From 27bff232c6e22e93f7de1cd24e7195f8a5a92969 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 12:28:02 +0200
Subject: [PATCH 01/23] build: consolidate Jackson dependency to 2.14.1

fixes duplicates:
* jakarta.xml.bind:jakarta.xml.bind-api:3.0.1
* com.fasterxml.jackson.core:jackson-databind:2.14.1
* com.fasterxml.jackson.core:jackson-annotations:2.14.1
* com.fasterxml.jackson.core:jackson-core:2.14.1
---
 carapace-server/pom.xml | 3 ---
 pom.xml                 | 9 ++++++++-
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index dfd7ced41..cafa7d27f 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -227,17 +227,14 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${libs.jackson}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>${libs.jackson}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-annotations</artifactId>
-            <version>${libs.jackson}</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>
diff --git a/pom.xml b/pom.xml
index 4e98bdd9e..df0d7ae2d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -113,7 +113,7 @@
 
         <libs.jetty>9.4.44.v20210927</libs.jetty>
         <libs.jersey>2.35</libs.jersey>
-        <libs.jackson>2.13.1</libs.jackson>
+        <libs.jackson>2.14.1</libs.jackson>
         <libs.jaxws.jaxb-api>2.3.1</libs.jaxws.jaxb-api>
         <libs.jaxws.jaxb-impl>3.0.2</libs.jaxws.jaxb-impl>
         <libs.javaxactivation-api>1.2.0</libs.javaxactivation-api>
@@ -160,6 +160,13 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson</groupId>
+                <artifactId>jackson-bom</artifactId>
+                <version>${libs.jackson}</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
             <dependency>
                 <groupId>org.hamcrest</groupId>
                 <artifactId>hamcrest</artifactId>

From 43b5f1a07fa4c89c58a3ac20fe98ade18f295756 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 12:58:52 +0200
Subject: [PATCH 02/23] build: remove unwanted dependencies to annotations

removes dependencies to:
* org.checkerframework:checker-qual
* com.google.errorprone:error_prone_annotations
* com.google.code.findbugs:jsr305
---
 carapace-server/pom.xml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index cafa7d27f..901c4671d 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -71,6 +71,16 @@
             <groupId>com.github.ben-manes.caffeine</groupId>
             <artifactId>caffeine</artifactId>
             <version>${libs.caffeine}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.checkerframework</groupId>
+                    <artifactId>checker-qual</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.google.errorprone</groupId>
+                    <artifactId>error_prone_annotations</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.antlr</groupId>
@@ -156,6 +166,14 @@
                     <groupId>org.bouncycastle</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.checkerframework</groupId>
+                    <artifactId>checker-qual</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.google.errorprone</groupId>
+                    <artifactId>error_prone_annotations</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -266,6 +284,20 @@
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
             <version>${libs.guava}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.checkerframework</groupId>
+                    <artifactId>checker-qual</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.google.errorprone</groupId>
+                    <artifactId>error_prone_annotations</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>com.google.code.findbugs</groupId>
+                    <artifactId>jsr305</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>

From 2bdb075f479f61881d9f98abecc700269d9643e4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 13:22:36 +0200
Subject: [PATCH 03/23] build: consolidate SLF4J dependency to 1.7.35

we had to upgrade ZooKeeper to 3.7.1+ to drop log4j dependency
---
 carapace-server/pom.xml |  9 ---------
 pom.xml                 | 12 ++++++++++--
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 901c4671d..89cf0cac5 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -94,14 +94,6 @@
             <artifactId>zookeeper</artifactId>
             <version>${libs.zookkeeper}</version>
             <exclusions>
-                <exclusion>
-                    <groupId>org.slf4j</groupId>
-                    <artifactId>slf4j-log4j12</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>log4j</groupId>
-                    <artifactId>log4j</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>commons-cli</groupId>
                     <artifactId>commons-cli</artifactId>
@@ -272,7 +264,6 @@
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
-            <version>${libs.slf4j}</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
diff --git a/pom.xml b/pom.xml
index df0d7ae2d..8213cefc7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
         <libs.caffeine>3.0.5</libs.caffeine>
         <libs.antlr>4.3.1</libs.antlr>
 
-        <libs.zookkeeper>3.7.0</libs.zookkeeper>
+        <libs.zookkeeper>3.7.2</libs.zookkeeper>
         <libs.curator>5.2.0</libs.curator>
         <libs.prometheus>0.14.1</libs.prometheus>
         <libs.prometheus.metrics>4.14.4</libs.prometheus.metrics>
@@ -117,7 +117,7 @@
         <libs.jaxws.jaxb-api>2.3.1</libs.jaxws.jaxb-api>
         <libs.jaxws.jaxb-impl>3.0.2</libs.jaxws.jaxb-impl>
         <libs.javaxactivation-api>1.2.0</libs.javaxactivation-api>
-        <libs.slf4j>1.7.33</libs.slf4j>
+        <libs.slf4j>1.7.35</libs.slf4j>
         <libs.guava>31.1-jre</libs.guava>
         <libs.lombok>1.18.32</libs.lombok>
         <libs.spotbugsannotations>4.5.3</libs.spotbugsannotations>
@@ -153,6 +153,7 @@
 
     <dependencyManagement>
         <dependencies>
+            <!-- BOMs -->
             <dependency>
                 <groupId>io.projectreactor</groupId>
                 <artifactId>reactor-bom</artifactId>
@@ -167,6 +168,13 @@
                 <scope>import</scope>
                 <type>pom</type>
             </dependency>
+            <!-- Individual dependencies -->
+            <dependency>
+                <groupId>org.slf4j</groupId>
+                <artifactId>slf4j-api</artifactId>
+                <version>${libs.slf4j}</version>
+            </dependency>
+            <!-- Individual test dependencies -->
             <dependency>
                 <groupId>org.hamcrest</groupId>
                 <artifactId>hamcrest</artifactId>

From 2d140be04958cb9d47de8ab9afbcab9397019a98 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 13:32:18 +0200
Subject: [PATCH 04/23] build: consolidate ZooKeeper dependency to 3.8.4

* org.apache.zookeeper:zookeeper
* commons-io:commons-io
* org.apache.zookeeper:zookeeper-jute
---
 carapace-server/pom.xml | 29 ++++-------------------------
 pom.xml                 | 17 ++++++++++++++++-
 2 files changed, 20 insertions(+), 26 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 89cf0cac5..947f4bc33 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -88,26 +88,6 @@
             <version>${libs.antlr}</version>
             <scope>compile</scope>
         </dependency>
-
-        <dependency>
-            <groupId>org.apache.zookeeper</groupId>
-            <artifactId>zookeeper</artifactId>
-            <version>${libs.zookkeeper}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>commons-cli</groupId>
-                    <artifactId>commons-cli</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.yetus</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>io.netty</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
-        </dependency>
         <dependency>
             <groupId>org.apache.curator</groupId>
             <artifactId>curator-recipes</artifactId>
@@ -178,11 +158,6 @@
             <artifactId>commons-pool2</artifactId>
             <version>${libs.commons-pool2}</version>
         </dependency>
-        <dependency>
-            <groupId>commons-io</groupId>
-            <artifactId>commons-io</artifactId>
-            <version>${libs.commons-io}</version>
-        </dependency>
         <dependency>
             <groupId>commons-net</groupId>
             <artifactId>commons-net</artifactId>
@@ -384,6 +359,10 @@
                     and the old-fashioned JUnit (in particular a version which is strictly not 4.12 and 4.13)
                      messes up with Intellij IDEA test run of whole project.
                 -->
+                <exclusion>
+                    <groupId>ch.qos.logback</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
                 <exclusion>
                     <groupId>org.junit.jupiter</groupId>
                     <artifactId>*</artifactId>
diff --git a/pom.xml b/pom.xml
index 8213cefc7..eb4f6725f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
         <libs.caffeine>3.0.5</libs.caffeine>
         <libs.antlr>4.3.1</libs.antlr>
 
-        <libs.zookkeeper>3.7.2</libs.zookkeeper>
+        <libs.zookkeeper>3.8.4</libs.zookkeeper>
         <libs.curator>5.2.0</libs.curator>
         <libs.prometheus>0.14.1</libs.prometheus>
         <libs.prometheus.metrics>4.14.4</libs.prometheus.metrics>
@@ -174,6 +174,21 @@
                 <artifactId>slf4j-api</artifactId>
                 <version>${libs.slf4j}</version>
             </dependency>
+            <dependency>
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>${libs.commons-io}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.zookeeper</groupId>
+                <artifactId>zookeeper</artifactId>
+                <version>${libs.zookkeeper}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.zookeeper</groupId>
+                <artifactId>zookeeper-jute</artifactId>
+                <version>${libs.zookkeeper}</version>
+            </dependency>
             <!-- Individual test dependencies -->
             <dependency>
                 <groupId>org.hamcrest</groupId>

From dc889046fda40f17805a0f6aae22afc0720aa820 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 12:27:16 +0200
Subject: [PATCH 05/23] build: consolidate Jetty dependency to 9.4.56.v20240826

---
 carapace-server/pom.xml | 4 ----
 pom.xml                 | 7 +++++++
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 947f4bc33..7409894b8 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -166,22 +166,18 @@
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
             <artifactId>jetty-server</artifactId>
-            <version>${libs.jetty}</version>
         </dependency>
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
             <artifactId>jetty-webapp</artifactId>
-            <version>${libs.jetty}</version>
         </dependency>
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
             <artifactId>jetty-servlet</artifactId>
-            <version>${libs.jetty}</version>
         </dependency>
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
             <artifactId>jetty-util</artifactId>
-            <version>${libs.jetty}</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.core</groupId>
diff --git a/pom.xml b/pom.xml
index eb4f6725f..63aeb5a15 100644
--- a/pom.xml
+++ b/pom.xml
@@ -161,6 +161,13 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-bom</artifactId>
+                <version>${libs.jetty}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
                 <artifactId>jackson-bom</artifactId>

From 59930fe551cd86d1bac04b30ab145b59270770c4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 14:13:18 +0200
Subject: [PATCH 06/23] build: consolidate Netty dependency through BOM

---
 carapace-server/pom.xml | 18 ------------------
 pom.xml                 |  9 ++++++++-
 2 files changed, 8 insertions(+), 19 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 7409894b8..27abea6a5 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -26,7 +26,6 @@
         <dependency>
             <groupId>io.netty</groupId>
             <artifactId>netty-tcnative-boringssl-static</artifactId>
-            <version>${libs.netty.ssl}</version>
         </dependency>
         <dependency>
             <groupId>org.shredzone.acme4j</groupId>
@@ -60,12 +59,6 @@
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>route53</artifactId>
             <version>${libs.awssdk}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>io.netty</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>com.github.ben-manes.caffeine</groupId>
@@ -112,13 +105,6 @@
             <groupId>org.apache.bookkeeper.stats</groupId>
             <artifactId>prometheus-metrics-provider</artifactId>
             <version>${libs.prometheus.metrics}</version>
-            <type>jar</type>
-            <exclusions>
-                <exclusion>
-                    <groupId>io.netty</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>io.micrometer</groupId>
@@ -130,10 +116,6 @@
             <artifactId>herddb-jdbc</artifactId>
             <version>${libs.herddb}</version>
             <exclusions>
-                <exclusion>
-                    <groupId>io.netty</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>org.bouncycastle</groupId>
                     <artifactId>*</artifactId>
diff --git a/pom.xml b/pom.xml
index 63aeb5a15..522a6c07d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -92,7 +92,7 @@
         <javacc-maven-plugin.version>2.4</javacc-maven-plugin.version>
 
         <libs.projectreactor>2022.0.7</libs.projectreactor>
-        <libs.netty.ssl>2.0.61.Final</libs.netty.ssl>
+        <libs.netty>4.1.92.Final</libs.netty>
         <libs.acme4j>2.12</libs.acme4j>
         <libs.bouncycastle>1.70</libs.bouncycastle>
         <libs.awssdk>2.17.113</libs.awssdk>
@@ -161,6 +161,13 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-bom</artifactId>
+                <version>${libs.netty}</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
             <dependency>
                 <groupId>org.eclipse.jetty</groupId>
                 <artifactId>jetty-bom</artifactId>

From 86ac0e124f97e8f2d1334b3e78868af7ea6b6bb2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 14:34:44 +0200
Subject: [PATCH 07/23] build: consolidate BouncyCastle dependency

---
 carapace-server/pom.xml | 17 +----------------
 carapace-ui/pom.xml     |  1 -
 pom.xml                 | 10 ++++++++++
 3 files changed, 11 insertions(+), 17 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 27abea6a5..61b019901 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -31,29 +31,15 @@
             <groupId>org.shredzone.acme4j</groupId>
             <artifactId>acme4j-client</artifactId>
             <version>${libs.acme4j}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.bouncycastle</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.shredzone.acme4j</groupId>
             <artifactId>acme4j-utils</artifactId>
             <version>${libs.acme4j}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.bouncycastle</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcpkix-jdk15on</artifactId>
-            <version>${libs.bouncycastle}</version>
-            <type>jar</type>
         </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
@@ -118,7 +104,7 @@
             <exclusions>
                 <exclusion>
                     <groupId>org.bouncycastle</groupId>
-                    <artifactId>*</artifactId>
+                    <artifactId>bc-fips</artifactId>
                 </exclusion>
                 <exclusion>
                     <groupId>org.checkerframework</groupId>
@@ -287,7 +273,6 @@
             <groupId>pl.pragmatists</groupId>
             <artifactId>JUnitParams</artifactId>
             <version>${libs.junitparams}</version>
-            <type>jar</type>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/carapace-ui/pom.xml b/carapace-ui/pom.xml
index cf637e3ef..0b58512b6 100644
--- a/carapace-ui/pom.xml
+++ b/carapace-ui/pom.xml
@@ -69,7 +69,6 @@
                                         <groupId>javax</groupId>
                                         <artifactId>javaee-endorsed-api</artifactId>
                                         <version>7.0</version>
-                                        <type>jar</type>
                                     </artifactItem>
                                 </artifactItems>
                             </configuration>
diff --git a/pom.xml b/pom.xml
index 522a6c07d..955ac78d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -203,6 +203,16 @@
                 <artifactId>zookeeper-jute</artifactId>
                 <version>${libs.zookkeeper}</version>
             </dependency>
+            <dependency>
+                <groupId>org.bouncycastle</groupId>
+                <artifactId>bcpkix-jdk15on</artifactId>
+                <version>${libs.bouncycastle}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.bouncycastle</groupId>
+                <artifactId>bcprov-jdk15on</artifactId>
+                <version>${libs.bouncycastle}</version>
+            </dependency>
             <!-- Individual test dependencies -->
             <dependency>
                 <groupId>org.hamcrest</groupId>

From 6d14b31d2b2458467f8554fed753f600329444f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 12:50:06 +0200
Subject: [PATCH 08/23] build: add maven-enforcer-plugin

---
 pom.xml | 39 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 955ac78d2..e49dccb90 100644
--- a/pom.xml
+++ b/pom.xml
@@ -158,8 +158,8 @@
                 <groupId>io.projectreactor</groupId>
                 <artifactId>reactor-bom</artifactId>
                 <version>${libs.projectreactor}</version>
-                <type>pom</type>
                 <scope>import</scope>
+                <type>pom</type>
             </dependency>
             <dependency>
                 <groupId>io.netty</groupId>
@@ -172,8 +172,8 @@
                 <groupId>org.eclipse.jetty</groupId>
                 <artifactId>jetty-bom</artifactId>
                 <version>${libs.jetty}</version>
-                <type>pom</type>
                 <scope>import</scope>
+                <type>pom</type>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
@@ -337,6 +337,41 @@
                     <autoVersionSubmodules>true</autoVersionSubmodules>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-enforcer-plugin</artifactId>
+                <version>3.5.0</version>
+                <executions>
+                    <execution>
+                        <id>enforce-dependency-convergence</id>
+                        <goals>
+                            <goal>enforce</goal>
+                        </goals>
+                        <configuration>
+                            <rules>
+                                <banDependencyManagementScope/>
+                                <banDynamicVersions>
+                                    <ignores>
+                                        <ignore>${project.groupId}</ignore>
+                                    </ignores>
+                                </banDynamicVersions>
+                                <banDuplicatePomDependencyVersions/>
+                                <bannedDependencies>
+                                    <excludes>
+                                        <exclude>com.google.errorprone</exclude>
+                                        <exclude>com.google.code.findbugs</exclude>
+                                        <exclude>org.bouncycastle:*</exclude>
+                                        <exclude>org.checkerframework</exclude>
+                                    </excludes>
+                                    <includes>
+                                        <include>org.bouncycastle:*-jdk15on</include>
+                                    </includes>
+                                </bannedDependencies>
+                            </rules>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
         </plugins>
     </build>
 </project>

From 752e56bf56ad5cc4524fde0fb3c3d5b8264e3a77 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 16:04:29 +0200
Subject: [PATCH 09/23] build: consolidate Protobuf dependency to 3.17.1

---
 pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pom.xml b/pom.xml
index e49dccb90..0f63837ec 100644
--- a/pom.xml
+++ b/pom.xml
@@ -121,6 +121,7 @@
         <libs.guava>31.1-jre</libs.guava>
         <libs.lombok>1.18.32</libs.lombok>
         <libs.spotbugsannotations>4.5.3</libs.spotbugsannotations>
+        <libs.protobuf>3.17.1</libs.protobuf>
 
         <!-- test dependecies -->
         <libs.junit>4.13.2</libs.junit>
@@ -213,6 +214,11 @@
                 <artifactId>bcprov-jdk15on</artifactId>
                 <version>${libs.bouncycastle}</version>
             </dependency>
+            <dependency>
+                <groupId>com.google.protobuf</groupId>
+                <artifactId>protobuf-java</artifactId>
+                <version>${libs.protobuf}</version>
+            </dependency>
             <!-- Individual test dependencies -->
             <dependency>
                 <groupId>org.hamcrest</groupId>

From 3a42f72f01491e1ed1515f3ebb04a9230fd2898a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 16:04:55 +0200
Subject: [PATCH 10/23] build: consolidate Guava dependency to 31.1

---
 carapace-server/pom.xml | 1 -
 pom.xml                 | 7 +++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 61b019901..a819c3ae3 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -213,7 +213,6 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>${libs.guava}</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.checkerframework</groupId>
diff --git a/pom.xml b/pom.xml
index 0f63837ec..177ddbeef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -183,6 +183,13 @@
                 <scope>import</scope>
                 <type>pom</type>
             </dependency>
+            <dependency>
+                <groupId>com.google.guava</groupId>
+                <artifactId>guava-bom</artifactId>
+                <version>${libs.guava}</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
             <!-- Individual dependencies -->
             <dependency>
                 <groupId>org.slf4j</groupId>

From 7b1e38825fe5a35e6da5e95d6fd489ddd57da5e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 16:43:52 +0200
Subject: [PATCH 11/23] build: drop unnecessary dependencies

* drop javax.xml.bind:jaxb-api
* drop org.glassfish.jaxb:jaxb-runtime
* drop javax.activation:javax.activation-api
* drop javax:javaee-web-api
---
 carapace-server/pom.xml | 15 ---------------
 carapace-ui/pom.xml     | 41 -----------------------------------------
 pom.xml                 |  3 ---
 3 files changed, 59 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index a819c3ae3..badd49d81 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -185,21 +185,6 @@
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-annotations</artifactId>
         </dependency>
-        <dependency>
-            <groupId>javax.xml.bind</groupId>
-            <artifactId>jaxb-api</artifactId>
-            <version>${libs.jaxws.jaxb-api}</version>
-        </dependency>
-        <dependency>
-            <groupId>org.glassfish.jaxb</groupId>
-            <artifactId>jaxb-runtime</artifactId>
-            <version>${libs.jaxws.jaxb-impl}</version>
-        </dependency>
-        <dependency>
-            <groupId>javax.activation</groupId>
-            <artifactId>javax.activation-api</artifactId>
-            <version>${libs.javaxactivation-api}</version>
-        </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
diff --git a/carapace-ui/pom.xml b/carapace-ui/pom.xml
index 0b58512b6..5835835bb 100644
--- a/carapace-ui/pom.xml
+++ b/carapace-ui/pom.xml
@@ -23,27 +23,9 @@
         <carapace.ui.dir>src/main/webapp</carapace.ui.dir>
     </properties>
 
-    <dependencies>
-        <dependency>
-            <groupId>javax</groupId>
-            <artifactId>javaee-web-api</artifactId>
-            <version>7.0</version>
-            <scope>provided</scope>
-        </dependency>
-    </dependencies>
-
     <build>
         <pluginManagement>
             <plugins>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-compiler-plugin</artifactId>
-                    <configuration>
-                        <compilerArgs>
-                            <endorseddirs>${endorsed.dir}</endorseddirs>
-                        </compilerArgs>
-                    </configuration>
-                </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-war-plugin</artifactId>
@@ -52,29 +34,6 @@
                         <failOnMissingWebXml>false</failOnMissingWebXml>
                     </configuration>
                 </plugin>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-dependency-plugin</artifactId>
-                    <executions>
-                        <execution>
-                            <phase>validate</phase>
-                            <goals>
-                                <goal>copy</goal>
-                            </goals>
-                            <configuration>
-                                <outputDirectory>${endorsed.dir}</outputDirectory>
-                                <silent>true</silent>
-                                <artifactItems>
-                                    <artifactItem>
-                                        <groupId>javax</groupId>
-                                        <artifactId>javaee-endorsed-api</artifactId>
-                                        <version>7.0</version>
-                                    </artifactItem>
-                                </artifactItems>
-                            </configuration>
-                        </execution>
-                    </executions>
-                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>
diff --git a/pom.xml b/pom.xml
index 177ddbeef..d931536bf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -114,9 +114,6 @@
         <libs.jetty>9.4.44.v20210927</libs.jetty>
         <libs.jersey>2.35</libs.jersey>
         <libs.jackson>2.14.1</libs.jackson>
-        <libs.jaxws.jaxb-api>2.3.1</libs.jaxws.jaxb-api>
-        <libs.jaxws.jaxb-impl>3.0.2</libs.jaxws.jaxb-impl>
-        <libs.javaxactivation-api>1.2.0</libs.javaxactivation-api>
         <libs.slf4j>1.7.35</libs.slf4j>
         <libs.guava>31.1-jre</libs.guava>
         <libs.lombok>1.18.32</libs.lombok>

From 83bb5dd0e52893912c16ac9842b1a9153ccbba2c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 15:22:20 +0200
Subject: [PATCH 12/23] build: add Jersey BOM

---
 carapace-server/pom.xml | 21 +++++++++++----------
 pom.xml                 |  7 +++++++
 2 files changed, 18 insertions(+), 10 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index badd49d81..a904bfe28 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -51,6 +51,7 @@
             <artifactId>caffeine</artifactId>
             <version>${libs.caffeine}</version>
             <exclusions>
+                <!-- Excluding unnecessary annotations that are bundled in multiple versions by libraries -->
                 <exclusion>
                     <groupId>org.checkerframework</groupId>
                     <artifactId>checker-qual</artifactId>
@@ -65,7 +66,6 @@
             <groupId>org.antlr</groupId>
             <artifactId>ST4</artifactId>
             <version>${libs.antlr}</version>
-            <scope>compile</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.curator</groupId>
@@ -102,10 +102,7 @@
             <artifactId>herddb-jdbc</artifactId>
             <version>${libs.herddb}</version>
             <exclusions>
-                <exclusion>
-                    <groupId>org.bouncycastle</groupId>
-                    <artifactId>bc-fips</artifactId>
-                </exclusion>
+                <!-- Excluding unnecessary annotations that are bundled in multiple versions by libraries -->
                 <exclusion>
                     <groupId>org.checkerframework</groupId>
                     <artifactId>checker-qual</artifactId>
@@ -114,6 +111,11 @@
                     <groupId>com.google.errorprone</groupId>
                     <artifactId>error_prone_annotations</artifactId>
                 </exclusion>
+                <!-- BouncyCastle FIPS clashes with other BouncyCastle modules -->
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>bc-fips</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -150,27 +152,22 @@
         <dependency>
             <groupId>org.glassfish.jersey.core</groupId>
             <artifactId>jersey-server</artifactId>
-            <version>${libs.jersey}</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.inject</groupId>
             <artifactId>jersey-hk2</artifactId>
-            <version>${libs.jersey}</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.containers</groupId>
             <artifactId>jersey-container-servlet</artifactId>
-            <version>${libs.jersey}</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.containers</groupId>
             <artifactId>jersey-container-jetty-http</artifactId>
-            <version>${libs.jersey}</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.media</groupId>
             <artifactId>jersey-media-json-jackson</artifactId>
-            <version>${libs.jersey}</version>
             <scope>runtime</scope>
         </dependency>
         <dependency>
@@ -199,6 +196,7 @@
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
             <exclusions>
+                <!-- Excluding unnecessary annotations that are bundled in multiple versions by libraries -->
                 <exclusion>
                     <groupId>org.checkerframework</groupId>
                     <artifactId>checker-qual</artifactId>
@@ -247,6 +245,7 @@
             <version>${libs.junit}</version>
             <scope>test</scope>
             <exclusions>
+                <!-- Clashes with org.hamcrest:hamcrest -->
                 <exclusion>
                     <groupId>org.hamcrest</groupId>
                     <artifactId>hamcrest-core</artifactId>
@@ -265,6 +264,7 @@
             <version>${libs.wiremock}</version>
             <scope>test</scope>
             <exclusions>
+                <!-- Clashes with org.hamcrest:hamcrest -->
                 <exclusion>
                     <groupId>org.hamcrest</groupId>
                     <artifactId>hamcrest-core</artifactId>
@@ -277,6 +277,7 @@
             <version>${libs.powermock}</version>
             <scope>test</scope>
             <exclusions>
+                <!-- Clashes with org.hamcrest:hamcrest -->
                 <exclusion>
                     <groupId>org.hamcrest</groupId>
                     <artifactId>hamcrest-core</artifactId>
diff --git a/pom.xml b/pom.xml
index d931536bf..76393368a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -173,6 +173,13 @@
                 <scope>import</scope>
                 <type>pom</type>
             </dependency>
+            <dependency>
+                <groupId>org.glassfish.jersey</groupId>
+                <artifactId>jersey-bom</artifactId>
+                <version>${libs.jersey}</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
                 <artifactId>jackson-bom</artifactId>

From 32bad9c39c8d40cf3c3548732b5c3287991d2b34 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 15:16:49 +0200
Subject: [PATCH 13/23] build: consolidate Prometheus and BookKeeper
 dependencies

---
 carapace-server/pom.xml |  5 +----
 pom.xml                 | 16 ++++++++++++++--
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index a904bfe28..c2c89754b 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -75,22 +75,19 @@
         <dependency>
             <groupId>io.prometheus</groupId>
             <artifactId>simpleclient</artifactId>
-            <version>${libs.prometheus}</version>
         </dependency>
         <dependency>
             <groupId>io.prometheus</groupId>
             <artifactId>simpleclient_hotspot</artifactId>
-            <version>${libs.prometheus}</version>
         </dependency>
         <dependency>
             <groupId>io.prometheus</groupId>
             <artifactId>simpleclient_servlet</artifactId>
-            <version>${libs.prometheus}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.bookkeeper.stats</groupId>
             <artifactId>prometheus-metrics-provider</artifactId>
-            <version>${libs.prometheus.metrics}</version>
+            <version>${libs.bookkeeper}</version>
         </dependency>
         <dependency>
             <groupId>io.micrometer</groupId>
diff --git a/pom.xml b/pom.xml
index 76393368a..f4b88a7ba 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,10 +99,10 @@
         <libs.caffeine>3.0.5</libs.caffeine>
         <libs.antlr>4.3.1</libs.antlr>
 
+        <libs.bookkeeper>4.14.4</libs.bookkeeper>
         <libs.zookkeeper>3.8.4</libs.zookkeeper>
         <libs.curator>5.2.0</libs.curator>
-        <libs.prometheus>0.14.1</libs.prometheus>
-        <libs.prometheus.metrics>4.14.4</libs.prometheus.metrics>
+        <libs.prometheus>0.16.0</libs.prometheus>
         <libs.micrometer>1.11.0</libs.micrometer>
         <libs.herddb>0.26.1</libs.herddb>
 
@@ -194,6 +194,13 @@
                 <scope>import</scope>
                 <type>pom</type>
             </dependency>
+            <dependency>
+                <groupId>io.prometheus</groupId>
+                <artifactId>simpleclient_bom</artifactId>
+                <version>${libs.prometheus}</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
             <!-- Individual dependencies -->
             <dependency>
                 <groupId>org.slf4j</groupId>
@@ -230,6 +237,11 @@
                 <artifactId>protobuf-java</artifactId>
                 <version>${libs.protobuf}</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.bookkeeper.stats</groupId>
+                <artifactId>bookkeeper-stats-api</artifactId>
+                <version>${libs.bookkeeper}</version>
+            </dependency>
             <!-- Individual test dependencies -->
             <dependency>
                 <groupId>org.hamcrest</groupId>

From 0539afdbfbe6f001590a471b35381623fc9f410f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 14:50:03 +0200
Subject: [PATCH 14/23] build: consolidate Apache Commons dependencies

---
 carapace-server/pom.xml | 12 +++++-------
 pom.xml                 | 32 +++++++++++++++++++++++++++-----
 2 files changed, 32 insertions(+), 12 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index c2c89754b..46c2073fb 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -116,19 +116,17 @@
             </exclusions>
         </dependency>
         <dependency>
-            <groupId>org.apache.commons</groupId>
-            <artifactId>commons-lang3</artifactId>
-            <version>${libs.commons.lang3}</version>
+            <groupId>commons-codec</groupId>
+            <artifactId>commons-codec</artifactId>
+            <scope>test</scope>
         </dependency>
         <dependency>
-            <groupId>org.apache.commons</groupId>
-            <artifactId>commons-pool2</artifactId>
-            <version>${libs.commons-pool2}</version>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
         </dependency>
         <dependency>
             <groupId>commons-net</groupId>
             <artifactId>commons-net</artifactId>
-            <version>${libs.commons-net}</version>
         </dependency>
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
diff --git a/pom.xml b/pom.xml
index f4b88a7ba..f38c5286a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/POM/4.0.0"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
 
     <groupId>org.carapaceproxy</groupId>
@@ -106,10 +107,11 @@
         <libs.micrometer>1.11.0</libs.micrometer>
         <libs.herddb>0.26.1</libs.herddb>
 
+        <libs.commons.codec>1.15</libs.commons.codec>
         <libs.commons.lang3>3.12.0</libs.commons.lang3>
-        <libs.commons-pool2>2.11.1</libs.commons-pool2>
-        <libs.commons-io>2.11.0</libs.commons-io>
-        <libs.commons-net>3.11.0</libs.commons-net>
+        <libs.commons.logging>1.2</libs.commons.logging>
+        <libs.commons.io>2.11.0</libs.commons.io>
+        <libs.commons.net>3.11.0</libs.commons.net>
 
         <libs.jetty>9.4.44.v20210927</libs.jetty>
         <libs.jersey>2.35</libs.jersey>
@@ -207,10 +209,30 @@
                 <artifactId>slf4j-api</artifactId>
                 <version>${libs.slf4j}</version>
             </dependency>
+            <dependency>
+                <groupId>commons-codec</groupId>
+                <artifactId>commons-codec</artifactId>
+                <version>${libs.commons.codec}</version>
+            </dependency>
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>${libs.commons-io}</version>
+                <version>${libs.commons.io}</version>
+            </dependency>
+            <dependency>
+                <groupId>commons-logging</groupId>
+                <artifactId>commons-logging</artifactId>
+                <version>${libs.commons.logging}</version>
+            </dependency>
+            <dependency>
+                <groupId>commons-net</groupId>
+                <artifactId>commons-net</artifactId>
+                <version>${libs.commons.net}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-lang3</artifactId>
+                <version>${libs.commons.lang3}</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.zookeeper</groupId>

From 154e1b2f34f18f2415c2f4de251e3bd0da9fd9fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 17:25:59 +0200
Subject: [PATCH 15/23] build: add maven-enforcer-plugin with many rules

---
 carapace-server/pom.xml | 11 +++++-----
 carapace-ui/pom.xml     |  3 ++-
 pom.xml                 | 48 +++++++++++++++++++++++++++++++++++------
 3 files changed, 49 insertions(+), 13 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 46c2073fb..7a7c23f8b 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/POM/4.0.0"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
 
     <parent>
@@ -196,14 +197,14 @@
                     <groupId>org.checkerframework</groupId>
                     <artifactId>checker-qual</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>com.google.errorprone</groupId>
-                    <artifactId>error_prone_annotations</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>com.google.code.findbugs</groupId>
                     <artifactId>jsr305</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>com.google.errorprone</groupId>
+                    <artifactId>error_prone_annotations</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
diff --git a/carapace-ui/pom.xml b/carapace-ui/pom.xml
index 5835835bb..c01ad4f7c 100644
--- a/carapace-ui/pom.xml
+++ b/carapace-ui/pom.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/POM/4.0.0"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
 
     <parent>
diff --git a/pom.xml b/pom.xml
index f38c5286a..e56bd401a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -130,7 +130,6 @@
         <libs.mockito>3.12.4</libs.mockito>
         <libs.hamcrest>2.2</libs.hamcrest>
 
-        <plugins.spotbugsmaven>4.5.3.0</plugins.spotbugsmaven>
         <libs.asm>9.2</libs.asm>
     </properties>
 
@@ -299,7 +298,7 @@
                 <plugin>
                     <groupId>com.github.spotbugs</groupId>
                     <artifactId>spotbugs-maven-plugin</artifactId>
-                    <version>${plugins.spotbugsmaven}</version>
+                    <version>4.8.6.4</version>
                     <configuration>
                         <effort>Max</effort>
                         <maxHeap>4096</maxHeap>
@@ -316,7 +315,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-plugin</artifactId>
-                    <version>3.2.5</version>
+                    <version>3.5.1</version>
                     <configuration>
                         <reuseForks>false</reuseForks>
                         <trimStackTrace>false</trimStackTrace>
@@ -352,7 +351,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-dependency-plugin</artifactId>
-                    <version>3.6.1</version>
+                    <version>3.8.0</version>
                 </plugin>
                 <plugin>
                     <groupId>org.codehaus.mojo</groupId>
@@ -362,7 +361,37 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-assembly-plugin</artifactId>
-                    <version>3.6.0</version>
+                    <version>3.7.1</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-clean-plugin</artifactId>
+                    <version>3.4.0</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-install-plugin</artifactId>
+                    <version>3.1.3</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-site-plugin</artifactId>
+                    <version>3.20.0</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-deploy-plugin</artifactId>
+                    <version>3.1.3</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-resources-plugin</artifactId>
+                    <version>3.3.1</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-jar-plugin</artifactId>
+                    <version>3.4.2</version>
                 </plugin>
             </plugins>
         </pluginManagement>
@@ -375,7 +404,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-release-plugin</artifactId>
-                <version>3.0.1</version>
+                <version>3.1.1</version>
                 <configuration>
                     <preparationProfiles>production</preparationProfiles>
                     <releaseProfiles>production</releaseProfiles>
@@ -401,12 +430,12 @@
                         <configuration>
                             <rules>
                                 <banDependencyManagementScope/>
+                                <banDuplicatePomDependencyVersions/>
                                 <banDynamicVersions>
                                     <ignores>
                                         <ignore>${project.groupId}</ignore>
                                     </ignores>
                                 </banDynamicVersions>
-                                <banDuplicatePomDependencyVersions/>
                                 <bannedDependencies>
                                     <excludes>
                                         <exclude>com.google.errorprone</exclude>
@@ -418,6 +447,11 @@
                                         <include>org.bouncycastle:*-jdk15on</include>
                                     </includes>
                                 </bannedDependencies>
+                                <dependencyConvergence/>
+                                <requireMavenVersion>
+                                    <version>3.9</version>
+                                </requireMavenVersion>
+                                <requirePluginVersions/>
                             </rules>
                         </configuration>
                     </execution>

From 02801b5c2742defe164ebe359436184cef547ac0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Tue, 15 Oct 2024 16:57:50 +0200
Subject: [PATCH 16/23] build: fix also test-scoped conflicts

---
 carapace-server/pom.xml | 19 +++----------------
 pom.xml                 | 26 +++++++++++++++++++++++++-
 2 files changed, 28 insertions(+), 17 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 7a7c23f8b..f280de5f4 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -238,15 +238,7 @@
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
-            <version>${libs.junit}</version>
             <scope>test</scope>
-            <exclusions>
-                <!-- Clashes with org.hamcrest:hamcrest -->
-                <exclusion>
-                    <groupId>org.hamcrest</groupId>
-                    <artifactId>hamcrest-core</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>pl.pragmatists</groupId>
@@ -286,12 +278,6 @@
             <version>${libs.powermock}</version>
             <scope>test</scope>
         </dependency>
-        <dependency>
-            <groupId>org.mockito</groupId>
-            <artifactId>mockito-core</artifactId>
-            <version>${libs.mockito}</version>
-            <scope>test</scope>
-        </dependency>
         <dependency>
             <groupId>org.apache.curator</groupId>
             <artifactId>curator-test</artifactId>
@@ -304,11 +290,12 @@
                      messes up with Intellij IDEA test run of whole project.
                 -->
                 <exclusion>
-                    <groupId>ch.qos.logback</groupId>
+                    <groupId>org.junit.jupiter</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
+                <!-- We want a single SLF4J backend in our classpath! -->
                 <exclusion>
-                    <groupId>org.junit.jupiter</groupId>
+                    <groupId>ch.qos.logback</groupId>
                     <artifactId>*</artifactId>
                 </exclusion>
             </exclusions>
diff --git a/pom.xml b/pom.xml
index e56bd401a..814bc20f1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,6 +116,7 @@
         <libs.jetty>9.4.44.v20210927</libs.jetty>
         <libs.jersey>2.35</libs.jersey>
         <libs.jackson>2.14.1</libs.jackson>
+        <libs.javassist>3.27.0-GA</libs.javassist>
         <libs.slf4j>1.7.35</libs.slf4j>
         <libs.guava>31.1-jre</libs.guava>
         <libs.lombok>1.18.32</libs.lombok>
@@ -127,7 +128,7 @@
         <libs.junitparams>1.1.1</libs.junitparams>
         <libs.wiremock>2.35.0</libs.wiremock>
         <libs.powermock>2.0.9</libs.powermock>
-        <libs.mockito>3.12.4</libs.mockito>
+        <libs.objenesis>3.0.1</libs.objenesis>
         <libs.hamcrest>2.2</libs.hamcrest>
 
         <libs.asm>9.2</libs.asm>
@@ -269,6 +270,28 @@
                 <artifactId>hamcrest</artifactId>
                 <version>${libs.hamcrest}</version>
             </dependency>
+            <dependency>
+                <groupId>junit</groupId>
+                <artifactId>junit</artifactId>
+                <version>${libs.junit}</version>
+                <exclusions>
+                    <!-- Clashes with org.hamcrest:hamcrest -->
+                    <exclusion>
+                        <groupId>org.hamcrest</groupId>
+                        <artifactId>hamcrest-core</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.objenesis</groupId>
+                <artifactId>objenesis</artifactId>
+                <version>${libs.objenesis}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.javassist</groupId>
+                <artifactId>javassist</artifactId>
+                <version>${libs.javassist}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -442,6 +465,7 @@
                                         <exclude>com.google.code.findbugs</exclude>
                                         <exclude>org.bouncycastle:*</exclude>
                                         <exclude>org.checkerframework</exclude>
+                                        <exclusion>org.hamcrest:hamcrest-core</exclusion>
                                     </excludes>
                                     <includes>
                                         <include>org.bouncycastle:*-jdk15on</include>

From b2c024d660cea815d95b74898c66363cbebc0ede Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 21:34:27 +0200
Subject: [PATCH 17/23] build: add reactor-tools

---
 carapace-server/pom.xml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index f280de5f4..0bc5416b7 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -16,6 +16,10 @@
     <name>Carapace :: Server</name>
 
     <dependencies>
+        <dependency>
+            <groupId>io.projectreactor</groupId>
+            <artifactId>reactor-tools</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.projectreactor.netty</groupId>
             <artifactId>reactor-netty-core</artifactId>

From bf91df1d34f117b323035494b7f640066b436ef1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 21:33:55 +0200
Subject: [PATCH 18/23] build: upgrade Netty and Reactor-Netty

---
 .../test/java/org/carapaceproxy/RawClientTest.java   | 12 ++++++------
 pom.xml                                              |  4 ++--
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/carapace-server/src/test/java/org/carapaceproxy/RawClientTest.java b/carapace-server/src/test/java/org/carapaceproxy/RawClientTest.java
index 435bfa6b7..405bd2c62 100644
--- a/carapace-server/src/test/java/org/carapaceproxy/RawClientTest.java
+++ b/carapace-server/src/test/java/org/carapaceproxy/RawClientTest.java
@@ -762,7 +762,7 @@ public void testClosedProxy(String scheme) throws Exception {
                                 .withHeader("Content-Type", "text/html")
                                 .withHeader("Content-Length", "it <b>works</b> !!".length() + "")
                                 .withBody("it <b>works</b> !!")));
-                String s = client.executeRequest("GET " + scheme + "://yahoo.com/index.html?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                String s = client.executeRequest("GET " + scheme + "://yahoo.com/index.html?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
                 s = client.get("/index.html?p1=v1&p2=https://localhost/index.html?p=1").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
@@ -773,7 +773,7 @@ public void testClosedProxy(String scheme) throws Exception {
                                 .withHeader("Content-Type", "text/html")
                                 .withHeader("Content-Length", "it <b>works</b> !!".length() + "")
                                 .withBody("it <b>works</b> !!")));
-                s = client.executeRequest("GET " + scheme + "://yahoo.com/index.html HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                s = client.executeRequest("GET " + scheme + "://yahoo.com/index.html HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
                 s = client.get("/index.html").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
@@ -785,11 +785,11 @@ public void testClosedProxy(String scheme) throws Exception {
                                 .withHeader("Content-Type", "text/html")
                                 .withHeader("Content-Length", "it <b>works</b> !!".length() + "")
                                 .withBody("it <b>works</b> !!")));
-                s = client.executeRequest("GET " + scheme + "://yahoo.com/?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                s = client.executeRequest("GET " + scheme + "://yahoo.com/?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
                 s = client.get("/?p1=v1&p2=https://localhost/index.html?p=1").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
-                s = client.executeRequest("GET " + scheme + "://yahoo.com?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                s = client.executeRequest("GET " + scheme + "://yahoo.com?p1=v1&p2=https://localhost/index.html?p=1 HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
                 s = client.get("?p1=v1&p2=https://localhost/index.html?p=1").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
@@ -800,11 +800,11 @@ public void testClosedProxy(String scheme) throws Exception {
                                 .withHeader("Content-Type", "text/html")
                                 .withHeader("Content-Length", "it <b>works</b> !!".length() + "")
                                 .withBody("it <b>works</b> !!")));
-                s = client.executeRequest("GET " + scheme + "://yahoo.com/ HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                s = client.executeRequest("GET " + scheme + "://yahoo.com/ HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
                 s = client.get("/").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
-                s = client.executeRequest("GET " + scheme + "://yahoo.com HTTP/1.1 \r\nHost: localhost\r\n\r\n").getBodyString();
+                s = client.executeRequest("GET " + scheme + "://yahoo.com HTTP/1.1\r\nHost: localhost\r\n\r\n").getBodyString();
                 assertEquals("it <b>works</b> !!", s);
             }
         }
diff --git a/pom.xml b/pom.xml
index 814bc20f1..8327ead38 100644
--- a/pom.xml
+++ b/pom.xml
@@ -92,8 +92,8 @@
         <maven.compiler.release>${toolchain.java.version}</maven.compiler.release>
         <javacc-maven-plugin.version>2.4</javacc-maven-plugin.version>
 
-        <libs.projectreactor>2022.0.7</libs.projectreactor>
-        <libs.netty>4.1.92.Final</libs.netty>
+        <libs.projectreactor>2023.0.11</libs.projectreactor>
+        <libs.netty>4.1.114.Final</libs.netty>
         <libs.acme4j>2.12</libs.acme4j>
         <libs.bouncycastle>1.70</libs.bouncycastle>
         <libs.awssdk>2.17.113</libs.awssdk>

From 362db7e0bba33147f0f2dcb404b517fe1b0d4cbe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 22:08:18 +0200
Subject: [PATCH 19/23] build: upgrade Guava

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 8327ead38..730f5e361 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,7 +118,7 @@
         <libs.jackson>2.14.1</libs.jackson>
         <libs.javassist>3.27.0-GA</libs.javassist>
         <libs.slf4j>1.7.35</libs.slf4j>
-        <libs.guava>31.1-jre</libs.guava>
+        <libs.guava>33.3.1-jre</libs.guava>
         <libs.lombok>1.18.32</libs.lombok>
         <libs.spotbugsannotations>4.5.3</libs.spotbugsannotations>
         <libs.protobuf>3.17.1</libs.protobuf>

From 7fff4b2a00363bbb69b0e2caf7701ed30db502b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 22:22:36 +0200
Subject: [PATCH 20/23] build: upgrade BouncyCastle

---
 carapace-server/pom.xml | 18 +++++++++++++++++-
 pom.xml                 |  8 ++++----
 2 files changed, 21 insertions(+), 5 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index 0bc5416b7..f495085a5 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -36,15 +36,31 @@
             <groupId>org.shredzone.acme4j</groupId>
             <artifactId>acme4j-client</artifactId>
             <version>${libs.acme4j}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.shredzone.acme4j</groupId>
             <artifactId>acme4j-utils</artifactId>
             <version>${libs.acme4j}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>*</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcpkix-jdk18on</artifactId>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcpkix-jdk15on</artifactId>
+            <artifactId>bcprov-jdk18on</artifactId>
         </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
diff --git a/pom.xml b/pom.xml
index 730f5e361..2e411b97f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,7 +95,7 @@
         <libs.projectreactor>2023.0.11</libs.projectreactor>
         <libs.netty>4.1.114.Final</libs.netty>
         <libs.acme4j>2.12</libs.acme4j>
-        <libs.bouncycastle>1.70</libs.bouncycastle>
+        <libs.bouncycastle>1.78.1</libs.bouncycastle>
         <libs.awssdk>2.17.113</libs.awssdk>
         <libs.caffeine>3.0.5</libs.caffeine>
         <libs.antlr>4.3.1</libs.antlr>
@@ -246,12 +246,12 @@
             </dependency>
             <dependency>
                 <groupId>org.bouncycastle</groupId>
-                <artifactId>bcpkix-jdk15on</artifactId>
+                <artifactId>bcpkix-jdk18on</artifactId>
                 <version>${libs.bouncycastle}</version>
             </dependency>
             <dependency>
                 <groupId>org.bouncycastle</groupId>
-                <artifactId>bcprov-jdk15on</artifactId>
+                <artifactId>bcprov-jdk18on</artifactId>
                 <version>${libs.bouncycastle}</version>
             </dependency>
             <dependency>
@@ -468,7 +468,7 @@
                                         <exclusion>org.hamcrest:hamcrest-core</exclusion>
                                     </excludes>
                                     <includes>
-                                        <include>org.bouncycastle:*-jdk15on</include>
+                                        <include>org.bouncycastle:*-jdk18on</include>
                                     </includes>
                                 </bannedDependencies>
                                 <dependencyConvergence/>

From 110180e0f49aeb8222ee9b04a40389252fa1229f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 22:45:06 +0200
Subject: [PATCH 21/23] build: upgrade ACME4j

---
 carapace-server/pom.xml                       | 11 -----------
 .../server/certificates/ACMEClient.java       | 19 +++++++------------
 pom.xml                                       |  2 +-
 3 files changed, 8 insertions(+), 24 deletions(-)

diff --git a/carapace-server/pom.xml b/carapace-server/pom.xml
index f495085a5..3b343c07b 100644
--- a/carapace-server/pom.xml
+++ b/carapace-server/pom.xml
@@ -43,17 +43,6 @@
                 </exclusion>
             </exclusions>
         </dependency>
-        <dependency>
-            <groupId>org.shredzone.acme4j</groupId>
-            <artifactId>acme4j-utils</artifactId>
-            <version>${libs.acme4j}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.bouncycastle</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-            </exclusions>
-        </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcpkix-jdk18on</artifactId>
diff --git a/carapace-server/src/main/java/org/carapaceproxy/server/certificates/ACMEClient.java b/carapace-server/src/main/java/org/carapaceproxy/server/certificates/ACMEClient.java
index 03781d7c1..5cebe3e9c 100644
--- a/carapace-server/src/main/java/org/carapaceproxy/server/certificates/ACMEClient.java
+++ b/carapace-server/src/main/java/org/carapaceproxy/server/certificates/ACMEClient.java
@@ -66,10 +66,6 @@ public class ACMEClient {
     private final boolean testingModeOn;
     private final KeyPair userKey;
 
-    public enum ChallengeType {
-        HTTP
-    }
-
     public ACMEClient(KeyPair userKey, boolean testingMode) {
         Security.addProvider(new BouncyCastleProvider());
         this.userKey = userKey;
@@ -140,10 +136,9 @@ public Map<String, Challenge> getChallengesForOrder(Order order) throws AcmeExce
      * @return {@link Http01Challenge} to verify
      */
     private Http01Challenge httpChallenge(Authorization auth) throws AcmeException {
-        Http01Challenge challenge = auth.findChallenge(Http01Challenge.TYPE);
-        if (challenge == null) {
-            throw new AcmeException("Found no " + Http01Challenge.TYPE + " challenge, don't know what to do...");
-        }
+        Http01Challenge challenge = auth.findChallenge(Http01Challenge.TYPE)
+                .map(Http01Challenge.class::cast)
+                .orElseThrow(() -> new AcmeException("Found no " + Http01Challenge.TYPE + " challenge, don't know what to do..."));
         LOG.debug("It must be reachable at: http://{}/.well-known/acme-challenge/{}",
                 auth.getIdentifier().getDomain(), challenge.getToken()
         );
@@ -161,10 +156,10 @@ private Http01Challenge httpChallenge(Authorization auth) throws AcmeException {
      * @throws org.shredzone.acme4j.exception.AcmeException
      */
     public Challenge dnsChallenge(Authorization auth) throws AcmeException {
-        Dns01Challenge challenge = auth.findChallenge(Dns01Challenge.TYPE);
-        if (challenge == null) {
-            throw new AcmeException("Found no " + Dns01Challenge.TYPE + " challenge, don't know what to do...");
-        }
+        Dns01Challenge challenge = auth
+                .findChallenge(Dns01Challenge.TYPE)
+                .map(Dns01Challenge.class::cast)
+                .orElseThrow(() -> new AcmeException("Found no " + Dns01Challenge.TYPE + " challenge, don't know what to do..."));
         LOG.info("DNS-challenge _acme-challenge.{}. to save as TXT-record with content {}", auth.getIdentifier().getDomain(), challenge.getDigest());
         return challenge;
     }
diff --git a/pom.xml b/pom.xml
index 2e411b97f..6da9ad6fb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
 
         <libs.projectreactor>2023.0.11</libs.projectreactor>
         <libs.netty>4.1.114.Final</libs.netty>
-        <libs.acme4j>2.12</libs.acme4j>
+        <libs.acme4j>3.4.0</libs.acme4j>
         <libs.bouncycastle>1.78.1</libs.bouncycastle>
         <libs.awssdk>2.17.113</libs.awssdk>
         <libs.caffeine>3.0.5</libs.caffeine>

From c70c62078123e43e0413f0418bbc92e84e1d2fb9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Fri, 18 Oct 2024 23:18:24 +0200
Subject: [PATCH 22/23] build: upgrade other dependencies

---
 pom.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pom.xml b/pom.xml
index 6da9ad6fb..624af7eec 100644
--- a/pom.xml
+++ b/pom.xml
@@ -100,7 +100,7 @@
         <libs.caffeine>3.0.5</libs.caffeine>
         <libs.antlr>4.3.1</libs.antlr>
 
-        <libs.bookkeeper>4.14.4</libs.bookkeeper>
+        <libs.bookkeeper>4.14.8</libs.bookkeeper>
         <libs.zookkeeper>3.8.4</libs.zookkeeper>
         <libs.curator>5.2.0</libs.curator>
         <libs.prometheus>0.16.0</libs.prometheus>
@@ -110,12 +110,12 @@
         <libs.commons.codec>1.15</libs.commons.codec>
         <libs.commons.lang3>3.12.0</libs.commons.lang3>
         <libs.commons.logging>1.2</libs.commons.logging>
-        <libs.commons.io>2.11.0</libs.commons.io>
+        <libs.commons.io>2.14.0</libs.commons.io>
         <libs.commons.net>3.11.0</libs.commons.net>
 
-        <libs.jetty>9.4.44.v20210927</libs.jetty>
+        <libs.jetty>9.4.52.v20230823</libs.jetty>
         <libs.jersey>2.35</libs.jersey>
-        <libs.jackson>2.14.1</libs.jackson>
+        <libs.jackson>2.14.3</libs.jackson>
         <libs.javassist>3.27.0-GA</libs.javassist>
         <libs.slf4j>1.7.35</libs.slf4j>
         <libs.guava>33.3.1-jre</libs.guava>
@@ -126,7 +126,7 @@
         <!-- test dependecies -->
         <libs.junit>4.13.2</libs.junit>
         <libs.junitparams>1.1.1</libs.junitparams>
-        <libs.wiremock>2.35.0</libs.wiremock>
+        <libs.wiremock>2.35.2</libs.wiremock>
         <libs.powermock>2.0.9</libs.powermock>
         <libs.objenesis>3.0.1</libs.objenesis>
         <libs.hamcrest>2.2</libs.hamcrest>

From 137955e58d9833ab527cfb4758f06137a4ed8259 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niccol=C3=B2=20Maltoni?= <niccolo.maltoni@diennea.com>
Date: Sun, 20 Oct 2024 17:21:23 +0200
Subject: [PATCH 23/23] build: update Maven Wrapper

---
 .mvn/wrapper/maven-wrapper.properties | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mvn/wrapper/maven-wrapper.properties b/.mvn/wrapper/maven-wrapper.properties
index 48a56c99a..d58dfb70b 100644
--- a/.mvn/wrapper/maven-wrapper.properties
+++ b/.mvn/wrapper/maven-wrapper.properties
@@ -16,4 +16,4 @@
 # under the License.
 wrapperVersion=3.3.2
 distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.6/apache-maven-3.9.6-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip