Security: remediate 22 open Dependabot alerts (Phase 0 dependency bumps) - #4924

Open

rafaelbey wants to merge 14 commits into

Bump aquasecurity/trivy-action to 0.35.0, pinned by commit SHA (CVE-2026-33634)
rafaelbey
committed
Bump redshift-jdbc42 2.0.0.3 -> 2.2.2 (CVE-2026-8178, CVE-2024-32888, CVE-2022-41828)
rafaelbey
committed
Bump postgresql driver 42.7.4 -> 42.7.11 (CVE-2026-42198, CVE-2025-49146)
rafaelbey
committed
Bump logback 1.2.3 -> 1.2.13 (CVE-2023-6378, CVE-2021-42550)
rafaelbey
committed
Bump jetty 9.4.44.v20210927 -> 9.4.57.v20241219 (CVE-2024-13009 and 4 medium CVEs)
rafaelbey
committed
Bump json-smart 2.4.7 -> 2.5.2 (CVE-2023-1370)
rafaelbey
committed
Bump protobuf-java 3.25.3 -> 3.25.5 (CVE-2024-7254)
rafaelbey
committed
Bump commons-io 2.7 -> 2.16.1 (CVE-2024-47554)
rafaelbey
committed
Bump classgraph 4.8.25 -> 4.8.184 (CVE-2021-47621)
rafaelbey
committed
Bump minio 8.5.5 -> 8.6.0 (CVE-2025-59952)
rafaelbey
committed
Bump checkstyle 8.25 -> 8.29 (CVE-2019-10782)
rafaelbey
committed

Provide feedback