NIFI-15231 - Bump Spring Security to 6.5.7, Spring Integration to 6.5.4, OkHTTP to 5.3.2, and others

[pvillard31]

Summary

NIFI-15231 - Bump Spring Security to 6.5.7, Spring Integration to 6.5.4, OkHTTP to 5.3.2, and others

• Spring Integration from 6.5.3 to 6.5.4 - https://github.com/spring-projects/spring-integration/releases/tag/v6.5.4
• Spring Security from 6.5.6 to 6.5.7 - https://github.com/spring-projects/spring-security/releases/tag/6.5.7
• Gremlin from 3.7.4 to 3.8.0 - https://github.com/apache/tinkerpop/blob/3.8.0/CHANGELOG.asciidoc#release-3-8-0
• AWS SDK v2 from 2.38.7 to 2.38.9 - https://github.com/aws/aws-sdk-java-v2/blob/master/CHANGELOG.md
• Apache Commons Lang3 from 3.19.0 to 3.20.0 - https://commons.apache.org/proper/commons-lang/changes.html#a3.20.0
• OkHTTP from 5.3.1 to 5.3.2 - https://github.com/square/okhttp/blob/master/CHANGELOG.md#version-532
• Okio from 3.16.3 to 3.16.4 - https://github.com/square/okio/blob/master/CHANGELOG.md#version-3164

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

• Apache NiFi Jira issue created

Pull Request Tracking

• Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
• Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

• Pull Request based on current revision of the main branch
• Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

• Build completed using ./mvnw clean install -P contrib-check
  • JDK 21
  • JDK 25

Licensing

• New dependencies are compatible with the Apache License 2.0 according to the License Policy
• New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

• Documentation formatting appears as expected in rendered files

[dan-s1]

Due to the Gremlin upgrade there is a deprecation seen in the logs:

2025-11-19T10:56:34.3714519Z [WARNING] /home/runner/work/nifi/nifi/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java:[523,64] [deprecation] withRemote(RemoteConnection) in AnonymousTraversalSource has been deprecated
2025-11-19T10:56:34.3717142Z   where T is a type-variable:
2025-11-19T10:56:34.3717977Z     T extends TraversalSource declared in class AnonymousTraversalSource
2025-11-19T10:56:34.3720324Z [WARNING] /home/runner/work/nifi/nifi/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java:[525,64] [deprecation] withRemote(RemoteConnection) in AnonymousTraversalSource has been deprecated
2025-11-19T10:56:34.3722737Z   where T is a type-variable:
2025-11-19T10:56:34.3723542Z     T extends TraversalSource declared in class AnonymousTraversalSource 

Please replace the deprecated withRemote method with the with method (sorry too many uses of the word with :) ) as seen in the javadocs

[pvillard31]

done