Merge pull request #480 from marklogic/feature/bump-spring

Bumped Spring to 5.3.27

Author: rjrudin

build.gradle

@@ -17,17 +17,20 @@ java {
 
 repositories {
 	mavenCentral()
+	maven {
+		url "https://nexus.marklogic.com/repository/maven-snapshots/"
+	}
 }
 
 dependencies {
-	api 'com.marklogic:ml-javaclient-util:4.5.0'
-	api 'org.springframework:spring-web:5.3.24'
+	api 'com.marklogic:ml-javaclient-util:4.6-SNAPSHOT'
+	api 'org.springframework:spring-web:5.3.27'
 	api 'com.fasterxml.jackson.core:jackson-databind:2.14.1'
 
 	implementation 'jaxen:jaxen:1.2.0'
 	implementation 'com.squareup.okhttp3:okhttp:4.10.0'
 	implementation 'io.github.rburgst:okhttp-digest:2.7'
-	implementation 'org.apache.httpcomponents:httpclient:4.5.13'
+	implementation 'org.apache.httpcomponents:httpclient:4.5.14'
 	implementation 'org.jdom:jdom2:2.0.6.1'
 
 	// Forcing httpclient to use this to address https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
@@ -37,7 +40,7 @@ dependencies {
 	implementation "org.apache.commons:commons-lang3:3.12.0"
 
 	// For PreviewInterceptor; can be excluded if that feature is not used
-	implementation("com.flipkart.zjsonpatch:zjsonpatch:0.4.12") {
+	implementation("com.flipkart.zjsonpatch:zjsonpatch:0.4.14") {
 		// Prefer the api version declared above
 		exclude module: "jackson-databind"
 	}
@@ -51,8 +54,8 @@ dependencies {
 	compileOnly "com.beust:jcommander:1.82"
 	compileOnly "ch.qos.logback:logback-classic:1.3.5"
 
-	testImplementation 'org.junit.jupiter:junit-jupiter:5.9.1'
-	testImplementation 'org.springframework:spring-test:5.3.24'
+	testImplementation 'org.junit.jupiter:junit-jupiter:5.9.3'
+	testImplementation 'org.springframework:spring-test:5.3.27'
 	testImplementation 'commons-io:commons-io:2.11.0'
 	testImplementation 'xmlunit:xmlunit:1.6'