chore(deps): bump the gradle-minor-patch group with 26 updates

ai/build.gradle

@@ -19,7 +19,7 @@ dependencies {
     api "org.springframework.ai:spring-ai-bedrock-converse:${revSpringAI}"
     api "org.springframework.ai:spring-ai-ollama:${revSpringAI}"
 
-    api "com.google.auth:google-auth-library-oauth2-http:1.33.0"
+    api "com.google.auth:google-auth-library-oauth2-http:1.48.0"
     api "com.networknt:json-schema-validator:${revJSonSchemaValidator}"
 
     api("io.modelcontextprotocol.sdk:mcp-core:${revMCP}")
@@ -35,7 +35,7 @@ dependencies {
         exclude group: "com.openhtmltopdf", module: "openhtmltopdf-pdfbox"
         exclude group: "de.rototor.pdfbox", module: "graphics2d"
     }
-    implementation "org.apache.pdfbox:pdfbox:3.0.5"
+    implementation "org.apache.pdfbox:pdfbox:3.0.7"
 
     //Vector Databases
 

annotations-processor/build.gradle

@@ -5,9 +5,9 @@ sourceSets {
 
 dependencies {
     implementation project(':conductor-annotations')
-    api 'com.google.guava:guava:33.5.0-jre'
+    api 'com.google.guava:guava:33.6.0-jre'
     api 'com.squareup:javapoet:1.13.0'
-    api 'com.github.jknack:handlebars:4.5.0'
+    api 'com.github.jknack:handlebars:4.5.2'
     api "com.google.protobuf:protobuf-java:${revProtoBuf}"
     api 'jakarta.annotation:jakarta.annotation-api:2.1.1'
     api gradleApi()

build.gradle

@@ -107,16 +107,16 @@ allprojects {
         implementation('org.apache.logging.log4j:log4j-web')
         implementation "com.fasterxml.jackson.datatype:jackson-datatype-jsr310"
         implementation "com.networknt:json-schema-validator:${revJSonSchemaValidator}"
-        compileOnly 'org.projectlombok:lombok:1.18.42'
+        compileOnly 'org.projectlombok:lombok:1.18.46'
 
-        annotationProcessor 'org.projectlombok:lombok:1.18.42'
+        annotationProcessor 'org.projectlombok:lombok:1.18.46'
         annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'
 
         testImplementation('org.springframework.boot:spring-boot-starter-test')
         testImplementation('org.springframework.boot:spring-boot-starter-log4j2')
         testImplementation 'junit:junit'
         testImplementation "org.junit.vintage:junit-vintage-engine"
-        testAnnotationProcessor 'org.projectlombok:lombok:1.18.42'
+        testAnnotationProcessor 'org.projectlombok:lombok:1.18.46'
 
         // PINNED (#964): jettison must stay at exactly 1.5.4 — `strictly` prevents both
         // downgrade and upgrade. No known compatible higher version has been validated.
@@ -129,7 +129,7 @@ allprojects {
 
         // Security: minimum version floors for CVE-patched transitive dependencies.
         constraints {
-            implementation('org.apache.tika:tika-core:3.2.2') {
+            implementation('org.apache.tika:tika-core:3.3.1') {
                 because 'CVE-2025-66516: tika-parser-pdf-module vulnerability'
             }
             implementation('commons-beanutils:commons-beanutils:1.11.0') {

core/build.gradle

@@ -76,7 +76,7 @@ dependencies {
 
     // Benchmark-only deps (test scope so they don't ship with production):
     // Rhino — MPL 2.0, JVM-bytecode-compiled JS engine
-    testImplementation "org.mozilla:rhino:1.8.0"
+    testImplementation "org.mozilla:rhino:1.9.1"
     // Javet — Apache 2.0 JNI bindings to V8 (BSD-3-Clause). Native lib for this host's
     // arch only; add other -macos-x86_64 / -linux-x86_64 / -linux-arm64 variants for prod.
     testImplementation "com.caoccao.javet:javet:4.1.2"

e2e/build.gradle

@@ -3,17 +3,17 @@ plugins {
 }
 
 dependencies {
-    testImplementation 'org.conductoross:conductor-client:5.0.1'
-    testImplementation 'org.conductoross:java-sdk:5.0.1'
+    testImplementation 'org.conductoross:conductor-client:5.0.3'
+    testImplementation 'org.conductoross:java-sdk:5.0.3'
     testImplementation 'org.junit.jupiter:junit-jupiter-api'
     testRuntimeOnly  'org.junit.jupiter:junit-jupiter-engine'
     testImplementation 'org.junit.jupiter:junit-jupiter-params'
-    testImplementation 'org.awaitility:awaitility:4.2.0'
+    testImplementation 'org.awaitility:awaitility:4.3.0'
     testImplementation 'org.apache.logging.log4j:log4j-slf4j2-impl'
-    testImplementation 'org.projectlombok:lombok:1.18.30'
-    testAnnotationProcessor 'org.projectlombok:lombok:1.18.30'
-    testImplementation 'org.apache.commons:commons-lang3:3.14.0'
-    testImplementation 'org.apache.commons:commons-compress:1.26.1'
+    testImplementation 'org.projectlombok:lombok:1.18.46'
+    testAnnotationProcessor 'org.projectlombok:lombok:1.18.46'
+    testImplementation 'org.apache.commons:commons-lang3:3.20.0'
+    testImplementation 'org.apache.commons:commons-compress:1.28.0'
     testImplementation 'com.squareup.okhttp3:okhttp:4.12.0'
 }
 

es7-persistence/build.gradle

@@ -30,7 +30,7 @@ dependencies {
     implementation "org.elasticsearch.client:elasticsearch-rest-client:${revElasticSearch7}"
     implementation "org.elasticsearch.client:elasticsearch-rest-high-level-client:${revElasticSearch7}"
 
-    testImplementation "net.java.dev.jna:jna:5.7.0"
+    testImplementation "net.java.dev.jna:jna:5.19.1"
     testImplementation "org.awaitility:awaitility:${revAwaitility}"
     testImplementation "org.testcontainers:elasticsearch:${revTestContainer}"
     testImplementation project(':conductor-test-util').sourceSets.test.output

es8-persistence/build.gradle

@@ -36,7 +36,7 @@ dependencies {
     implementation "org.elasticsearch.client:elasticsearch-rest-client:${revElasticSearch8}"
     implementation "co.elastic.clients:elasticsearch-java:${revElasticSearch8}"
 
-    testImplementation "net.java.dev.jna:jna:5.7.0"
+    testImplementation "net.java.dev.jna:jna:5.19.1"
     testImplementation "org.awaitility:awaitility:${revAwaitility}"
     testImplementation "org.testcontainers:elasticsearch:${revTestContainer}"
     testImplementation project(':conductor-test-util').sourceSets.test.output

gcs-storage/build.gradle

@@ -3,5 +3,5 @@ dependencies {
     implementation project(':conductor-core')
     compileOnly 'org.springframework.boot:spring-boot-starter'
 
-    implementation 'com.google.cloud:google-cloud-storage:2.36.1'
+    implementation 'com.google.cloud:google-cloud-storage:2.69.0'
 }

grpc/build.gradle

@@ -13,14 +13,14 @@
 
 buildscript {
     dependencies {
-        classpath 'com.google.protobuf:protobuf-gradle-plugin:0.9.5'
+        classpath 'com.google.protobuf:protobuf-gradle-plugin:0.10.0'
     }
 }
 
 plugins {
     id 'java'
     id 'idea'
-    id "com.google.protobuf" version "0.9.6"
+    id "com.google.protobuf" version "0.10.0"
 }
 
 repositories{
@@ -45,16 +45,16 @@ dependencies {
 // PINNED (#964): protoc must match protobuf-java 3.x used by grpc-protobuf:1.73.0.
 // Using protoc 4.x generates code incompatible with the 3.x runtime.
 // See: https://github.com/grpc/grpc-java/issues/12246
-def artifactName = 'com.google.protobuf:protoc:3.25.5'
+def artifactName = 'com.google.protobuf:protoc:3.25.9'
 switch (org.gradle.internal.os.OperatingSystem.current()) {
     case org.gradle.internal.os.OperatingSystem.LINUX:
-        artifactName = "com.google.protobuf:protoc:3.25.5"
+        artifactName = "com.google.protobuf:protoc:3.25.9"
         break;
     case org.gradle.internal.os.OperatingSystem.MAC_OS:
-        artifactName = "com.google.protobuf:protoc:3.25.5"
+        artifactName = "com.google.protobuf:protoc:3.25.9"
         break;
     case org.gradle.internal.os.OperatingSystem.WINDOWS:
-        artifactName = "com.google.protobuf:protoc:3.25.5"
+        artifactName = "com.google.protobuf:protoc:3.25.9"
         break;
 }
 

kafka-event-queue/build.gradle

@@ -28,10 +28,10 @@ dependencies {
     implementation 'org.apache.kafka:kafka-clients:3.5.1'
 
     // Add SLF4J API for logging
-    implementation 'org.slf4j:slf4j-api:2.0.9'
+    implementation 'org.slf4j:slf4j-api:2.0.18'
 
     // Add SLF4J binding for logging with Logback
-    runtimeOnly 'ch.qos.logback:logback-classic:1.5.21'
+    runtimeOnly 'ch.qos.logback:logback-classic:1.5.34'
 }
 
 // test {

os-persistence-v2/build.gradle

@@ -22,14 +22,14 @@ dependencies {
     implementation "org.apache.commons:commons-lang3"
     implementation "com.google.guava:guava:${revGuava}"
 
-    implementation 'com.fasterxml.jackson.core:jackson-core:2.18.0'
+    implementation 'com.fasterxml.jackson.core:jackson-core:2.22.0'
 
-    implementation 'org.opensearch.client:opensearch-java:2.18.0'
-    implementation 'org.apache.httpcomponents.client5:httpclient5:5.2.1'
-    implementation "org.opensearch.client:opensearch-rest-client:2.18.0"
-    implementation "org.opensearch.client:opensearch-rest-high-level-client:2.18.0"
+    implementation 'org.opensearch.client:opensearch-java:2.19.5'
+    implementation 'org.apache.httpcomponents.client5:httpclient5:5.6.1'
+    implementation "org.opensearch.client:opensearch-rest-client:2.19.5"
+    implementation "org.opensearch.client:opensearch-rest-high-level-client:2.19.5"
 
-    testImplementation "net.java.dev.jna:jna:5.7.0"
+    testImplementation "net.java.dev.jna:jna:5.19.1"
     testImplementation "org.awaitility:awaitility:${revAwaitility}"
     testImplementation "org.opensearch:opensearch-testcontainers:2.1.2"
     testImplementation "org.testcontainers:testcontainers:2.0.5"

os-persistence-v3/build.gradle

@@ -28,14 +28,14 @@ dependencies {
     implementation "org.apache.commons:commons-lang3"
     implementation "com.google.guava:guava:${revGuava}"
 
-    implementation 'com.fasterxml.jackson.core:jackson-core:2.18.0'
+    implementation 'com.fasterxml.jackson.core:jackson-core:2.22.0'
 
-    implementation 'org.opensearch.client:opensearch-java:3.5.0'
-    implementation 'org.apache.httpcomponents.client5:httpclient5:5.3.1'
-    implementation "org.opensearch.client:opensearch-rest-client:3.5.0"
-    implementation "org.opensearch.client:opensearch-rest-high-level-client:3.5.0"
+    implementation 'org.opensearch.client:opensearch-java:2.19.5'
+    implementation 'org.apache.httpcomponents.client5:httpclient5:5.6.1'
+    implementation "org.opensearch.client:opensearch-rest-client:2.19.5"
+    implementation "org.opensearch.client:opensearch-rest-high-level-client:2.19.5"
 
-    testImplementation "net.java.dev.jna:jna:5.7.0"
+    testImplementation "net.java.dev.jna:jna:5.19.1"
     testImplementation "org.awaitility:awaitility:${revAwaitility}"
     testImplementation "org.opensearch:opensearch-testcontainers:2.1.2"
     testImplementation "org.testcontainers:testcontainers:2.0.5"

redis-configuration/build.gradle

@@ -20,7 +20,7 @@ dependencies {
     //implementation "jakarta.annotation:jakarta.annotation-api:${revJakartaAnnotation}"
 
     //Test
-    testCompileOnly 'org.projectlombok:lombok:1.18.42'
+    testCompileOnly 'org.projectlombok:lombok:1.18.46'
     testImplementation 'org.springframework.boot:spring-boot-test'
     testImplementation "org.testcontainers:testcontainers:${revTestContainer}"
     testImplementation "com.google.guava:guava:${revGuava}"

rest/build.gradle

@@ -9,5 +9,5 @@ dependencies {
     implementation "io.projectreactor.netty:reactor-netty-http:${revReactor}"
     implementation "org.springdoc:springdoc-openapi-starter-webmvc-ui:${revSpringDoc}"
 
-    testImplementation "io.projectreactor:reactor-test:3.5.11"
+    testImplementation "io.projectreactor:reactor-test:3.8.6"
 }

sqlite-persistence/build.gradle

@@ -17,7 +17,7 @@ dependencies {
     implementation 'org.flywaydb:flyway-core:11.3.1'
 
     // https://mvnrepository.com/artifact/org.xerial/sqlite-jdbc
-    implementation 'org.xerial:sqlite-jdbc:3.49.0.0'
+    implementation 'org.xerial:sqlite-jdbc:3.53.2.0'
 
 
     implementation "org.springframework.boot:spring-boot-starter-jdbc"

test-harness/build.gradle

@@ -57,8 +57,8 @@ dependencies {
         // a netty version that conflicts with the one already on the test-harness classpath.
         exclude group: 'com.azure', module: 'azure-core-http-netty'
     }
-    testImplementation 'com.azure:azure-core-http-jdk-httpclient:1.0.3'
-    testImplementation 'com.google.cloud:google-cloud-storage:2.36.1'
+    testImplementation 'com.azure:azure-core-http-jdk-httpclient:1.1.5'
+    testImplementation 'com.google.cloud:google-cloud-storage:2.69.0'
     testImplementation 'com.google.http-client:google-http-client:1.44.1'
     testImplementation project(':conductor-gcs-storage')
     testImplementation project(':conductor-local-file-storage')
@@ -131,13 +131,13 @@ configurations {
 }
 
 dependencies {
-    conductorClientRaw('org.conductoross:conductor-client:5.0.1') { transitive = false }
+    conductorClientRaw('org.conductoross:conductor-client:5.0.3') { transitive = false }
 }
 
 // Strip bundled com.netflix.conductor.common.* classes from the fat JAR.
 // These conflict with the project's own conductor-common module.
 task stripConductorClient(type: Jar) {
-    archiveBaseName = 'conductor-client-5.0.1-stripped'
+    archiveBaseName = 'conductor-client-5.0.3-stripped'
     destinationDirectory = layout.buildDirectory.dir('stripped-libs')
     duplicatesStrategy = DuplicatesStrategy.EXCLUDE
     from(zipTree(configurations.conductorClientRaw.singleFile)) {
@@ -201,15 +201,15 @@ dependencies {
     functionalTestImplementation 'org.junit.jupiter:junit-jupiter-params'
 
     // Lombok (used by e2e test classes)
-    functionalTestCompileOnly 'org.projectlombok:lombok:1.18.30'
-    functionalTestAnnotationProcessor 'org.projectlombok:lombok:1.18.30'
+    functionalTestCompileOnly 'org.projectlombok:lombok:1.18.46'
+    functionalTestAnnotationProcessor 'org.projectlombok:lombok:1.18.46'
 
     // Awaitility 4.x (e2e uses 4.2.0; test-harness has 3.x)
-    functionalTestImplementation 'org.awaitility:awaitility:4.2.0'
+    functionalTestImplementation 'org.awaitility:awaitility:4.3.0'
 
     // Commons used by e2e utilities
-    functionalTestImplementation 'org.apache.commons:commons-lang3:3.14.0'
-    functionalTestImplementation 'org.apache.commons:commons-compress:1.26.1'
+    functionalTestImplementation 'org.apache.commons:commons-lang3:3.20.0'
+    functionalTestImplementation 'org.apache.commons:commons-compress:1.28.0'
 }
 
 task functionalTest(type: Test) {