         <jackson.version>2.21.3</jackson.version>
         <msgpack.version>0.9.12</msgpack.version>
-        <netty.version>4.2.13.Final</netty.version>
+        <netty.version>4.2.15.Final</netty.version>
         <slf4j.api.version>2.0.17</slf4j.api.version>
         <testcontainers.version>2.0.5</testcontainers.version>
         <logback.version>1.3.16</logback.version>

mvnw.cmd

@@ -18,7 +18,7 @@
   <properties>
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
-    <spring.boot.version>3.5.11</spring.boot.version>
+    <spring.boot.version>3.5.12</spring.boot.version>
     <shared.dir>${project.parent.parent.basedir}/tarantool-shared-resources/</shared.dir>
     <license.header.file>${project.parent.parent.basedir}/LICENSE_HEADER.txt</license.header.file>
   </properties>

pom.xml

@@ -18,7 +18,7 @@
   <properties>
     <!-- Recommended Java version is 25, minimal version is 17 -->
     <maven.compiler.release>17</maven.compiler.release>
-    <spring.boot.version>4.0.5</spring.boot.version>
+    <spring.boot.version>4.0.6</spring.boot.version>
     <shared.dir>${project.parent.parent.basedir}/tarantool-shared-resources/</shared.dir>
     <license.header.file>${project.parent.parent.basedir}/LICENSE_HEADER.txt</license.header.file>
     <!-- Spring Framework 7.x uses JUnit 6 -->