From c650815b4d69af8f7095f375729953d15c4c74f2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Dec 2024 21:25:34 +0000
Subject: [PATCH] Bump the maven group across 2 directories with 5 updates

Bumps the maven group with 2 updates in the /terragoat/packages directory: org.apache.commons:commons-compress and [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 4 updates in the /terragoat/packages/sub directory: org.apache.commons:commons-compress, [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), org.apache.logging.log4j:log4j-core and [org.springframework:spring-core](https://github.com/spring-projects/spring-framework).


Updates `org.apache.commons:commons-compress` from 1.15 to 1.26.0

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md)
- [Commits](https://github.com/junit-team/junit4/compare/r4.12...r4.13.1)

Updates `org.apache.commons:commons-compress` from 1.20 to 1.26.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.12.4 to 2.12.7.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.apache.logging.log4j:log4j-core` from 2.14.0 to 2.17.1

Updates `org.springframework:spring-core` from 5.3.0 to 6.1.14
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.0...v6.1.14)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-core
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 terragoat/packages/pom.xml     | 4 ++--
 terragoat/packages/sub/pom.xml | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/terragoat/packages/pom.xml b/terragoat/packages/pom.xml
index d5dd5dc3..cc6e6d63 100644
--- a/terragoat/packages/pom.xml
+++ b/terragoat/packages/pom.xml
@@ -28,12 +28,12 @@
 		<dependency>
 			<groupId>org.apache.commons</groupId>
 			<artifactId>commons-compress</artifactId>
-			<version>1.15</version>
+			<version>1.26.0</version>
 		</dependency>
 		<dependency>
 			<groupId>junit</groupId>
 			<artifactId>junit</artifactId>
-			<version>4.12</version>
+			<version>4.13.1</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
diff --git a/terragoat/packages/sub/pom.xml b/terragoat/packages/sub/pom.xml
index dff7d473..c552c4f7 100644
--- a/terragoat/packages/sub/pom.xml
+++ b/terragoat/packages/sub/pom.xml
@@ -23,14 +23,14 @@
 		<maven.compiler.source>1.7</maven.compiler.source>
 		<maven.compiler.target>1.7</maven.compiler.target>
    		<cloud.function.context.version>3.1.0</cloud.function.context.version>
-    		<log4j.version>2.14.0</log4j.version>
+    		<log4j.version>2.17.1</log4j.version>
   	</properties>
 
   	<dependencies>
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-databind</artifactId>
-			<version>2.12.4</version>
+			<version>2.12.7.1</version>
 		</dependency>
 	    	<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
@@ -40,12 +40,12 @@
 	    	<dependency>
 		      <groupId>org.apache.commons</groupId>
 		      <artifactId>commons-compress</artifactId>
-		      <version>1.20</version>
+		      <version>1.26.0</version>
 	    	</dependency>
 	    	<dependency>
 		      <groupId>org.springframework</groupId>
 		      <artifactId>spring-core</artifactId>
-		      <version>5.3.0</version>
+		      <version>6.1.14</version>
 	    	</dependency>
 	</dependencies>